Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sPMVvOzELqbsw3B9O0GKA8lH0Wc.roa
File: sPMVvOzELqbsw3B9O0GKA8lH0Wc.roa (raw, json)
Hash identifier: tl4Vjacj/tFF0gP07UznzFRDzYHlRRlrOMFKceeZ9ZA=
Subject key identifier: B0:F3:15:BC:EC:C4:2E:A6:EC:C3:70:7D:3B:41:8A:03:C9:47:D1:67
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F9AD2A17236A51D14742231459360
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sPMVvOzELqbsw3B9O0GKA8lH0Wc.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42447
IP address blocks: 92.38.48.0/23 maxlen: 24
93.170.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:d2:a1:72:36:a5:1d:14:74:22:31:45:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0f315bcecc42ea6ecc3707d3b418a03c947d167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:6d:ae:52:f1:86:30:4c:fb:46:8a:19:ef:
0e:93:bd:7f:94:bc:4b:0e:fb:88:3a:39:4a:27:4e:
c3:87:ca:58:07:31:cb:23:39:c9:e9:c1:e3:64:4e:
28:00:69:24:19:6e:b1:b0:4d:4c:01:c7:1a:35:0a:
7e:54:67:41:87:fb:2d:f6:bf:64:ef:65:0f:bf:77:
f7:57:c0:7d:f6:ac:ad:fa:39:8c:31:ea:2d:cb:87:
51:2d:92:5d:5c:8f:e9:fc:bb:b3:d8:10:ca:97:71:
58:13:28:e8:2c:c5:d5:22:56:c4:1e:aa:a8:54:3e:
23:8e:ee:b0:31:ea:ce:ec:aa:ad:75:f3:fc:ca:53:
ac:29:fe:21:d2:c1:f9:cd:14:54:41:4b:cd:8b:97:
ac:49:90:25:2d:37:9a:cc:d4:b2:b8:cf:16:ee:18:
68:f6:93:17:28:ab:3c:e8:7a:90:00:2c:a2:b5:96:
e8:db:ec:65:eb:39:ed:52:0d:ef:04:2f:b6:69:9d:
d8:e2:eb:c4:b9:ea:d7:96:47:52:a1:fd:51:1f:ff:
41:59:91:80:a4:db:cd:f3:c3:62:08:ce:40:82:b9:
26:a1:b0:a4:e6:93:70:88:17:14:c8:77:ba:35:c4:
9d:ff:92:02:81:89:1f:9d:cb:4e:1d:3a:5d:c3:71:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F3:15:BC:EC:C4:2E:A6:EC:C3:70:7D:3B:41:8A:03:C9:47:D1:67
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sPMVvOzELqbsw3B9O0GKA8lH0Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.48.0/23
93.170.72.0/23
Signature Algorithm: sha256WithRSAEncryption
10:8e:2b:73:41:7c:e8:83:ce:5c:98:38:57:d2:f2:45:24:7d:
79:c1:76:dd:b8:b0:82:e6:c8:d8:95:1a:97:51:9f:d8:f4:4a:
71:aa:f5:29:64:92:93:21:20:45:de:8b:aa:c5:f6:5a:b4:8d:
cc:8a:3f:73:70:a2:b0:6f:78:b3:f1:ab:ff:f7:32:2d:02:fc:
1e:b7:90:af:ef:46:41:4f:93:e9:91:0f:06:44:bc:97:ad:63:
ab:ba:da:c2:e1:c7:5d:35:c7:50:79:7a:11:7e:c8:cf:1f:e1:
da:7b:cd:9c:3c:48:3b:40:63:6b:31:41:c2:f6:4a:7a:cd:b6:
8d:7f:71:4a:c4:7b:10:85:a4:41:2d:d8:e0:d8:34:17:e6:23:
a2:46:f7:2a:44:82:2e:d8:f3:e4:8c:d3:83:7f:83:f4:7f:c7:
5c:54:38:e3:0f:42:a1:9a:fa:cf:86:23:a8:aa:71:b1:b3:9d:
00:84:f5:86:d9:07:d7:2d:da:e6:87:cc:59:d2:9d:22:7a:62:
49:02:95:c7:f4:9b:91:27:b0:2a:0d:51:f9:47:a5:d1:74:cb:
08:42:b7:d5:a5:0b:8d:78:a9:b2:82:1e:00:36:1b:f5:b7:7b:
df:65:1d:fd:6a:c5:0d:63:46:e2:a5:28:06:e5:5a:f8:30:c7:
3c:6a:8d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:16 2025 by rpki-client