Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4uhngDeSXVQ2tI-HKkEbcvZG8vU.roa
File: 4uhngDeSXVQ2tI-HKkEbcvZG8vU.roa (raw, json)
Hash identifier: naD4LopsWRD5OFNY4DIFqzBbGN/YLf1uofK98CogqAk=
Subject key identifier: E2:E8:67:80:37:92:5D:54:36:B4:8F:87:2A:41:1B:72:F6:46:F2:F5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F905F2F9818D5032BD2F9F53EDAD3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4uhngDeSXVQ2tI-HKkEbcvZG8vU.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31133
IP address blocks: 92.38.42.0/24 maxlen: 24
92.38.80.0/22 maxlen: 24
146.158.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:90:5f:2f:98:18:d5:03:2b:d2:f9:f5:3e:da:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2e8678037925d5436b48f872a411b72f646f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:d8:7c:4a:df:b9:8e:15:b6:c7:b6:d1:7c:
6e:30:79:89:73:b5:81:b3:e4:f8:77:ee:09:36:6f:
61:5f:e3:a6:05:5c:8c:69:44:2b:ba:61:4a:92:99:
26:23:0b:2c:01:a7:5c:f8:b9:80:03:59:27:f5:08:
ff:3f:e6:c0:0c:cd:7e:f4:06:f2:98:1e:9f:d3:e4:
6c:9f:37:b3:39:0e:64:1f:69:f5:7e:79:2a:89:85:
74:3d:a9:2e:ce:1e:53:bb:7f:da:99:a5:d8:53:26:
6f:12:70:59:fa:61:4b:da:ca:f3:43:8e:81:17:62:
ab:8a:92:a8:d2:82:38:26:4c:93:ec:81:6c:7e:73:
32:37:41:de:f1:74:b7:86:0f:3c:0f:5b:10:b5:02:
54:32:da:37:ba:4a:24:ad:1f:c7:71:ac:9a:86:9d:
3a:47:10:e6:f8:39:b3:f8:47:f5:f3:54:79:ef:d8:
02:cb:e0:95:6b:af:99:b4:64:57:1d:e8:f7:aa:31:
3c:11:64:79:56:98:58:c8:59:cc:8e:cc:db:68:2d:
d6:27:7f:19:f4:29:57:ed:20:9d:1d:16:aa:b6:2f:
02:dd:cd:2a:4f:37:c5:33:84:5f:72:d6:ea:41:d8:
a1:f8:47:81:3c:84:46:f6:80:e8:80:fe:64:a3:c9:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E8:67:80:37:92:5D:54:36:B4:8F:87:2A:41:1B:72:F6:46:F2:F5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4uhngDeSXVQ2tI-HKkEbcvZG8vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.42.0/24
92.38.80.0/22
146.158.88.0/22
Signature Algorithm: sha256WithRSAEncryption
98:07:a1:76:ef:3c:d9:5d:87:67:84:a0:7d:de:28:be:12:1e:
e3:fd:88:e4:df:b3:f0:37:12:9e:37:d0:91:39:17:1b:9b:1e:
f0:ce:7a:82:68:91:d5:83:7a:71:7f:79:ea:8c:8a:d8:51:76:
c3:97:b5:c2:7f:f6:0d:08:01:b5:81:fd:63:ed:0a:1a:94:28:
93:ca:f3:88:c9:de:61:a3:f3:e7:4b:77:d8:42:0c:7c:8c:4f:
d9:31:6e:bd:ac:bf:f6:6f:4b:7c:f4:b1:29:d7:d2:3f:39:e5:
92:f5:94:98:53:dd:fa:4a:b3:15:3c:1b:7d:53:24:c6:c3:0d:
63:d0:08:3c:2a:cb:91:16:94:5a:36:8d:43:cd:73:e4:73:33:
4a:de:29:94:e2:c1:9a:98:46:2d:aa:f8:60:c6:bd:67:ec:0a:
2a:2e:9d:4f:4c:79:74:50:c3:a7:cd:5c:b6:cc:5b:0a:57:f7:
f7:3a:8f:3e:c3:b9:40:b6:e3:b8:24:b8:15:79:08:65:84:01:
86:07:4b:43:90:ea:e2:d7:de:c4:68:df:4d:dd:45:56:2e:a2:
2e:e9:cc:e6:c0:1f:e3:48:90:59:6e:a1:3d:ff:54:a1:9c:c0:
99:54:f5:91:4f:9a:df:c6:3e:56:82:a8:b5:82:79:68:48:4f:
0e:39:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:40:18 2025 by rpki-client