Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IXcwgFaBBo-k5segxBRl7o5LE6U.roa
File: IXcwgFaBBo-k5segxBRl7o5LE6U.roa (raw, json)
Hash identifier: co6X0kYJsFt7XLEaoW3Al3sDLlHpHslPG/B4MQh0dMw=
Subject key identifier: 21:77:30:80:56:81:06:8F:A4:E6:C7:A0:C4:14:65:EE:8E:4B:13:A5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095ADBB0367407F102A7EA8DF36D809
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IXcwgFaBBo-k5segxBRl7o5LE6U.roa
Signing time: Mon 02 Jan 2023 03:45:35 +0000
ROA not before: Mon 02 Jan 2023 03:45:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209229
IP address blocks: 92.253.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:ad:bb:03:67:40:7f:10:2a:7e:a8:df:36:d8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=217730805681068fa4e6c7a0c41465ee8e4b13a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:e0:0e:bc:3d:8e:32:a5:d7:3a:50:28:18:
81:ef:07:0f:df:f4:47:40:a6:3a:50:6a:40:92:99:
b5:f0:e9:28:e7:9b:01:85:e4:5a:3d:8b:41:e0:de:
df:f7:bb:e3:02:78:79:8d:0e:dd:44:3a:8a:c2:b7:
39:ca:b1:f2:8d:dc:b1:6a:2c:b2:31:02:73:07:29:
d9:7f:f1:72:19:bd:7a:0e:5b:6f:1e:6a:a6:9b:c3:
1f:0f:f8:b0:90:a5:25:a1:4f:33:ac:8d:f4:ff:08:
9f:56:16:6f:87:33:eb:7a:22:20:6c:6e:58:18:80:
8b:14:92:e6:98:e0:e2:58:8d:8d:ee:cd:ee:e4:dc:
60:c5:8a:a7:f6:59:df:ac:af:be:4d:6c:ee:9a:c1:
78:f9:55:8e:4c:b3:34:83:1b:21:b4:db:51:cd:fb:
54:68:02:4f:ba:05:df:a5:90:34:fc:f8:b9:a7:7b:
ba:80:87:58:ef:2f:0f:da:c7:8f:19:21:ae:a6:93:
c9:67:27:44:ee:7f:55:a5:48:fc:10:24:ca:55:c8:
09:bf:3c:a7:7b:57:7b:ae:35:ad:f9:31:ea:b3:e7:
f9:95:e9:de:a9:3b:bf:2b:0e:8d:d9:93:db:75:92:
db:50:b9:b8:0b:c1:66:6b:6b:1e:ed:f1:c0:77:74:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:30:80:56:81:06:8F:A4:E6:C7:A0:C4:14:65:EE:8E:4B:13:A5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IXcwgFaBBo-k5segxBRl7o5LE6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:14:4d:80:7c:33:71:71:a8:fa:39:e3:29:f3:c9:a5:ee:a2:
12:a3:02:5d:a4:c6:9f:9f:a4:d0:74:16:8c:99:1a:24:cc:a9:
5b:25:b4:23:02:4d:36:13:b9:43:09:ed:b8:86:b6:59:49:95:
f9:bf:a8:8f:09:b6:29:11:bd:59:18:22:38:a9:3b:73:7e:91:
57:46:a2:95:3a:69:ec:40:48:a1:22:a9:be:d1:ee:28:e6:5a:
ca:d3:f9:4f:2b:e6:b2:8c:d6:8f:77:46:57:6a:33:5c:5d:cc:
47:5a:04:6c:1b:00:11:e5:78:b0:63:56:f4:91:3e:da:e7:3b:
0c:88:e0:0d:10:05:3f:95:d2:52:a8:15:02:26:fc:07:af:85:
0a:86:48:52:24:f3:31:ae:2f:d3:58:3c:94:8a:28:55:61:54:
9b:05:45:d1:e3:25:01:9b:6d:c7:da:ea:60:37:c8:52:26:e2:
17:aa:fe:0a:c0:33:48:5e:9f:9a:a7:a1:02:a4:21:a6:10:84:
4e:8c:d8:44:4b:8f:90:39:ed:80:67:8f:41:30:36:42:84:b3:
0f:2f:b6:ef:e9:ee:1d:1c:3f:9c:22:13:b3:75:d9:8c:23:e2:
00:b3:65:65:0b:50:3c:1e:90:81:d7:be:17:99:e4:71:32:33:
98:7b:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:44 2025 by rpki-client