Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/ricnvXRyxBIr6uz7wJxhUxO5eB8.roa
File: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (raw, json)
Hash identifier: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=
Subject key identifier: AE:27:27:BD:74:72:C4:12:2B:EA:EC:FB:C0:9C:61:53:13:B9:78:1F
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019423D7D022448D2015088613AF7D7BB9CA
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/ricnvXRyxBIr6uz7wJxhUxO5eB8.roa
Signing time: Wed 01 Jan 2025 21:48:53 +0000
ROA not before: Wed 01 Jan 2025 21:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 188.92.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d0:22:44:8d:20:15:08:86:13:af:7d:7b:b9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jan 1 21:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae2727bd7472c4122beaecfbc09c615313b9781f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:60:fd:97:94:d9:77:87:19:05:d4:73:78:
66:6b:4b:b5:b4:70:fc:b3:96:8a:b5:5f:68:cc:79:
e1:fb:bb:6d:a0:f8:a5:a1:47:dc:45:32:2e:4b:48:
cc:bb:fd:f7:78:a4:b5:fc:ca:24:e3:93:79:c5:94:
d6:52:bf:20:3e:55:36:0b:76:92:e8:d7:8c:08:44:
03:a2:75:62:df:e0:d3:d2:0f:23:0a:bb:1d:c3:94:
ae:45:0b:7a:9e:1a:83:3a:63:f5:53:f9:b9:65:80:
b8:af:dc:d8:76:d2:f8:53:c8:c9:55:c3:f4:9c:65:
e9:e9:84:56:b7:34:ab:8c:95:2d:b3:84:7b:95:af:
93:d0:0d:e3:53:1a:4c:f2:64:47:35:c5:55:60:95:
df:48:34:71:08:19:c5:c3:66:33:72:22:e7:11:49:
74:31:d0:8a:1c:f8:3d:74:04:6a:5a:a1:ed:2a:49:
43:d3:5f:0b:fc:70:9c:21:5e:37:9a:39:33:6e:1d:
2c:69:5e:b8:0b:b5:b8:9f:34:76:3a:fc:79:c6:39:
e8:8c:37:a0:80:06:1e:4b:33:9e:2e:19:52:ff:53:
31:36:d3:4f:ff:c2:35:3a:ec:55:81:97:e5:38:a9:
e6:9e:09:49:28:8c:0b:ec:8b:07:69:62:68:86:f4:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:27:27:BD:74:72:C4:12:2B:EA:EC:FB:C0:9C:61:53:13:B9:78:1F
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/ricnvXRyxBIr6uz7wJxhUxO5eB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.25.0/24
Signature Algorithm: sha256WithRSAEncryption
43:95:5b:5d:d4:ea:56:1f:51:55:20:a2:51:12:87:48:9f:a7:
a8:3b:3c:f5:24:a6:41:fc:cf:7b:96:1f:dc:4a:15:15:55:a3:
6d:72:f5:12:7f:f7:b3:7b:f6:e5:fe:3d:e1:1f:28:05:c9:32:
a4:0f:b1:2b:9b:cd:85:f3:bb:5f:9c:8e:0c:53:5e:84:27:3f:
85:9f:26:5a:cc:a0:8e:db:d6:3e:f6:d5:4f:fb:f1:9f:3d:5c:
5c:5a:36:0a:9f:e3:3d:09:d4:60:c3:ba:69:b4:f4:a8:ef:25:
6d:e5:2c:c1:b0:d2:f3:73:03:a1:ae:ab:06:d0:4c:d2:31:4e:
a6:7e:a0:0c:d5:21:ab:96:e3:ef:9d:9b:3e:b1:57:e8:a3:2d:
4f:10:c1:52:f4:38:fb:88:0c:f5:b7:38:90:4d:e4:85:79:8d:
58:22:f2:46:1d:cd:66:b0:b9:f6:0e:1c:7a:57:9c:4e:c8:b6:
26:47:5d:66:80:a8:f9:4e:d7:3e:00:90:93:2f:83:ba:42:6c:
c2:14:ab:ac:bb:96:d6:bd:99:48:6c:83:aa:49:ba:38:72:83:
3a:4b:8e:a6:15:91:62:57:05:b6:c5:f2:4e:f1:a6:26:13:7e:
91:e9:0c:a5:d2:5e:a6:8d:dc:2d:bd:5a:b0:be:9e:5e:70:8e:
01:4a:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:42 2025 by rpki-client