Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/CBXANdTAH6lHnoZ5K2StzbAV7NQ.roa
File: CBXANdTAH6lHnoZ5K2StzbAV7NQ.roa (raw, json)
Hash identifier: PznuBPAbTWwdWPU+SDJg6l9STDdceLsRjWJ3izhl9/o=
Subject key identifier: 08:15:C0:35:D4:C0:1F:A9:47:9E:86:79:2B:64:AD:CD:B0:15:EC:D4
Certificate issuer: /CN=345b87125acb0251facfd8c0a95b48bc22522146
Certificate serial: 019424B2CCFEA9CEBF2534E9F061737D7D5D
Authority key identifier: 34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/CBXANdTAH6lHnoZ5K2StzbAV7NQ.roa
Signing time: Thu 02 Jan 2025 01:48:04 +0000
ROA not before: Thu 02 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42413
IP address blocks: 91.192.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:cc:fe:a9:ce:bf:25:34:e9:f0:61:73:7d:7d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b87125acb0251facfd8c0a95b48bc22522146
Validity
Not Before: Jan 2 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0815c035d4c01fa9479e86792b64adcdb015ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:dd:c3:6f:85:0f:35:2c:6a:9e:ce:28:d6:
6b:12:99:93:26:bd:57:39:75:7b:d7:28:1f:2c:c4:
6c:22:4f:27:15:95:f4:a3:b3:d2:b7:a1:39:45:b4:
92:00:9c:4a:19:3b:d2:6a:e2:22:0a:b5:d9:0d:14:
fe:16:0d:20:d6:09:96:f5:4e:4b:b9:7b:d2:57:a0:
24:7a:82:10:f6:9f:06:d8:7e:55:0f:b7:2a:a1:d3:
35:82:21:cd:00:b6:af:bc:c9:18:f1:37:16:ae:15:
c2:18:56:58:98:64:df:b4:15:00:88:09:fd:e9:18:
46:54:96:e8:98:90:52:b4:4f:ff:7c:7a:06:c4:43:
78:21:45:f8:16:1e:5b:44:ca:89:68:d0:a3:c9:0f:
6d:94:55:bf:64:7c:a4:a6:be:85:e1:8c:eb:9e:92:
8c:2e:ff:6d:48:ca:48:f4:3c:07:26:7c:18:a1:e6:
73:61:52:94:8f:e8:a1:80:cd:f4:eb:61:80:e0:c5:
07:01:27:e4:ac:f8:4f:2d:29:a2:6d:c6:05:39:46:
d1:7e:d0:2a:78:4e:bb:45:a4:d5:b2:a7:66:f1:b3:
4a:af:a4:41:bb:bf:49:03:f5:ad:e3:2a:ed:bd:3a:
22:59:dc:b0:76:49:f8:77:bb:5c:a6:0c:c5:9c:7f:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:15:C0:35:D4:C0:1F:A9:47:9E:86:79:2B:64:AD:CD:B0:15:EC:D4
X509v3 Authority Key Identifier:
keyid:34:5B:87:12:5A:CB:02:51:FA:CF:D8:C0:A9:5B:48:BC:22:52:21:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFuHElrLAlH6z9jAqVtIvCJSIUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/CBXANdTAH6lHnoZ5K2StzbAV7NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71786a-4637-4364-a742-929287872a53/1/NFuHElrLAlH6z9jAqVtIvCJSIUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:79:1e:f9:f4:b2:c7:11:73:3a:c9:d0:6e:a7:e8:72:e7:4c:
f3:52:01:9d:2c:1c:ff:a5:1d:09:fc:6b:4a:5b:8c:f4:c0:a9:
ce:50:30:b9:35:08:d0:52:dc:98:91:a7:88:e4:10:cc:70:f9:
e3:a7:33:eb:f0:9c:15:e2:5b:c4:5c:a2:a3:3c:cd:bc:8b:7a:
a2:26:b6:a4:14:81:b9:a7:43:e1:bd:e6:b8:23:8c:fa:34:0c:
9c:24:06:b1:a9:65:3f:9e:35:f1:65:6d:04:a5:b3:72:d4:78:
fd:ef:f4:86:9b:cc:58:b7:fe:b0:1e:a0:54:e0:3b:91:2b:df:
86:b3:69:ad:7c:41:bf:0b:dd:c0:7e:68:e1:55:f7:8b:eb:a2:
67:b2:56:da:cf:01:34:5d:f4:55:ea:ed:b8:fc:4a:64:88:06:
67:25:05:64:cf:30:3b:f1:9d:5d:07:8d:ec:c4:57:97:00:13:
c5:aa:c9:dd:2d:79:b0:57:4c:25:bf:81:b9:27:18:65:a0:a3:
c8:8e:c7:fb:fa:ea:a6:3c:0f:21:b3:7e:d5:23:8c:4d:07:da:
c3:54:ba:d2:72:bd:89:b2:2f:05:98:ca:b6:2f:f5:c4:96:78:
4a:ca:01:ba:7f:51:64:4b:d6:2c:e4:43:f7:6b:a2:93:e0:e2:
b0:32:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:36:19 2025 by rpki-client