Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/4eIG2_S0MY8ZkdjgXAZN6wwqx80.roa
File: 4eIG2_S0MY8ZkdjgXAZN6wwqx80.roa (raw, json)
Hash identifier: f0G/zyEwLCdeF48Oa1+BqjMkK9qMKFX4giwLxV6m/s8=
Subject key identifier: E1:E2:06:DB:F4:B4:31:8F:19:91:D8:E0:5C:06:4D:EB:0C:2A:C7:CD
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018DECAABAAA07946A2EFEC382BCDCBB5C61
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/4eIG2_S0MY8ZkdjgXAZN6wwqx80.roa
Signing time: Tue 27 Feb 2024 22:23:48 +0000
ROA not before: Tue 27 Feb 2024 22:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396073
IP address blocks: 92.118.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:aa:ba:aa:07:94:6a:2e:fe:c3:82:bc:dc:bb:5c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Feb 27 22:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1e206dbf4b4318f1991d8e05c064deb0c2ac7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:4e:91:b1:4c:eb:2b:92:75:86:82:58:e0:
8b:66:cf:2e:90:d0:2c:d8:08:f4:11:88:9e:d2:41:
ac:e4:a0:c9:ed:d4:bf:43:39:50:46:7c:88:6c:35:
86:19:31:e1:33:b8:da:19:df:64:17:52:e4:6d:29:
2e:08:10:74:2a:74:59:b1:d2:d2:1c:d3:e2:bb:ad:
fa:79:6c:49:2b:74:63:d1:50:d4:1e:71:fa:03:b7:
02:42:df:c2:1e:92:0d:a3:7e:a7:1f:2c:27:7b:9e:
17:5d:69:78:db:6e:8e:74:d3:99:4a:87:4a:91:f0:
2a:75:31:dd:7c:69:aa:89:0b:a8:2f:5b:6a:f2:af:
9f:82:56:a1:ae:8d:28:ad:c9:71:4b:79:26:ef:da:
1b:15:66:81:40:15:b2:6f:b7:86:51:34:c1:d8:f9:
77:87:ba:d2:fa:54:d5:5e:27:0f:12:83:08:1d:dd:
79:1f:93:4a:be:cc:60:ef:94:8c:06:07:df:01:1f:
67:3a:e0:c3:81:db:6e:e0:ca:d7:84:c6:59:44:c1:
4d:22:36:7e:63:9b:a1:96:7f:99:23:d2:a3:72:29:
1a:8a:67:76:d8:0e:52:6a:11:31:4b:c2:c0:73:0b:
98:b6:86:c0:fd:02:af:a5:7f:bc:81:b7:01:19:c6:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E2:06:DB:F4:B4:31:8F:19:91:D8:E0:5C:06:4D:EB:0C:2A:C7:CD
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/4eIG2_S0MY8ZkdjgXAZN6wwqx80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:7f:15:19:21:6a:0c:d2:6b:ca:90:a4:73:8a:bd:cd:3f:6c:
f2:91:f1:eb:61:a1:aa:28:03:81:1f:10:22:f0:d2:1c:56:52:
87:1d:9c:d8:60:47:98:66:cd:e2:25:14:95:ce:5d:e3:5e:bf:
b9:02:19:ee:7c:57:1e:45:c7:c5:04:44:66:21:a0:0a:64:09:
14:84:46:e6:cd:48:64:14:c8:53:0e:c1:ff:9a:77:f3:3f:d2:
ad:c7:7b:e5:92:5a:c5:22:55:39:fd:60:c0:cb:9a:a6:e8:43:
ec:d1:f1:8e:5d:6e:74:6d:fa:7a:5a:14:d1:70:6e:ad:ce:a2:
56:e4:d9:d5:56:01:61:3c:57:a6:a3:76:95:0e:33:a6:99:73:
c4:01:c8:1b:46:4f:6c:0b:18:aa:c6:ed:3a:ad:8f:c8:75:9e:
3e:97:a0:87:03:5f:51:d8:6f:4a:7c:51:7a:5f:70:bd:23:c7:
ab:55:2c:29:b1:c8:82:3b:f6:89:26:c9:de:d4:26:f8:31:b8:
d1:18:38:77:31:fd:4d:82:2a:2a:63:31:7a:ce:ac:7d:72:ea:
6a:f8:a8:b6:1e:29:86:de:20:b0:b3:0f:75:35:44:69:f3:43:
90:0a:ee:49:77:98:2d:52:5b:72:a5:54:16:4b:c1:e4:ed:4a:
25:e5:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:29 2025 by rpki-client