Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/f1xRseMdUFu4QvFEOI5Q3mFmAao.roa
File: f1xRseMdUFu4QvFEOI5Q3mFmAao.roa (raw, json)
Hash identifier: cs1wSfHGNxiOs8QjxieojTRnShjdNMIHIlrBmNf3VuI=
Subject key identifier: 7F:5C:51:B1:E3:1D:50:5B:B8:42:F1:44:38:8E:50:DE:61:66:01:AA
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244537CE2A790E2B65ECC81C29D641D9
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/f1xRseMdUFu4QvFEOI5Q3mFmAao.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214883
IP address blocks: 92.119.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:37:ce:2a:79:0e:2b:65:ec:c8:1c:29:d6:41:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f5c51b1e31d505bb842f144388e50de616601aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:fd:c2:ce:0c:e3:31:75:f0:e2:55:e1:dd:
aa:8b:bc:1e:0b:15:66:63:27:35:b2:3c:12:80:14:
5f:d3:b0:63:ae:b4:80:90:b0:53:51:30:b0:07:b7:
34:a9:b1:00:ec:50:5c:38:d7:61:bf:a9:f5:15:7c:
11:09:06:80:78:0e:c3:ac:36:1f:49:cd:d0:62:c9:
ae:de:13:e6:0a:d0:08:ee:b5:3c:3c:cd:86:75:67:
ad:5a:67:ca:0e:31:75:0d:ad:42:bf:6f:b1:9a:7b:
a0:7a:c4:7e:e4:3a:f2:fb:c3:5d:a4:4b:79:10:62:
23:00:75:38:27:db:1f:58:9b:48:89:6e:93:fc:b5:
a5:70:57:dd:8b:9b:7b:7c:74:2c:7c:d6:08:e7:70:
5f:f8:0c:02:64:7b:0a:73:b3:70:1b:c8:fc:e8:1d:
54:07:84:20:63:b4:34:ab:d7:18:d5:f0:23:af:af:
86:58:c3:8b:db:40:e2:55:66:fe:f7:17:2f:0e:31:
e9:cd:f9:09:59:7e:49:b8:2b:8c:ca:f7:59:1d:c1:
23:6e:93:cf:30:6e:a3:1a:b9:61:dd:cb:80:21:dd:
aa:1b:c1:78:b7:9b:c0:1f:e6:a6:bb:65:3e:32:5b:
20:5a:1f:dd:37:e3:0f:20:04:a3:04:79:29:c9:b9:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:51:B1:E3:1D:50:5B:B8:42:F1:44:38:8E:50:DE:61:66:01:AA
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/f1xRseMdUFu4QvFEOI5Q3mFmAao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.160.0/24
Signature Algorithm: sha256WithRSAEncryption
09:19:20:2e:b5:3a:fc:82:a0:db:fd:d9:4d:37:58:8b:79:7f:
47:ed:b4:8b:4e:54:df:79:b3:be:d8:00:4e:7a:c0:c7:ba:de:
6c:84:61:87:db:58:0d:55:ba:78:a4:59:31:8a:80:58:05:a8:
7c:bf:6e:69:d2:82:95:ba:d7:1b:fd:c4:c6:94:c7:e9:90:80:
8b:f3:67:0c:ca:65:95:96:4a:30:11:5c:66:ce:2f:e1:9a:3d:
25:ff:4f:19:0a:9a:a7:d9:97:7c:fa:32:f6:d2:db:8c:75:2b:
db:54:53:a2:e9:82:52:13:ba:b7:d0:d6:07:a8:c9:15:dd:26:
99:6b:57:de:38:9b:b4:53:da:01:6a:f9:5c:2e:aa:16:bb:0a:
a5:fe:2c:fa:46:eb:e1:d7:63:a7:84:0f:74:ba:ae:c2:5c:ea:
7b:6c:0c:83:66:ed:2d:58:c9:cd:80:b6:54:6a:3f:f0:46:67:
bc:84:82:63:34:ba:36:95:ab:23:57:67:11:49:7e:53:a9:67:
fe:04:4d:38:5f:53:2b:a5:a0:cf:3a:5a:70:dc:a4:96:07:2f:
aa:a4:27:f4:98:f6:a8:89:23:61:cf:de:f2:b9:ef:fa:90:c0:
8a:03:04:b1:24:50:42:f1:60:8f:4f:9b:96:75:cd:05:4f:ce:
2a:d1:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:51:33 2025 by rpki-client