Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/T7ioCB6jmkWXxdewjrpdSYMr8dI.roa
File: T7ioCB6jmkWXxdewjrpdSYMr8dI.roa (raw, json)
Hash identifier: OGGlJpmrbIZvQC8rgnmqd1f8kKD8FdWXbyDSIxns22U=
Subject key identifier: 4F:B8:A8:08:1E:A3:9A:45:97:C5:D7:B0:8E:BA:5D:49:83:2B:F1:D2
Certificate issuer: /CN=788a72f412a89a87064a36d14c094cf7d9eea204
Certificate serial: 06B2CA3E
Authority key identifier: 78:8A:72:F4:12:A8:9A:87:06:4A:36:D1:4C:09:4C:F7:D9:EE:A2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIpy9BKomocGSjbRTAlM99nuogQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/T7ioCB6jmkWXxdewjrpdSYMr8dI.roa
Signing time: Sat 01 Jan 2022 12:56:31 +0000
ROA not before: Sat 01 Jan 2022 12:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203536
IP address blocks: 92.118.120.0/22 maxlen: 22
92.118.120.0/24 maxlen: 24
2a09:a640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112380478 (0x6b2ca3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788a72f412a89a87064a36d14c094cf7d9eea204
Validity
Not Before: Jan 1 12:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fb8a8081ea39a4597c5d7b08eba5d49832bf1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:56:3a:52:2b:f3:96:9c:be:b1:f1:18:66:
81:ee:7a:ee:c6:7b:21:9b:aa:fe:88:e6:b2:a5:21:
be:5c:50:d2:90:0f:0f:a8:da:b0:74:0f:43:5b:29:
3f:c5:1a:e8:7f:6c:cd:f6:d0:60:90:c2:4f:e5:4b:
fb:2e:6a:11:66:33:af:35:03:32:d0:9c:37:f4:9c:
4d:32:65:b9:ab:0b:f8:88:0e:f3:bd:78:75:76:08:
98:31:69:69:2d:99:c0:c7:eb:ba:bd:55:b6:2c:fa:
b0:a9:2d:bf:2d:ff:16:41:29:0c:29:85:aa:d8:37:
67:38:ea:23:e7:91:2a:aa:71:8f:72:a9:56:8c:b0:
29:aa:a8:44:1c:5c:f9:d9:0a:d0:e7:e1:62:e0:23:
26:75:7d:b6:07:94:bf:a6:e9:be:9d:1d:d7:17:75:
a5:50:dc:b4:30:e7:11:24:a0:2b:b5:6c:c0:14:08:
d1:77:cf:04:5f:60:88:0b:97:dd:89:c5:70:88:5c:
c3:48:30:b6:65:e4:dc:1d:96:07:ba:67:3f:47:01:
94:9a:4b:b2:9e:af:56:a1:d4:f3:35:d8:98:a7:69:
e3:0b:81:1b:81:36:49:1f:b6:f2:ba:93:04:8d:24:
11:2c:32:e2:a7:30:b9:5e:01:48:4c:b1:c0:bd:c4:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B8:A8:08:1E:A3:9A:45:97:C5:D7:B0:8E:BA:5D:49:83:2B:F1:D2
X509v3 Authority Key Identifier:
keyid:78:8A:72:F4:12:A8:9A:87:06:4A:36:D1:4C:09:4C:F7:D9:EE:A2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIpy9BKomocGSjbRTAlM99nuogQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/T7ioCB6jmkWXxdewjrpdSYMr8dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/eIpy9BKomocGSjbRTAlM99nuogQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.120.0/22
IPv6:
2a09:a640::/32
Signature Algorithm: sha256WithRSAEncryption
13:cd:df:72:3e:be:03:e0:6f:9b:b7:13:0d:12:07:d4:a9:b4:
25:57:06:45:2c:81:f1:35:0e:6c:55:b6:ff:05:93:30:93:d8:
88:48:bc:25:7d:db:53:42:9c:30:ce:2b:f3:ca:21:9d:d6:c0:
f2:1b:13:f5:d7:b3:96:c0:cc:88:ca:f8:6b:0d:ba:3f:ac:1f:
02:42:83:fb:ed:79:d5:8e:76:a5:fd:33:89:8f:fc:e1:18:76:
d6:ac:30:c0:5b:ef:9c:09:32:00:1c:03:f3:fa:67:a6:e3:5b:
e8:7e:2d:7c:65:3b:82:85:a3:2f:9e:46:ed:89:ad:7a:8e:c2:
98:f0:a1:82:89:68:2d:c2:a1:52:90:88:f0:6f:ff:bd:c2:32:
0f:63:09:c1:6e:89:ef:3e:44:d8:03:b0:80:20:70:c1:d8:ee:
a0:a2:85:9d:86:24:73:b8:81:b2:3d:b0:15:79:8a:b3:55:55:
5c:08:e8:64:63:b4:42:89:e4:07:b6:e7:60:3b:0d:f0:b8:ac:
74:3d:43:1f:87:55:05:6e:08:d6:78:37:87:f1:c1:39:86:f2:
0b:9e:5f:ca:b1:e9:a7:ec:bf:9e:97:50:77:b2:59:39:c2:15:
8c:6a:b8:17:85:36:20:61:99:c1:06:7c:39:94:6c:c2:da:64:
5c:98:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:51:57 2025 by rpki-client