Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DZxq6YR8iRo5wctl5AIfD4-5DQE.roa
File: DZxq6YR8iRo5wctl5AIfD4-5DQE.roa (raw, json)
Hash identifier: Ygqrq/6+mjToNaUInfCrRQ41xceew2T9EfBJ3ksW+F8=
Subject key identifier: 0D:9C:6A:E9:84:7C:89:1A:39:C1:CB:65:E4:02:1F:0F:8F:B9:0D:01
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0187381074F2E85D4B12C7691A0073EE2418
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DZxq6YR8iRo5wctl5AIfD4-5DQE.roa
Signing time: Fri 31 Mar 2023 14:26:55 +0000
ROA not before: Fri 31 Mar 2023 14:26:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199011
IP address blocks: 92.38.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:38:10:74:f2:e8:5d:4b:12:c7:69:1a:00:73:ee:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 31 14:26:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d9c6ae9847c891a39c1cb65e4021f0f8fb90d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:d0:39:ed:7b:3c:e9:80:0b:ac:e6:c1:bc:
b6:d6:09:df:85:58:eb:9d:d3:70:29:35:6d:90:1c:
6c:f5:eb:cf:11:f5:9a:b3:63:25:7d:83:40:75:48:
c2:44:0c:1f:03:27:90:bf:17:59:92:77:fa:22:a4:
16:d3:15:12:ed:ca:02:b5:3c:ce:fe:13:23:f2:21:
1a:39:43:23:2a:a3:73:86:78:f0:3b:d5:83:68:3e:
36:2a:ba:1e:16:b2:b8:13:40:7d:d9:59:49:3f:c1:
aa:08:c7:b8:d4:48:68:8a:4a:bc:03:71:ea:68:12:
f0:ff:76:1e:f6:2a:4d:b6:51:27:2a:76:c4:84:f3:
dd:3e:7e:78:2c:6a:8e:d4:dc:c7:d2:d6:43:d6:2b:
da:cc:f8:26:66:15:f1:b3:62:ab:dc:2b:56:dc:00:
cc:69:b7:97:4b:ec:62:a4:30:94:26:f6:fb:5b:44:
e3:e4:69:0c:70:06:45:c9:85:1d:1d:b9:8e:b2:b6:
c2:c1:16:98:3f:3d:10:6c:83:ce:e6:ef:20:8f:4d:
61:8a:26:e7:03:71:07:70:57:cd:93:72:b2:5b:0b:
2c:7f:93:48:33:99:25:b9:fc:ee:1d:69:42:e9:b6:
e3:45:95:2f:dc:d7:4b:a3:09:90:6d:9d:b5:1a:68:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:6A:E9:84:7C:89:1A:39:C1:CB:65:E4:02:1F:0F:8F:B9:0D:01
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DZxq6YR8iRo5wctl5AIfD4-5DQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.40.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d4:2d:78:27:64:a5:82:29:96:e3:e7:52:46:e8:bf:8e:19:
1a:2e:e9:3b:39:84:e4:1c:a1:c1:c8:b8:15:f9:7d:d2:73:da:
ed:6f:81:25:23:cb:39:bb:0e:d1:f7:2d:ed:59:c0:7b:37:c5:
09:98:44:32:38:26:03:84:1d:11:11:25:e9:ad:6d:08:ab:1d:
34:06:fd:aa:8b:70:3a:18:06:e4:47:cf:8f:08:e7:11:26:a4:
69:f9:2d:62:11:5b:13:b6:d7:72:9b:8e:d7:4a:d3:43:d2:00:
ca:c2:8d:5b:65:8a:b4:31:42:6e:d8:94:5a:93:67:1a:e4:0a:
0b:21:50:c8:08:22:8b:f6:b1:f6:b7:97:54:1c:5c:8a:60:8f:
e0:20:ce:69:b4:1c:69:ce:1e:ee:6c:04:03:df:1e:b5:db:11:
0b:0c:21:d4:19:7e:cd:cd:ae:a8:53:a5:08:1b:02:64:db:a7:
9e:40:b1:9c:4a:07:c5:48:4c:8d:f4:bc:24:56:9a:2b:d5:3d:
eb:cd:76:29:fb:3e:0d:75:d1:2b:ce:96:15:4d:38:e0:3e:e1:
b1:33:c4:e0:45:b1:97:f0:cc:55:a4:9c:fc:01:74:1c:bc:a3:
19:f2:96:ed:0c:25:78:dd:a9:08:71:7e:92:9a:03:bb:42:b6:
ae:f0:f1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:58 2025 by rpki-client