Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa
File: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (raw, json)
Hash identifier: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=
Subject key identifier: 5E:9A:FD:B1:18:1B:3E:66:55:88:2F:01:53:54:07:60:24:40:9B:78
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 01941F8C48A0EA134E0CAF26DAD9CA58FAF5
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42005
IP address blocks: 92.240.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:a0:ea:13:4e:0c:af:26:da:d9:ca:58:fa:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e9afdb1181b3e6655882f015354076024409b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:42:0f:70:19:63:aa:91:e7:97:7c:bb:8a:
0f:7d:40:32:f9:46:87:51:6e:c1:50:de:e1:b5:31:
f1:6f:80:53:87:09:e9:aa:07:ec:ee:9c:3f:c3:3f:
eb:37:95:bd:57:59:96:0d:3c:2a:05:ee:4a:73:24:
2d:39:bc:39:73:0e:d4:0d:85:72:fb:52:0e:0d:d3:
74:cb:a6:ff:95:51:24:c1:31:f6:16:8c:85:32:d1:
01:05:e6:18:b4:12:72:ea:f3:86:69:be:1b:9b:84:
72:e9:a4:48:a8:87:84:b5:74:37:ea:2b:f7:36:93:
48:5c:1a:89:db:cb:f7:12:61:f0:a2:b9:43:30:ac:
5e:3d:fb:e4:37:3a:15:f6:37:05:9f:42:80:51:9c:
df:73:27:df:16:ae:22:55:6a:d0:a2:0e:57:9b:3b:
e2:49:2e:db:5f:d3:ac:be:77:62:4e:90:f5:f6:c4:
04:53:cc:70:39:94:f7:b5:10:b5:f3:b7:ab:42:84:
cb:ba:f8:9e:e7:ef:d4:12:87:52:01:ce:74:cd:1f:
d7:64:6a:20:f3:4b:49:68:80:3d:3c:2a:86:65:4a:
c9:75:08:9e:60:c6:10:b7:ce:10:73:30:d9:83:e1:
0f:3b:7b:d5:c9:fa:c6:92:aa:1a:fb:d3:60:bc:0f:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:FD:B1:18:1B:3E:66:55:88:2F:01:53:54:07:60:24:40:9B:78
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:11:d7:03:c0:3c:00:f6:f2:ee:66:97:3a:29:34:31:c3:6e:
11:69:c6:f1:a3:5a:5a:f6:7b:b6:33:2d:c9:cb:fc:de:82:21:
92:9f:b3:20:fb:aa:7c:52:1e:ec:01:ee:c8:a9:ae:98:82:3a:
3c:ef:b7:7e:09:c1:67:5f:db:51:9c:43:f5:e5:4f:51:4c:07:
e9:91:51:36:8b:19:f8:4a:8c:5b:07:d2:54:a7:88:ef:53:e6:
ef:2b:5c:0a:bc:51:d6:48:54:bd:60:41:9a:c7:73:e4:44:f5:
c7:40:8d:9f:a2:f7:e9:f0:57:e7:ff:2a:43:50:9c:17:2c:6c:
b1:c8:af:17:36:49:f4:ef:3f:60:b6:c8:01:dc:f9:79:9a:ed:
48:d7:13:d9:7c:41:84:f1:4a:3f:ae:78:f1:4e:32:8c:4a:79:
49:bc:62:71:f3:05:91:99:a2:48:e3:83:ca:e5:c6:3b:12:4b:
10:44:05:c0:36:cf:7e:84:2f:01:ab:2b:1a:8f:c1:fd:71:84:
7b:d3:77:9d:c4:7c:9f:e9:f2:ee:8f:dc:42:c5:2f:f6:3e:4c:
c7:44:58:f7:12:83:42:8e:13:93:aa:f4:cc:98:f0:0d:57:95:
60:3d:45:f5:48:d0:4b:13:bf:e4:2d:1b:e2:62:47:c3:43:56:
cb:55:d6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:30 2025 by rpki-client