Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t8bJHJwRvqTlyZz5VusXKe5Q74U.roa
File: t8bJHJwRvqTlyZz5VusXKe5Q74U.roa (raw, json)
Hash identifier: vvCIgA0gqwDWyFLE9FB002708NMB4u+evRPTpR04Qek=
Subject key identifier: B7:C6:C9:1C:9C:11:BE:A4:E5:C9:9C:F9:56:EB:17:29:EE:50:EF:85
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF25FBA2025A602D0C9F8A2C0B743
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t8bJHJwRvqTlyZz5VusXKe5Q74U.roa
Signing time: Thu 02 Jan 2025 05:49:38 +0000
ROA not before: Thu 02 Jan 2025 05:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204584
IP address blocks: 92.38.41.0/24 maxlen: 24
93.171.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f2:5f:ba:20:25:a6:02:d0:c9:f8:a2:c0:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7c6c91c9c11bea4e5c99cf956eb1729ee50ef85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:74:15:15:07:cb:69:0b:fa:dc:bc:66:85:
9e:22:91:16:cf:ef:c8:e8:ba:49:e1:82:a6:c9:98:
d1:e9:78:e1:94:26:1e:2b:d9:77:f8:78:6f:33:ae:
f0:ce:5e:cc:5d:98:d9:0d:74:0c:f8:84:c4:6e:7b:
da:bc:fc:11:11:75:96:c4:20:53:f1:32:90:1e:09:
09:6a:97:71:32:54:45:7e:de:39:45:5c:ea:8d:a0:
47:1b:fc:bf:f8:f3:e0:43:1f:e5:3c:3e:2f:38:06:
b1:d2:8a:9e:7f:c1:9d:f1:fc:9a:0a:19:de:c9:7d:
2f:55:d8:f3:60:23:25:90:42:a7:13:4a:95:2a:8c:
e4:bc:36:9b:54:e5:a7:37:8d:4e:ae:04:e0:bc:8f:
7a:e8:21:f6:be:91:0e:3f:f0:f7:89:e9:40:eb:12:
b0:c9:d1:42:3a:86:77:9c:8f:7c:b9:0c:52:e4:1d:
4d:40:7d:e5:77:fb:ac:b5:90:a3:c9:87:00:ec:6a:
8c:f0:b1:f4:76:79:d1:32:aa:37:32:cc:45:2a:ed:
e1:60:24:41:50:e9:3c:51:04:08:20:42:66:10:7b:
56:fd:76:f9:ce:fd:6a:77:9d:ce:b4:71:46:bd:9d:
d7:d3:2e:4a:d0:a0:75:d1:b9:d0:0e:a4:c6:ba:a7:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:C9:1C:9C:11:BE:A4:E5:C9:9C:F9:56:EB:17:29:EE:50:EF:85
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t8bJHJwRvqTlyZz5VusXKe5Q74U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.41.0/24
93.171.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:cb:8f:3c:08:d4:f7:a1:31:77:6e:78:c7:8d:20:24:5a:87:
d8:25:e1:de:84:3e:2d:9f:e5:87:82:a8:f0:ed:df:df:78:de:
11:b3:7c:32:51:90:42:71:68:de:64:db:05:5f:30:94:ba:92:
f9:e2:0f:c5:ad:04:81:ec:db:9e:64:ac:16:c0:7a:7b:fb:8e:
48:7e:ef:08:6a:ab:a3:74:bf:64:ca:ff:cf:66:7d:a0:e4:89:
45:27:2c:32:94:26:bd:e8:c5:2f:22:58:13:16:6a:e0:ad:f0:
2e:ae:92:8b:5e:75:d6:d6:32:4b:12:2d:8b:f8:fa:63:e4:82:
62:47:c6:1e:35:12:49:22:ce:34:49:04:a1:2f:22:36:4f:01:
0a:b0:3b:38:c2:5e:47:18:3c:cc:73:98:e3:ef:de:cb:74:35:
61:f5:f2:c8:98:67:56:79:15:77:42:f9:2a:b0:47:38:19:45:
8e:fa:10:ca:10:5c:f8:d0:07:42:7d:37:fc:38:09:e3:f7:36:
84:dd:83:27:c4:85:16:dc:f9:bb:52:b5:41:02:81:5a:7d:5e:
1c:5c:bd:ec:66:d1:e9:f1:f4:5d:a0:09:82:aa:c1:93:43:d8:
f8:c6:8b:b0:33:9c:dd:96:59:b4:c3:22:ba:98:79:af:45:c0:
03:f3:08:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:42 2025 by rpki-client