Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AI8KeRC0_Rimwxkw37l9_VVbLMQ.roa
File: AI8KeRC0_Rimwxkw37l9_VVbLMQ.roa (raw, json)
Hash identifier: ukCudNtDqKWXKmTP0sy2L1VPOShwfDXcVjA4yLUXAi0=
Subject key identifier: 00:8F:0A:79:10:B4:FD:18:A6:C3:19:30:DF:B9:7D:FD:55:5B:2C:C4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FDF14FDBF77E247BBA24914C43A12
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AI8KeRC0_Rimwxkw37l9_VVbLMQ.roa
Signing time: Thu 02 Jan 2025 05:49:33 +0000
ROA not before: Thu 02 Jan 2025 05:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62083
IP address blocks: 92.38.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:df:14:fd:bf:77:e2:47:bb:a2:49:14:c4:3a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=008f0a7910b4fd18a6c31930dfb97dfd555b2cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:7c:df:44:92:48:f6:f7:4c:8d:8f:b0:18:
0a:96:a0:03:61:eb:e1:9f:86:2d:fb:02:d6:a3:12:
48:3b:c2:99:65:c8:ec:f6:a0:fd:f6:c3:73:99:ec:
bb:cd:20:7b:80:33:8c:cc:d9:ad:78:35:c5:01:49:
98:df:e6:62:da:95:26:fa:c8:66:b0:86:82:d0:49:
aa:64:e1:10:57:51:14:3f:67:b6:c5:9d:9f:75:41:
8c:7a:99:5b:45:46:84:74:e4:e5:f3:93:fb:bc:0e:
35:c1:fd:b7:b1:ee:ff:e4:f1:bc:c1:0d:4e:8b:4e:
03:5d:37:9e:4e:ff:4c:cc:65:4e:e5:d3:c8:0a:6b:
18:68:94:fc:c7:9d:f6:50:c4:f6:cd:89:6d:81:6f:
50:86:af:a5:74:85:91:62:4e:92:fe:26:bd:47:8b:
06:ce:c4:5e:df:e5:12:03:48:b9:a0:67:a7:dd:b6:
2a:fd:b1:af:2a:0b:c0:51:7d:57:79:60:59:5c:00:
4c:81:81:cd:85:17:9f:f5:3e:4d:79:3e:a2:d6:19:
32:f1:8e:d7:87:9c:75:19:53:cf:82:f9:39:57:e1:
34:4f:64:aa:cd:17:e4:b1:1d:0e:28:92:ec:01:fa:
d0:f9:5f:70:93:06:a6:37:31:66:47:eb:fa:11:3f:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8F:0A:79:10:B4:FD:18:A6:C3:19:30:DF:B9:7D:FD:55:5B:2C:C4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AI8KeRC0_Rimwxkw37l9_VVbLMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.6.0/23
Signature Algorithm: sha256WithRSAEncryption
10:d3:be:16:ec:c5:ce:8b:6c:d8:7d:21:58:ae:54:88:e5:ff:
ed:58:52:00:81:40:0a:81:a3:e7:27:ed:b7:63:7b:ee:7f:61:
48:3c:61:9f:7c:66:a4:87:8a:53:e3:a0:a4:10:67:60:5b:b3:
9b:a5:30:58:d6:eb:90:82:2c:2c:3f:64:c9:f9:5c:b4:b7:c8:
4f:c5:6a:c9:a5:19:76:3a:d8:71:ae:55:2d:c9:b1:da:d4:82:
b1:02:a3:cb:1d:3b:81:00:c2:43:07:7e:8d:e4:ba:a1:c4:71:
e9:83:14:18:12:98:47:4c:ee:13:7a:16:c7:95:07:69:b4:53:
ca:36:c4:c3:3b:c6:a6:c8:0c:3b:da:eb:7b:c1:f3:86:d2:0b:
e0:7d:09:89:66:6f:98:58:f6:7f:17:da:ac:aa:1e:5c:33:ad:
1d:d9:02:0f:21:a1:41:6a:67:72:15:ab:ec:4e:64:8c:c3:8a:
8c:ae:7d:10:3e:65:a1:17:5c:f1:c7:4a:f4:82:9e:fc:1a:c4:
49:9d:85:3b:e1:87:76:6a:36:65:f4:dd:9e:fb:2b:b9:51:4f:
f3:4a:64:e3:91:00:bf:5c:39:51:50:0c:f7:5b:96:91:e1:5f:
58:50:d0:27:7b:52:a4:8e:5e:dd:b6:d3:c5:de:24:90:a8:c5:
32:e9:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:43 2025 by rpki-client