Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/B0S5DB-lU4lwAZq2FgxmZ9BnyEo.roa
File: B0S5DB-lU4lwAZq2FgxmZ9BnyEo.roa (raw, json)
Hash identifier: 79ba1jW7WNHoUIbXzZam25SNEh+h7Ky8CbmRF+3o7WU=
Subject key identifier: 07:44:B9:0C:1F:A5:53:89:70:01:9A:B6:16:0C:66:67:D0:67:C8:4A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194DBD5270F9C68F4B94C23CEE5BB823B19
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/B0S5DB-lU4lwAZq2FgxmZ9BnyEo.roa
Signing time: Thu 06 Feb 2025 15:16:06 +0000
ROA not before: Thu 06 Feb 2025 15:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198803
IP address blocks: 92.38.28.0/22 maxlen: 24
92.253.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:d5:27:0f:9c:68:f4:b9:4c:23:ce:e5:bb:82:3b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 6 15:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0744b90c1fa5538970019ab6160c6667d067c84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2b:11:e0:ff:61:c4:c4:af:29:71:0f:34:dc:
4f:31:f8:2c:27:da:f5:dd:ae:b8:05:b7:41:08:5c:
b9:a6:8c:62:43:96:a5:39:67:64:a8:0d:9c:64:c6:
44:68:63:72:4c:c9:e5:cd:45:b3:ba:40:28:ca:0f:
dd:de:38:19:68:47:8c:e5:2f:48:74:81:07:f6:02:
74:eb:2d:e3:88:7a:4b:17:4e:de:fe:d5:8e:7e:4b:
f5:89:d9:cb:40:62:16:ba:ef:2b:ba:f1:3f:ac:dd:
18:3f:1a:2e:d8:81:2d:55:52:79:ea:ef:e9:c5:a8:
91:00:49:3d:4b:5c:c8:5a:ae:7d:74:c9:c3:98:ba:
13:02:bd:24:7e:72:ab:83:71:4f:39:2b:6d:f1:95:
f1:aa:ac:82:47:db:b9:c7:a3:6f:74:c8:43:c1:44:
1e:59:e9:e9:db:ab:f5:a5:49:30:a6:7a:60:0c:06:
66:91:58:2b:19:a1:67:a7:07:2b:b4:93:2d:65:fc:
d8:29:54:28:6e:d3:5d:01:8a:49:3b:42:a1:0e:d6:
74:da:75:f1:a9:6e:83:94:5a:4b:55:78:6c:99:c7:
aa:7f:0f:16:6d:aa:b9:ab:5d:a4:24:cf:7a:0f:82:
45:11:f6:0e:f6:14:ab:22:da:3c:81:77:e2:1e:26:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:44:B9:0C:1F:A5:53:89:70:01:9A:B6:16:0C:66:67:D0:67:C8:4A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/B0S5DB-lU4lwAZq2FgxmZ9BnyEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.28.0/22
92.253.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:64:06:6b:36:7f:d2:ff:fa:60:58:ce:2c:bd:c3:15:f3:63:
7d:f4:39:20:2b:2c:8f:22:b5:81:85:b5:81:d3:96:0f:9c:55:
3c:c8:eb:e6:2f:f9:10:10:6f:b7:e3:b8:d1:f6:bb:e5:34:21:
60:16:44:6f:87:45:4a:a3:98:78:ea:b5:93:e9:1e:c3:62:6a:
61:d8:4b:4d:f3:60:41:8e:14:89:bb:0c:11:fe:b2:a6:25:e9:
c7:e2:bb:6d:b7:1b:c9:b4:00:18:71:f2:39:b6:94:db:dc:06:
77:32:d6:e9:4a:cd:e3:0f:83:85:4f:3c:e6:76:ce:e4:e0:a4:
f5:d5:ea:f6:83:1a:a9:1d:d8:f5:5f:ee:bf:1c:35:21:99:62:
91:41:e6:7c:06:87:8b:7f:92:af:94:13:e3:b2:40:be:e9:68:
76:bf:5b:7a:1d:a8:78:18:67:4c:47:40:41:7a:78:42:36:58:
7c:e7:6b:67:44:b2:b8:b1:90:be:ad:4d:ce:02:b7:6d:5c:33:
75:8d:4d:c9:26:f6:fa:01:30:83:db:e9:7c:c2:d1:45:f1:e7:
ed:0c:e7:e6:53:ea:89:92:4a:db:01:f8:36:22:35:7d:85:ca:
f3:ca:07:dc:2b:c8:de:3b:3d:6c:81:61:50:69:ff:34:bc:77:
8b:b1:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:10 2025 by rpki-client