Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3NjmCDvLdZIxA2R0nWAQAyFgB88.roa
File: 3NjmCDvLdZIxA2R0nWAQAyFgB88.roa (raw, json)
Hash identifier: Ze+Yo80cMvmstP506/S2lWOywynI521VjNGseGa4FSs=
Subject key identifier: DC:D8:E6:08:3B:CB:75:92:31:03:64:74:9D:60:10:03:21:60:07:CF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452EAB4F54CD924EA64AAD06A9E70C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3NjmCDvLdZIxA2R0nWAQAyFgB88.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206728
IP address blocks: 92.119.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2e:ab:4f:54:cd:92:4e:a6:4a:ad:06:a9:e7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcd8e6083bcb7592310364749d601003216007cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:52:50:77:26:76:03:24:c8:1a:79:0d:1c:
e4:4a:95:c2:33:62:a9:bb:d7:5a:7c:a4:a0:f4:af:
a5:6d:20:77:f1:6c:d0:cc:bc:ba:9a:c3:9f:da:20:
ca:b7:91:2f:57:d9:c7:75:62:a6:6e:13:a6:f2:d7:
3a:c3:08:2e:9e:58:19:a0:05:9a:4d:29:7f:4b:58:
1d:49:65:72:26:5e:f8:d0:36:be:aa:a6:21:2d:f0:
78:ee:1d:da:ff:c8:fa:80:e7:32:26:b9:e2:f6:3a:
7d:fb:c2:50:13:17:07:e2:dc:a5:07:8c:e2:4c:8a:
fa:b9:72:b9:fc:98:0e:f9:c3:88:1a:ca:d7:73:2c:
e7:dc:2e:69:ca:4e:2d:e5:52:00:da:7e:d1:69:77:
b8:d1:6e:9e:a5:62:12:97:c0:8a:de:9d:97:87:00:
e6:9c:a7:66:5b:15:6f:f8:00:49:79:b3:ed:ed:2b:
12:61:aa:3d:f6:14:6a:5b:ad:27:d2:30:db:68:f0:
cf:d4:72:3c:8d:ab:81:4d:ed:c0:b0:5f:a5:33:c9:
fb:08:71:0b:bd:e4:67:a3:2d:2c:d2:46:2f:ea:54:
5c:76:e0:36:ae:76:6a:8a:69:02:1f:d4:dd:bc:71:
c7:25:42:5c:38:f4:27:db:21:89:b2:08:cc:ff:f1:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D8:E6:08:3B:CB:75:92:31:03:64:74:9D:60:10:03:21:60:07:CF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3NjmCDvLdZIxA2R0nWAQAyFgB88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.194.0/23
Signature Algorithm: sha256WithRSAEncryption
72:99:62:8a:91:8a:ac:02:a7:ec:9a:3d:16:6d:85:3e:ac:65:
6c:31:2d:47:f9:3f:82:c4:65:8e:ba:cb:53:10:66:98:99:8a:
86:6d:4c:32:a2:2b:cc:61:f7:10:a2:7c:d7:11:3f:e1:1f:04:
7a:8a:b8:18:f7:47:8d:97:22:d5:4c:72:31:b2:e4:2f:b7:03:
08:25:3c:00:6d:16:46:be:9b:e8:73:c1:54:5a:63:e1:79:db:
00:0d:cd:a8:77:3b:30:da:6f:c4:f9:27:8b:57:4a:93:89:8f:
6f:0e:84:47:31:c7:7a:56:5a:22:21:f6:aa:c4:49:b2:98:20:
f3:9e:ac:8e:68:fb:6d:38:ff:eb:93:8d:1b:18:4e:cc:7d:5e:
6c:a9:42:1d:73:4c:6b:18:6b:52:13:90:ca:d0:37:67:93:12:
f4:c2:3d:a8:41:e0:5d:0f:b4:bf:1b:d2:93:4f:14:bf:c8:3b:
4d:cd:51:e1:c2:93:35:65:3e:79:82:52:b6:b2:7d:be:b9:72:
b5:df:f9:8d:b1:09:ad:7b:69:09:5e:b1:4b:53:49:23:3e:3a:
67:f6:d3:cd:35:f8:16:9b:a8:a8:23:70:d3:7c:d4:6f:c1:0d:
ff:4d:d3:5c:25:af:f2:4a:ce:19:b2:ee:a1:36:aa:04:32:8f:
f5:46:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:35:23 2025 by rpki-client