Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/Rx93K2Anpt2piWgsyT2tCcyOdyU.roa
File: Rx93K2Anpt2piWgsyT2tCcyOdyU.roa (raw, json)
Hash identifier: eSyBVCSKa61zR4IGZNVtQpHulzu9iroOreAyMMq9AtQ=
Subject key identifier: 47:1F:77:2B:60:27:A6:DD:A9:89:68:2C:C9:3D:AD:09:CC:8E:77:25
Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial: 019422FC3D217F8744895A00A0131A8D53A9
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/Rx93K2Anpt2piWgsyT2tCcyOdyU.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60664
IP address blocks: 92.43.50.0/23 maxlen: 23
185.97.176.0/24 maxlen: 24
185.97.177.0/24 maxlen: 24
185.97.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3d:21:7f:87:44:89:5a:00:a0:13:1a:8d:53:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=471f772b6027a6dda989682cc93dad09cc8e7725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:03:e5:06:b7:2b:e8:1f:84:30:92:06:04:
00:65:65:66:bb:7e:7d:64:29:6d:f1:99:f8:98:2a:
05:7c:2f:75:52:7d:6b:97:ed:c2:62:97:8d:8a:2b:
2a:5f:2b:3f:6d:a8:f1:de:21:9b:21:5d:17:47:1c:
61:e4:53:fe:4b:d1:db:84:17:a2:9f:cc:12:52:e3:
57:56:1a:83:f3:5a:1a:5d:dc:8a:ba:4f:78:21:da:
6c:49:20:15:92:62:23:07:2b:68:a3:c8:28:b8:b2:
e1:03:df:e8:af:6a:b5:e0:f7:41:6b:ac:a1:48:78:
b4:fd:ca:0c:47:1a:7a:c8:31:d2:78:9d:53:d9:b1:
00:75:77:bc:e8:9c:03:b2:a4:75:0e:4d:b2:07:45:
dd:59:37:41:73:79:ca:5f:98:55:15:34:6f:25:f1:
80:a4:f9:c7:5c:1f:d9:22:08:ae:93:dc:f9:09:df:
01:16:72:1e:88:ac:4f:f8:8e:5f:47:68:91:48:6b:
29:1b:b3:5a:92:ca:98:a7:5e:d7:40:09:10:ee:90:
79:41:da:72:2c:5c:79:02:6e:89:c4:64:87:cf:0f:
8d:42:00:54:0e:8c:3e:ea:87:f5:bc:53:b4:10:d1:
96:f5:d3:d8:4a:f9:11:4f:48:bb:21:e3:5d:a0:0c:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:77:2B:60:27:A6:DD:A9:89:68:2C:C9:3D:AD:09:CC:8E:77:25
X509v3 Authority Key Identifier:
keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/Rx93K2Anpt2piWgsyT2tCcyOdyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.50.0/23
185.97.176.0-185.97.178.255
Signature Algorithm: sha256WithRSAEncryption
2c:67:b9:85:b4:e4:31:49:70:10:b1:d4:10:34:42:57:0e:07:
d9:dc:4d:50:34:c5:73:7f:3e:4c:18:ac:f9:12:d8:0e:0f:e3:
42:34:0a:c4:97:ca:bf:be:ce:c1:fe:96:be:6a:f0:81:87:66:
36:75:9d:f4:bc:4d:cf:eb:4d:fb:62:24:05:a7:5a:b7:3d:b6:
ef:58:dd:1d:4e:cb:5d:51:aa:4c:49:ef:a1:86:9b:77:bb:fe:
3c:e3:46:dc:4e:99:16:db:27:23:d2:66:6b:71:18:e8:7f:60:
b2:67:c9:73:ae:07:71:fb:c2:17:fa:f7:d1:12:7b:0b:c7:93:
32:7b:46:d6:d8:f5:72:83:f9:af:3c:c0:7b:30:2b:7e:6c:84:
9b:c7:56:67:56:58:ad:dd:5c:b3:d1:d7:88:f4:94:31:20:6f:
9a:82:a0:74:60:f4:aa:e7:a5:e1:48:d6:58:f6:31:25:48:c0:
36:60:f5:34:c0:29:92:b6:f7:14:9b:b2:50:db:9b:af:d1:e4:
14:d3:53:7c:b2:1c:85:ba:aa:ce:6a:47:64:b7:d9:a8:a8:94:
ac:e5:81:44:b0:e7:47:c6:09:e9:66:22:65:58:a6:71:f5:05:
d1:89:5d:a0:7d:e9:cc:8c:41:73:0b:4b:5a:d4:0f:5f:86:23:
23:74:90:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:20 2025 by rpki-client