Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ss5pa2Y0eKCyMRsjBnIomesfzVI.roa
File: ss5pa2Y0eKCyMRsjBnIomesfzVI.roa (raw, json)
Hash identifier: I1Ex7sdR+6WCLwH4njaVuc/p4TL45tlWevPjc6wldrc=
Subject key identifier: B2:CE:69:6B:66:34:78:A0:B2:31:1B:23:06:72:28:99:EB:1F:CD:52
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2A45A427
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ss5pa2Y0eKCyMRsjBnIomesfzVI.roa
Signing time: Tue 21 Jun 2022 14:48:45 +0000
ROA not before: Tue 21 Jun 2022 14:48:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211687
IP address blocks: 92.38.35.0/24 maxlen: 24
92.38.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709207079 (0x2a45a427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 21 14:48:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2ce696b663478a0b2311b2306722899eb1fcd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:40:80:a3:7a:20:3c:fb:4f:30:26:a5:d8:
eb:ed:8e:f3:de:96:9c:d8:e7:1b:0a:8e:61:76:e4:
1d:95:1b:bb:a3:e1:57:bf:6f:9e:c3:ff:05:22:87:
f4:f1:1d:02:7f:c8:d5:6e:de:8b:4d:58:a0:de:c9:
53:aa:97:a6:09:ef:15:c5:81:8a:e7:49:d8:11:c2:
a4:ba:7c:52:d1:8a:84:43:ab:52:59:b5:dd:2a:ee:
77:73:d3:83:2c:38:32:38:a1:4f:88:17:5f:31:0e:
73:11:e1:57:7f:9a:f3:7e:17:d4:62:6c:62:08:82:
b1:61:4c:08:b0:b7:8f:86:d7:74:6e:32:fb:be:2e:
f9:93:bd:aa:c5:7f:4f:87:f9:83:61:db:f1:ad:d5:
1c:c9:a2:6f:95:1a:52:72:dc:9b:a5:ec:32:59:3b:
29:3d:47:71:71:cf:8a:2d:a5:03:c2:17:52:16:48:
31:e2:87:8a:17:e6:50:c3:0a:d3:4b:16:74:cc:6a:
65:4d:36:f0:ee:a9:30:2f:1d:bc:1f:3f:c2:7d:21:
a5:31:2b:84:7c:e9:f7:3d:10:c9:ff:f1:93:96:6d:
ef:ea:fd:eb:5d:39:f4:4b:6c:14:69:97:fc:ee:82:
0e:4d:1a:58:70:19:55:e5:e5:74:7b:01:bb:2d:00:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CE:69:6B:66:34:78:A0:B2:31:1B:23:06:72:28:99:EB:1F:CD:52
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ss5pa2Y0eKCyMRsjBnIomesfzVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.35.0/24
92.38.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:96:c5:b9:3f:67:8e:08:85:eb:a6:c0:30:b6:39:8c:bc:0a:
f9:bc:b3:07:ca:55:06:10:52:16:b9:b0:8f:00:a8:d6:4b:b5:
a2:43:26:b6:9f:1b:b4:0e:f4:38:32:51:f5:7d:cb:2f:f8:ec:
8f:9e:9c:fe:ab:3a:31:b3:f6:00:6b:3e:f6:a5:8c:42:3d:90:
87:80:4b:8a:d4:04:26:70:93:00:c7:01:63:2d:d9:90:c4:24:
db:f3:9f:4d:6f:61:54:7d:0d:b1:1c:1e:6f:b4:4d:38:fc:0c:
47:ab:e2:05:83:f2:0a:18:60:ba:c4:73:31:1c:7a:89:95:66:
c8:45:2e:9e:11:16:b7:ff:a4:df:da:7c:13:7f:c9:2c:2d:bc:
50:7c:d7:b9:2f:fd:23:ec:e9:d2:a2:b6:38:3f:c2:f4:08:3a:
92:06:0f:ba:d8:d2:43:03:d7:58:bf:2f:fe:d3:13:d2:a4:8e:
69:61:0d:3d:63:77:c8:16:d7:49:99:0e:44:f0:f3:7f:96:bc:
ff:dc:fe:e8:ac:b8:10:53:8c:2b:50:bc:3e:52:3b:49:3a:e4:
21:61:4b:4d:72:28:85:f0:5d:d8:48:2d:4a:74:74:75:6d:f4:
d6:22:8f:43:e2:00:63:65:82:9b:e6:25:f6:a6:21:94:63:3b:
51:94:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:55 2025 by rpki-client