Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wVxKd6fH4Xr4EhX-loLcnZzTzks.roa
File: wVxKd6fH4Xr4EhX-loLcnZzTzks.roa (raw, json)
Hash identifier: LG5ZefEeOtvrKWAlmFGAWQOQoFiG9TNs8LbRk2GQVQ8=
Subject key identifier: C1:5C:4A:77:A7:C7:E1:7A:F8:12:15:FE:96:82:DC:9D:9C:D3:CE:4B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095B1A5CF874BCCF84687CD57D0BB04
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wVxKd6fH4Xr4EhX-loLcnZzTzks.roa
Signing time: Mon 02 Jan 2023 03:45:36 +0000
ROA not before: Mon 02 Jan 2023 03:45:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209922
IP address blocks: 92.38.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:b1:a5:cf:87:4b:cc:f8:46:87:cd:57:d0:bb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c15c4a77a7c7e17af81215fe9682dc9d9cd3ce4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:63:92:7b:09:93:ac:ad:80:ee:56:58:e0:
92:d9:53:c0:dc:ad:18:3c:0f:80:84:db:9b:bb:18:
74:43:33:93:13:8a:3d:af:ad:8a:fe:a8:da:7d:4d:
83:af:46:ab:8b:8b:75:4b:9c:56:02:ef:c9:e8:93:
64:fa:0f:24:17:15:87:d9:a5:69:e2:6a:d6:ea:89:
54:02:a1:89:1c:35:24:32:b8:8f:c6:c7:57:fb:8f:
81:e5:b7:18:9d:95:50:cd:06:3d:08:37:87:15:5b:
78:93:9d:ad:22:95:44:ec:5d:a7:02:1a:52:31:18:
6b:ec:e2:2f:36:06:b3:69:3c:ec:97:46:1d:a3:56:
c5:fe:45:4b:ce:6e:a0:46:1e:18:0d:d2:2f:85:1c:
7f:7a:f1:c9:09:5a:19:11:39:c2:a6:a0:cd:72:ee:
45:55:35:59:3a:05:31:13:7c:8d:ee:6d:89:80:11:
fd:1e:13:29:eb:47:d7:be:63:d2:34:b0:aa:a7:07:
b9:df:7a:49:f1:09:49:18:c0:c6:f3:4a:98:01:9f:
f5:25:7a:5b:4d:41:bd:8b:6e:55:67:dd:73:0c:e9:
bb:72:68:29:82:62:7c:a0:bf:84:9f:d6:60:66:3a:
02:83:57:b3:6b:de:49:fa:66:f8:bc:2e:af:49:ed:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5C:4A:77:A7:C7:E1:7A:F8:12:15:FE:96:82:DC:9D:9C:D3:CE:4B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wVxKd6fH4Xr4EhX-loLcnZzTzks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.93.0/24
Signature Algorithm: sha256WithRSAEncryption
21:48:19:4f:9d:4d:77:57:b6:a5:04:e6:d5:1c:9e:eb:10:fa:
fa:b3:cd:de:73:f7:64:fd:22:49:f2:a8:af:d1:89:e1:75:8e:
6c:80:42:07:42:76:13:1d:d2:c1:c1:61:76:48:c1:77:5e:0b:
29:f0:b0:8a:f7:c9:50:53:71:a2:33:a4:d2:4f:cb:ae:8b:82:
2c:7a:3d:c8:3d:a8:4a:92:ad:9c:ed:43:19:9b:20:96:c1:e2:
f4:27:f9:7f:89:b3:fd:0a:5c:d0:2d:9b:f4:b9:76:b2:ee:94:
d3:a2:1f:d8:63:cc:45:14:f2:fe:51:5b:ec:50:c1:3b:db:4e:
c6:ee:21:b5:15:1e:f7:15:2a:68:b6:db:db:88:18:6b:fc:f5:
f7:64:87:3f:fd:62:a6:35:49:3c:89:3a:0d:7b:5a:21:23:b4:
3a:5c:66:d4:f4:b6:74:fd:1a:fa:a7:f6:a8:ef:43:64:fd:ef:
d5:eb:b9:6a:cb:f2:7e:93:1b:56:22:62:b8:98:fb:d6:77:98:
b2:30:15:94:dc:b0:5e:75:05:e6:32:92:67:2e:a0:fd:d5:10:
ae:35:dc:c4:36:11:f0:e3:15:b9:9f:10:60:83:ff:52:03:d2:
f6:c2:76:5f:f5:b3:93:30:7d:e5:72:05:51:db:4b:f7:21:d0:
08:df:f1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:27 2025 by rpki-client