Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa
File: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (raw, json)
Hash identifier: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=
Subject key identifier: 32:4C:1C:C6:19:93:AA:A9:4E:F7:26:DA:42:35:5D:DD:6C:F1:E7:79
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 01942521403AAC7CF866E69178E064208AA8
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa
Signing time: Thu 02 Jan 2025 03:48:43 +0000
ROA not before: Thu 02 Jan 2025 03:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 92.118.21.0/24 maxlen: 24
92.118.22.0/24 maxlen: 24
92.118.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:40:3a:ac:7c:f8:66:e6:91:78:e0:64:20:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Jan 2 03:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=324c1cc61993aaa94ef726da42355ddd6cf1e779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:ac:0c:f8:ec:e6:33:89:20:ba:e8:21:09:
96:af:76:1a:e5:f4:fb:84:0e:e2:1f:37:2c:86:4c:
6e:aa:93:be:47:ec:2a:91:f0:48:a5:66:a1:09:94:
b1:91:42:2b:f8:c6:be:4b:49:06:19:fc:bd:64:b2:
37:ec:04:e0:80:bc:c2:5e:fe:0f:0c:f0:fc:00:60:
11:2a:b5:61:3d:58:83:bb:ed:35:31:07:09:1a:f5:
5f:03:d0:01:1a:31:d9:3e:c1:db:69:92:0c:41:69:
38:a5:d1:4d:fa:e4:fe:c9:02:33:8c:d6:66:00:5d:
78:ed:53:5d:a8:7f:e1:b7:12:ab:91:d7:e7:e9:03:
4d:be:c6:38:7f:77:0b:41:7f:24:8d:1d:51:f7:89:
63:53:59:47:84:9f:19:8d:10:e1:be:1e:a5:f9:cb:
26:5a:7b:5c:19:f4:9f:5e:90:d6:25:87:38:e9:33:
5b:dc:9a:76:a7:f8:7e:16:81:76:8c:63:1e:be:a1:
76:8d:c4:68:b8:d0:20:ac:55:3e:c9:77:6b:cc:39:
34:51:c5:a5:7f:9a:8a:c2:ac:d5:8b:1d:a6:75:16:
f0:fd:cb:55:d1:d6:ea:85:e7:ec:44:a7:70:de:ba:
c0:47:68:f4:32:3d:c8:e2:89:a2:69:46:23:6c:8c:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:1C:C6:19:93:AA:A9:4E:F7:26:DA:42:35:5D:DD:6C:F1:E7:79
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.21.0-92.118.23.255
Signature Algorithm: sha256WithRSAEncryption
72:35:e2:b8:15:4f:d9:81:04:4a:fd:8f:52:49:45:b8:b1:c0:
2b:b0:9e:20:22:b9:d8:d2:f5:ef:86:4b:22:9b:43:10:02:2b:
a0:75:e9:da:40:86:11:17:93:db:ff:5e:61:e6:cb:85:96:5d:
2d:f6:47:c3:ed:fe:1b:94:74:94:ec:b2:dd:c5:80:b9:67:24:
19:84:0c:0c:b1:70:a5:6f:7d:5d:72:e9:80:4a:99:7c:13:c6:
84:45:e2:49:16:ce:6c:62:11:d7:d4:ba:8e:a3:69:00:3c:59:
95:ed:32:99:e3:00:7e:dd:8e:37:2e:91:30:fe:76:e3:ec:e8:
51:a8:e5:10:7d:6a:ec:70:bb:3f:e1:ba:8a:3d:4c:bb:0a:b7:
05:bd:3b:4a:ec:5d:f0:88:49:2c:e8:ce:be:15:f5:98:26:8e:
13:64:cb:57:81:02:a3:6c:d4:1b:a9:92:e4:1a:d9:d3:3d:a0:
dd:c2:3a:02:ad:81:05:94:4d:34:32:a3:d5:76:e6:25:ae:52:
04:b1:f5:1a:34:3b:5b:2d:40:65:eb:37:b7:a7:91:09:08:ba:
81:f5:84:56:59:6f:23:12:bc:12:80:f8:9a:4f:50:62:e5:bf:
99:ac:87:39:90:62:3a:a7:68:f7:ee:fc:c2:a4:5f:c8:ee:ea:
5f:06:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:49 2025 by rpki-client