Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pTj8VOclp6l98USmos3Q2ZSRJPg.roa
File: pTj8VOclp6l98USmos3Q2ZSRJPg.roa (raw, json)
Hash identifier: n//KduxVHPO5t0/kiMJ2MNUbEDueYif3FInf43AAUpk=
Subject key identifier: A5:38:FC:54:E7:25:A7:A9:7D:F1:44:A6:A2:CD:D0:D9:94:91:24:F8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957D5C542928DA3E1BF4EDDCFBA634
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pTj8VOclp6l98USmos3Q2ZSRJPg.roa
Signing time: Mon 02 Jan 2023 03:45:23 +0000
ROA not before: Mon 02 Jan 2023 03:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62028
IP address blocks: 92.38.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:7d:5c:54:29:28:da:3e:1b:f4:ed:dc:fb:a6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a538fc54e725a7a97df144a6a2cdd0d9949124f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:ae:f0:2f:5f:31:f3:b6:17:7e:aa:90:13:
8e:a3:61:65:de:99:51:a1:3c:dc:e9:75:09:0c:cd:
e8:4b:5e:1e:a9:36:93:89:6c:0e:ff:3d:63:0c:cd:
96:e7:b5:a3:2b:27:20:4e:73:02:6a:85:34:65:49:
39:bd:8b:51:e8:09:15:03:7b:40:88:d1:79:54:4b:
d0:0f:02:4e:69:48:9e:ef:b2:37:64:3b:63:2a:f6:
3f:32:28:ff:03:f3:61:1e:f7:03:49:3d:26:74:40:
de:1b:2c:f8:81:f7:bf:5f:33:37:b1:17:13:12:05:
c3:b3:94:a0:a9:2f:46:09:04:7b:1b:eb:d1:c7:2d:
25:6c:75:00:5f:96:26:6b:df:35:e5:a5:c8:7d:6d:
cb:c9:e5:bb:63:87:c4:5b:21:6f:57:dd:22:44:2c:
4f:20:6c:0d:57:e5:b9:07:0b:85:6d:b1:26:14:79:
2c:4b:40:72:c0:b0:83:fa:89:80:5f:64:9f:00:40:
22:a6:c9:2c:23:b1:95:0f:b9:3d:ca:06:e1:93:cf:
18:77:4c:2f:af:3e:da:8d:31:fa:db:93:cd:95:24:
88:86:f6:d9:40:74:c8:d7:ec:47:3b:65:f9:cb:55:
ab:ec:e1:a5:eb:3f:61:f8:8a:4f:ca:ed:c4:fd:fc:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:FC:54:E7:25:A7:A9:7D:F1:44:A6:A2:CD:D0:D9:94:91:24:F8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pTj8VOclp6l98USmos3Q2ZSRJPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.40.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4b:06:bc:59:3c:1c:44:df:49:99:92:86:0e:8d:07:b0:06:
bb:0b:55:23:c3:3e:b4:f6:5f:33:4a:2e:9c:1e:ed:4f:94:99:
43:20:d5:66:bc:e2:3d:0f:fd:90:4f:b5:71:a9:2e:57:60:94:
b5:76:04:a9:8f:66:04:ca:b6:a8:9c:37:42:c7:e3:4b:7f:8d:
9d:c4:f6:9b:27:a0:02:04:6e:73:12:ee:6f:f0:04:d5:14:f0:
27:6b:96:c4:72:c8:d0:5f:26:6a:95:ab:5d:be:fd:b7:12:c1:
72:11:e8:f7:53:35:23:39:bd:4c:e1:22:e2:0d:1e:2c:d6:de:
39:18:4c:ef:4d:cb:ab:f3:91:e6:88:c5:b0:ae:74:eb:53:21:
0a:53:9a:3e:35:3c:17:67:19:60:fc:a0:6a:95:6e:94:b6:34:
27:c0:5a:f7:86:bb:8f:c6:11:b1:40:92:db:90:25:05:ae:9f:
50:45:0f:34:97:52:78:9c:b7:ad:64:4c:c8:15:25:ba:8a:9a:
f7:bb:44:ea:69:a2:ae:6e:8f:0c:f6:85:69:59:5c:95:cc:9f:
eb:53:35:59:40:00:2e:64:2c:1d:77:69:ec:d8:fe:22:35:42:
a7:1f:87:c8:dd:45:72:38:b9:74:34:0b:ff:6c:c7:2b:14:fc:
af:7e:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:01 2025 by rpki-client