Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tk_Qd0s3MqngAPNYexZLdGqJ4Oc.roa
File: tk_Qd0s3MqngAPNYexZLdGqJ4Oc.roa (raw, json)
Hash identifier: ClypeMpbX1txaC/CQqgpD2XAACM3IPBW8B5xAfJz8uA=
Subject key identifier: B6:4F:D0:77:4B:37:32:A9:E0:00:F3:58:7B:16:4B:74:6A:89:E0:E7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A5037983F770C856BC5209112B920
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tk_Qd0s3MqngAPNYexZLdGqJ4Oc.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209922
IP address blocks: 92.38.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:50:37:98:3f:77:0c:85:6b:c5:20:91:12:b9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b64fd0774b3732a9e000f3587b164b746a89e0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:84:bb:90:ac:c6:78:e4:70:a5:71:b2:e6:
d1:0d:06:44:4f:66:b6:21:5d:d5:11:68:03:01:26:
4f:1a:0c:8d:ca:3b:5c:d7:41:02:e1:21:45:2f:89:
d7:d5:74:16:da:93:9e:ea:6f:e7:3a:f9:40:17:49:
8c:ad:51:93:1b:a2:a3:73:c8:6e:f6:c4:76:25:50:
2a:a5:2a:c2:3c:00:bb:4c:cb:3e:fc:39:70:00:c7:
1d:f8:3d:d5:29:28:46:5d:54:c8:83:2b:ef:57:93:
ec:af:cb:05:09:9b:36:b4:ba:ba:62:42:84:a3:e9:
8c:55:f4:ec:71:ac:eb:79:f5:74:30:49:f2:1d:a2:
7e:73:ff:ab:68:02:9f:5e:d0:9c:c3:1b:fd:32:38:
33:4e:96:7e:6a:09:41:e1:53:48:43:26:44:68:56:
3b:8b:09:96:7a:d6:40:6c:44:3f:a1:5b:0a:73:9d:
63:46:87:16:a7:de:37:f0:ae:0d:f6:22:3a:1e:7d:
50:80:bb:e5:27:57:2c:e7:a3:85:30:10:3c:4e:4b:
8f:d4:d6:1c:b7:a8:67:a9:d2:54:a6:73:2f:95:7d:
79:f8:9d:39:6e:d6:14:37:ed:2b:4e:22:74:8b:7b:
d8:ec:d4:93:eb:35:47:51:35:14:7b:7a:a5:8b:42:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4F:D0:77:4B:37:32:A9:E0:00:F3:58:7B:16:4B:74:6A:89:E0:E7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tk_Qd0s3MqngAPNYexZLdGqJ4Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:75:72:56:56:d0:f3:da:54:b1:ed:36:10:09:0e:13:a5:4f:
37:ea:c8:de:cf:6a:2f:be:94:70:c7:0b:4f:c7:6e:ef:46:21:
57:b8:b1:86:b1:85:08:9b:94:95:2e:df:b9:70:1c:68:8e:2f:
c8:99:4b:2d:b0:c2:a4:3e:4b:f1:f7:09:0d:ff:b6:d0:21:1d:
a1:10:45:fb:bb:78:c7:6e:9e:ef:4c:41:c6:c2:9c:d8:20:5f:
35:bc:53:38:f8:48:83:8c:94:9a:50:25:56:ad:a7:cc:fb:51:
72:32:ae:00:06:6e:61:7b:3f:7f:54:89:2c:bd:33:5e:07:32:
ab:4a:1c:91:6e:1b:06:49:dd:d2:ae:67:2f:97:a1:34:8c:23:
50:43:92:08:c4:ca:be:06:2e:9c:90:cc:c4:23:72:4e:2e:58:
89:83:34:04:d9:18:d6:94:e8:ee:e2:ca:8a:bf:d8:b6:49:5c:
31:37:36:8d:1e:86:98:c6:98:41:9e:de:9c:5e:40:fa:66:e1:
f8:f5:4e:a4:1c:17:dc:5b:f1:2a:39:37:e8:66:4a:3d:b0:79:
bd:39:7b:bd:da:36:cd:28:f7:fe:97:46:03:d9:f5:e0:eb:36:
fd:14:06:08:36:66:83:41:ca:ea:94:f5:19:10:67:af:8a:36:
4d:3a:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:29 2025 by rpki-client