Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SkURJfzt9jCH_KZBUcYH52_1zJo.roa
File: SkURJfzt9jCH_KZBUcYH52_1zJo.roa (raw, json)
Hash identifier: fD/o18kgOKcuEuEf63hfuGZ6DXo4EvJCGOOQtx9jWdI=
Subject key identifier: 4A:45:11:25:FC:ED:F6:30:87:FC:A6:41:51:C6:07:E7:6F:F5:CC:9A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0193D4E16A44161FFC30BA782638387A32F3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SkURJfzt9jCH_KZBUcYH52_1zJo.roa
Signing time: Tue 17 Dec 2024 13:49:22 +0000
ROA not before: Tue 17 Dec 2024 13:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61979
IP address blocks: 92.38.44.0/23 maxlen: 24
92.38.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:e1:6a:44:16:1f:fc:30:ba:78:26:38:38:7a:32:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 17 13:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a451125fcedf63087fca64151c607e76ff5cc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:a0:eb:46:c1:0c:c1:5a:b6:56:4a:41:03:
07:8d:dd:7e:5c:e0:4e:d3:4d:49:bb:94:2c:21:ad:
0f:fe:cc:3f:1f:b8:a9:19:af:20:33:35:4f:d0:a1:
95:fb:83:c0:bd:6e:10:26:a3:31:d2:f2:23:84:4f:
4d:37:14:c2:1b:fd:39:70:36:cf:c6:42:ca:40:89:
42:4d:06:1b:90:3c:3a:8c:bb:e6:97:51:3e:18:f3:
c9:5b:0c:e6:92:2a:f9:b4:01:c4:7f:9b:96:0a:59:
a9:6e:17:53:a6:07:08:ce:83:fc:e2:94:d2:d2:4b:
da:4f:b6:5e:d9:f5:33:3f:3f:d8:66:0b:3d:f5:ab:
2e:47:de:25:a0:4e:dc:fd:06:1d:56:58:a8:3b:5a:
6f:fb:f4:aa:de:50:f5:65:cb:46:f0:df:ad:73:57:
94:5b:91:e2:ed:43:30:90:11:91:dd:f5:8a:12:04:
a0:06:a6:bb:da:63:e2:3a:31:ef:9b:17:3b:bf:c7:
3e:42:03:81:de:f4:80:75:53:70:3e:fc:e6:f1:3b:
13:47:37:4b:af:01:d7:86:5b:b3:5a:96:a4:19:ba:
71:7b:b6:da:84:b6:09:19:6d:52:fe:22:07:eb:2e:
ab:e6:2f:ce:3e:d2:c7:d6:e9:7b:6f:9c:cc:d5:57:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:45:11:25:FC:ED:F6:30:87:FC:A6:41:51:C6:07:E7:6F:F5:CC:9A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SkURJfzt9jCH_KZBUcYH52_1zJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.44.0/22
Signature Algorithm: sha256WithRSAEncryption
98:9d:65:27:8f:35:02:73:03:d3:17:a9:2f:96:09:4b:de:ab:
80:52:94:cd:aa:f8:bc:1a:78:0d:50:ba:8a:c4:6a:ca:91:c1:
01:16:3a:1d:a1:6d:e6:c3:88:d6:02:49:a8:fa:ff:33:d9:89:
5b:e7:30:11:57:63:ac:40:0d:9a:9d:3a:a1:04:3d:2b:7d:2b:
0e:1e:78:e5:ef:54:af:15:1e:a1:37:04:c2:b7:2e:6a:bc:67:
65:81:06:71:29:04:9d:e1:92:06:dd:c6:c5:05:4c:09:13:7e:
a5:09:e3:c6:24:1c:a8:90:db:85:44:79:b1:b6:dc:69:f7:46:
4b:f9:5c:55:76:c0:c6:c5:b3:13:3f:27:1d:33:23:bb:2f:3f:
4b:d0:4f:ac:36:32:67:11:ed:65:f6:13:52:2c:f1:05:b7:04:
16:5b:a8:e6:d1:91:05:4d:9b:c8:3b:f9:40:70:58:d3:a0:4a:
77:41:27:23:76:95:d5:d0:28:1b:5d:d2:34:65:39:4c:ef:7b:
1c:18:5a:4e:22:7e:26:26:5c:df:54:0f:84:42:a6:12:77:2a:
57:5b:f3:0a:27:a4:08:b9:d4:b6:75:91:23:ef:03:d0:7e:bb:
0b:65:4b:d4:11:12:f3:0b:b4:06:88:65:ea:5c:74:91:18:ed:
ee:82:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:52 2025 by rpki-client