Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hzIbWSggpFn9QeeeZGEMSjML89k.roa
File: hzIbWSggpFn9QeeeZGEMSjML89k.roa (raw, json)
Hash identifier: +yaDUM0mjNFXo94zsKwJNNXOzj3DmU4tyW+QNeXobAI=
Subject key identifier: 87:32:1B:59:28:20:A4:59:FD:41:E7:9E:64:61:0C:4A:33:0B:F3:D9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194259002FB5E678C50D2CA7C89E5205719
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hzIbWSggpFn9QeeeZGEMSjML89k.roa
Signing time: Thu 02 Jan 2025 05:49:42 +0000
ROA not before: Thu 02 Jan 2025 05:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209248
IP address blocks: 92.253.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:02:fb:5e:67:8c:50:d2:ca:7c:89:e5:20:57:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87321b592820a459fd41e79e64610c4a330bf3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:05:71:2f:33:a9:e0:fb:e4:dc:8a:ef:e5:
8a:85:71:dd:ae:94:d7:58:64:50:54:cf:a2:8b:02:
33:93:75:b7:c7:a7:ad:5e:6d:62:51:a8:26:c7:fa:
8a:64:0e:94:fb:db:3d:cb:6e:fa:72:3c:14:9d:1c:
4f:fd:7c:d5:b8:59:32:38:2b:69:69:1b:17:05:a4:
3f:50:27:8e:ce:b0:57:6a:ec:e7:ec:dd:eb:d7:7c:
cb:13:36:47:8a:f2:f1:46:9f:2a:77:4a:54:d3:f9:
ff:14:9f:f3:c1:03:8d:22:f2:b3:ce:26:ba:ff:e2:
43:2a:d6:c2:7a:8d:c8:5f:31:fd:56:18:11:7c:e0:
72:3a:c0:be:46:47:9f:1f:22:d0:6a:49:53:1f:01:
90:5b:c3:02:37:dd:21:58:48:32:eb:c6:de:d2:a8:
92:e7:c8:8d:70:81:e0:01:c6:85:bb:27:f4:4d:86:
78:6d:52:c7:5d:22:98:a8:c4:d9:e7:34:fb:8f:a1:
5a:65:0b:9a:7e:42:42:7f:cd:79:f9:d9:26:a2:46:
21:39:d4:2e:3c:59:e6:4d:3e:92:9d:c2:9e:23:cb:
9f:54:32:9d:9b:a9:fc:03:e5:40:7f:dd:fd:02:79:
f8:48:05:ad:ce:fc:28:01:ae:16:9b:08:3f:ce:e8:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:1B:59:28:20:A4:59:FD:41:E7:9E:64:61:0C:4A:33:0B:F3:D9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hzIbWSggpFn9QeeeZGEMSjML89k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.206.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:69:9b:19:61:20:8e:a2:8d:6a:d4:39:6a:fa:c9:62:41:ac:
8d:54:67:0f:81:83:8b:77:0a:08:6b:5e:2f:38:f2:79:37:6e:
64:f9:02:ed:08:ae:1c:1f:58:05:5a:e5:18:2d:56:c1:46:9f:
0e:f0:9d:23:92:42:c1:48:f6:2d:2a:41:de:73:98:a6:5f:fd:
8c:17:89:78:4d:5f:4b:cf:73:66:95:c6:52:15:1b:05:8a:d1:
ae:2c:01:31:8c:50:cf:38:76:16:6c:02:6f:46:7c:e9:16:f8:
e5:09:4c:2a:97:c3:68:42:22:07:2b:7b:74:07:31:00:ac:3e:
9c:21:72:84:a9:6e:d4:b9:e5:a6:93:e9:d8:82:11:37:ee:d5:
bd:84:ce:23:5f:eb:6c:8f:47:97:73:15:7f:77:e6:00:99:f0:
01:0f:66:3f:94:6c:b1:8f:46:63:f6:86:61:36:4b:38:64:73:
bf:da:f2:28:64:34:91:48:ba:87:2a:53:fa:69:64:d7:de:25:
aa:3f:21:ea:5a:b0:92:4e:df:82:05:80:2e:28:e3:6c:85:13:
21:1c:19:8b:0d:4e:a9:4e:7a:ee:c0:e4:4a:d6:58:cc:8a:d5:
40:70:b5:9f:ff:c5:6b:ba:55:17:99:27:c6:ee:ff:e0:75:f3:
4e:a4:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:57 2025 by rpki-client