Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lh_dEhkKhY8TmWl0lrTBXQRnpFY.roa
File: lh_dEhkKhY8TmWl0lrTBXQRnpFY.roa (raw, json)
Hash identifier: 0fj9pwaiik9oxputMNmIK3psv5Fl6Ez8iaQoYnabWKU=
Subject key identifier: 96:1F:DD:12:19:0A:85:8F:13:99:69:74:96:B4:C1:5D:04:67:A4:56
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28090231
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lh_dEhkKhY8TmWl0lrTBXQRnpFY.roa
Signing time: Sat 01 Jan 2022 16:09:27 +0000
ROA not before: Sat 01 Jan 2022 16:09:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62065
IP address blocks: 92.38.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671679025 (0x28090231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=961fdd12190a858f1399697496b4c15d0467a456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:3a:91:55:39:3b:de:46:de:19:39:1b:7e:
7b:16:c0:a5:c8:52:5d:09:cb:be:00:9e:d0:87:f9:
be:ab:28:52:45:6b:9d:2e:fd:e7:59:21:c3:49:cd:
91:2a:30:69:fe:78:f4:8e:13:b3:76:19:b5:6d:2f:
29:c7:e7:9f:be:8c:22:5d:46:c4:4b:e1:9a:ce:b0:
bb:92:be:a2:41:48:74:75:8f:e5:41:ec:15:33:af:
34:a4:6e:31:4f:36:a8:c5:32:35:a9:a4:b7:46:ba:
c4:97:7c:49:89:5d:bc:94:52:14:97:43:cd:cc:7a:
21:91:4c:8d:54:4e:44:5b:07:cf:cc:41:60:f5:47:
8a:db:df:23:cd:6c:11:1b:9b:d7:7c:96:1a:6a:b1:
f7:73:48:52:a5:49:7e:45:66:4f:c2:7f:87:0a:7b:
6f:c1:36:fd:67:e9:4b:3d:ff:1a:8c:36:3b:cf:f1:
87:30:6b:ea:5d:41:6f:11:30:7d:d9:f1:f0:d6:57:
e2:b4:88:d2:c2:04:8d:a6:ac:00:84:ec:41:59:e0:
2e:e6:e3:3c:61:c6:36:aa:a0:ff:e0:a6:05:48:77:
b4:9b:5c:96:ec:97:9f:a3:e2:0c:e7:9f:65:95:2f:
10:fe:78:e7:41:a2:b6:b0:92:d8:9c:cb:c1:91:de:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1F:DD:12:19:0A:85:8F:13:99:69:74:96:B4:C1:5D:04:67:A4:56
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lh_dEhkKhY8TmWl0lrTBXQRnpFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.2.0/24
Signature Algorithm: sha256WithRSAEncryption
50:10:c8:1b:53:9c:6a:42:e6:77:b8:a9:62:54:3e:a8:0f:8e:
68:9b:59:00:29:c7:92:a9:18:c8:fe:b9:9e:46:92:92:e3:4a:
65:2a:f5:ac:d5:12:3e:81:7e:e0:03:7c:04:b0:11:b6:9a:d0:
c4:c1:eb:69:16:a7:d2:0e:af:21:34:09:77:51:5c:83:f0:4d:
43:e8:c8:23:a7:e0:13:2e:97:f9:bf:e8:96:c6:56:ac:9f:f1:
40:68:be:18:f5:d0:eb:e2:b1:81:f0:f5:56:9d:8d:b1:f6:fb:
37:2f:06:a6:aa:98:06:dc:20:50:23:bf:be:6c:59:1d:88:e6:
e0:50:a3:b6:6a:ae:a1:63:00:7a:5d:1c:50:a0:98:e6:14:6e:
30:b2:b5:6b:6c:8c:f7:89:cc:dc:fa:46:4d:82:76:30:f1:93:
7a:d7:0a:87:e1:bc:28:1d:c7:60:7d:57:f3:7a:4c:94:47:65:
1a:34:c5:68:39:4f:fd:e5:97:de:15:16:90:ed:76:b6:43:89:
db:9d:b3:82:09:63:11:f5:3b:a4:a5:85:2e:ad:4b:b0:64:28:
a8:20:7c:de:0e:ca:b1:9c:b3:43:d4:ae:96:41:32:c9:26:5f:
ab:88:1e:c0:e5:08:a1:ab:5b:06:2b:36:0a:c3:5f:c4:ab:f3:
14:b2:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:39 2025 by rpki-client