Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/rwCQmNOuZE_kryjC8QIDqyzBek8.roa
File: rwCQmNOuZE_kryjC8QIDqyzBek8.roa (raw, json)
Hash identifier: OHzMcdBam5j/wfHUyz5DszdE5+OjpxcpG78RADThpWo=
Subject key identifier: AF:00:90:98:D3:AE:64:4F:E4:AF:28:C2:F1:02:03:AB:2C:C1:7A:4F
Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial: 01941F8CAB9498B39D58A40237E0E6DFFEC6
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/rwCQmNOuZE_kryjC8QIDqyzBek8.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199773
IP address blocks: 92.60.155.0/24 maxlen: 24
92.60.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:ab:94:98:b3:9d:58:a4:02:37:e0:e6:df:fe:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af009098d3ae644fe4af28c2f10203ab2cc17a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:dd:4f:7a:23:1c:19:16:b8:c5:53:43:42:
6a:cc:43:a9:ff:e9:ff:64:30:07:d3:75:60:49:c6:
bc:79:da:58:ed:d0:6c:cd:1f:22:4a:e4:14:84:0d:
48:37:05:5d:71:97:3d:a2:9e:90:4e:06:fd:d5:57:
38:9b:2a:f9:3c:b3:27:9b:47:ea:7b:36:f3:77:3c:
e7:9e:7f:6f:86:c6:fd:f1:e4:80:f0:e2:17:14:ef:
85:fc:1f:d6:8c:c3:a2:29:20:06:b1:9a:9d:c3:6a:
5b:c9:a0:e1:94:d4:ee:60:ce:85:da:97:ab:dd:c3:
7d:5f:14:0d:7c:23:fe:d8:fc:d4:b4:71:b5:4d:17:
6f:05:16:39:25:0d:55:df:51:b3:f7:11:b6:0b:fa:
3b:2a:11:11:7e:b1:46:78:b1:ae:e6:8a:6f:8c:1f:
dd:de:ef:d4:cc:8b:14:cf:03:26:31:d8:98:2a:04:
de:1c:09:a8:47:cd:90:3b:c9:f6:78:3a:23:6b:73:
25:ad:17:68:30:7f:78:c1:b8:39:c4:84:90:c2:60:
27:5f:14:19:00:a9:dc:78:b4:d4:d9:51:a9:c7:78:
ab:67:12:10:b2:5e:7f:5a:ec:ea:ba:b6:46:45:c3:
7c:2e:1e:c6:48:58:33:0b:0e:05:8c:53:5a:85:73:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:90:98:D3:AE:64:4F:E4:AF:28:C2:F1:02:03:AB:2C:C1:7A:4F
X509v3 Authority Key Identifier:
keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/rwCQmNOuZE_kryjC8QIDqyzBek8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.155.0/24
92.60.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:24:84:e0:bb:e4:dd:07:06:97:e4:fe:a8:90:92:10:b4:96:
15:ab:d9:96:8a:eb:96:a6:63:59:d5:22:5f:a2:c6:f4:b8:9d:
bb:44:9e:5d:f7:07:64:96:46:f4:45:fe:91:f7:4c:85:2c:d7:
c1:81:80:95:d4:e9:3b:3b:9e:43:81:e5:1c:1c:cf:90:e3:6d:
0b:c3:59:6e:0c:9d:bb:50:fb:e4:7d:e0:5e:50:4b:5c:34:1d:
9d:a1:fd:a1:13:42:b8:10:0a:1c:50:bf:29:6f:79:89:cb:d3:
6c:8a:9d:fd:13:9a:2d:c4:19:4a:38:0c:8b:25:ce:59:14:d7:
b4:61:56:67:28:3a:8e:f7:ca:9a:a5:d8:80:cd:79:d1:ae:4d:
4e:31:5e:3c:3e:ce:6b:cb:9b:ff:bd:5e:ec:46:75:b7:38:8d:
e0:04:3a:ad:02:27:6f:b7:61:0a:8e:1d:03:de:60:8b:c5:aa:
6e:23:37:2c:a4:2f:d2:52:38:f3:bb:25:c2:e2:43:14:af:1a:
cb:e2:a8:34:66:7c:bb:47:c0:38:9e:a5:e8:a6:a8:71:cb:34:
05:5f:9e:04:75:00:23:6b:ec:e0:11:d1:bb:19:38:31:22:60:
73:59:d1:d1:d1:24:ba:13:d7:50:97:9b:e5:2a:48:f4:0f:dd:
68:c8:b8:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjKuUmLOdWKQCN+Dm3/7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OWM3MTNjNTE5ODdlMWZmYTU0ODIyNzdmNWYxYzhjYjcy
MmY0NGIwHhcNMjUwMTAxMDE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjAwOTA5OGQzYWU2NDRmZTRhZjI4YzJmMTAyMDNhYjJjYzE3YTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuLdT3ojHBkWuMVTQ0JqzEOp/+n/
ZDAH03VgSca8edpY7dBszR8iSuQUhA1INwVdcZc9op6QTgb91Vc4myr5PLMnm0fq
ezbzdzznnn9vhsb98eSA8OIXFO+F/B/WjMOiKSAGsZqdw2pbyaDhlNTuYM6F2per
3cN9XxQNfCP+2PzUtHG1TRdvBRY5JQ1V31Gz9xG2C/o7KhERfrFGeLGu5opvjB/d
3u/UzIsUzwMmMdiYKgTeHAmoR82QO8n2eDoja3MlrRdoMH94wbg5xISQwmAnXxQZ
AKnceLTU2VGpx3irZxIQsl5/WuzqurZGRcN8Lh7GSFgzCw4FjFNahXNKnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK8AkJjTrmRP5K8owvECA6sswXpPMB8GA1UdIwQY
MBaAFDaccTxRmH4f+lSCJ39fHIy3IvRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAt
NzZjMDVjZjVmMmU2LzEvcndDUW1OT3VaRV9rcnlqQzhRSURxeXpCZWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAtNzZjMDVjZjVmMmU2
LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXDybAwQA
XDyfMA0GCSqGSIb3DQEBCwUAA4IBAQCfJITgu+TdBwaX5P6okJIQtJYVq9mWiuuW
pmNZ1SJfosb0uJ27RJ5d9wdklkb0Rf6R90yFLNfBgYCV1Ok7O55DgeUcHM+Q420L
w1luDJ27UPvkfeBeUEtcNB2dof2hE0K4EAocUL8pb3mJy9Nsip39E5otxBlKOAyL
Jc5ZFNe0YVZnKDqO98qapdiAzXnRrk1OMV48Ps5ry5v/vV7sRnW3OI3gBDqtAidv
t2EKjh0D3mCLxapuIzcspC/SUjjzuyXC4kMUrxrL4qg0Zny7R8A4nqXopqhxyzQF
X54EdQAja+zgEdG7GTgxImBzWdHR0SS6E9dQl5vlKkj0D91oyLgH
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:18 2025 by rpki-client