Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa
File: V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa (raw, json)
Hash identifier: zjPqUL5Ps4cQOvmd2x7l8voc2WY0ZgzjWtjc6s/1ibs=
Subject key identifier: 57:A6:C7:B5:37:16:73:45:9E:83:41:31:1C:F7:D9:FA:31:7F:50:E8
Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial: 019422FC3C99FA7D1FE426CB3C4FA14F4C26
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42699
IP address blocks: 92.43.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3c:99:fa:7d:1f:e4:26:cb:3c:4f:a1:4f:4c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57a6c7b5371673459e8341311cf7d9fa317f50e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:2e:d0:93:7d:0c:97:20:fc:43:c2:f7:3e:
0f:4e:ee:f6:ed:ba:14:9e:2f:65:51:9d:62:dd:1f:
02:b8:96:4b:f5:7c:56:7a:fc:ee:b9:15:ca:2f:a8:
ed:4e:11:58:e9:97:de:ee:80:ac:d8:5c:69:fd:d5:
f9:41:0a:ab:c8:c5:e8:c9:3b:2f:50:cc:9f:ae:d8:
37:8f:24:98:0f:a5:13:05:46:0e:5c:a4:d4:72:2c:
fd:e8:72:c2:c8:ee:3a:95:2e:d4:a5:c3:ae:40:14:
cf:02:bf:ec:09:72:bd:49:e9:97:18:d5:94:bc:ca:
b7:6d:7f:08:ce:c5:ca:71:d0:d8:c4:96:9f:89:73:
02:7c:23:83:9d:f0:de:f2:4f:a5:a6:63:4f:d7:04:
94:83:ec:23:f6:3e:a8:80:75:f5:fe:58:0e:a2:d7:
6d:a5:7a:e1:f6:e6:b7:b7:f1:95:9a:bb:ae:b6:ad:
18:da:02:83:ac:b1:23:70:85:99:6e:31:33:24:9a:
a1:1d:8d:2a:5e:0a:96:3d:d9:e6:5c:b6:92:9b:ca:
c8:2f:9d:dc:47:92:ae:96:32:b0:90:0a:8a:6b:ac:
9c:6d:3b:ca:91:85:a1:18:4d:2c:13:9c:62:30:84:
96:16:f0:53:24:69:47:81:44:51:bd:ab:4d:b7:c6:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:C7:B5:37:16:73:45:9E:83:41:31:1C:F7:D9:FA:31:7F:50:E8
X509v3 Authority Key Identifier:
keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.48.0/21
Signature Algorithm: sha256WithRSAEncryption
33:a8:93:f0:75:d0:30:50:ee:55:9a:fb:42:f0:51:5e:83:77:
99:6d:37:4e:f4:b5:5b:6b:a5:21:cb:89:4f:ba:28:4f:75:66:
b0:cb:5a:aa:cb:38:e8:b5:ef:93:8c:28:af:72:63:05:78:d1:
91:d3:66:8a:36:14:4f:2b:7f:38:39:5b:36:bd:b4:bd:9e:8b:
e7:0c:52:94:ed:aa:ad:b8:c2:7c:de:0e:07:cf:09:29:ab:1d:
d5:e4:b6:0d:2b:dc:98:f7:84:c6:0c:2c:8a:f9:d3:c7:ad:d4:
31:d6:fc:6e:19:42:d5:ba:8b:c4:58:2d:17:3f:57:6c:9b:69:
9a:c0:59:14:21:ae:55:6f:4a:a3:30:44:2e:0d:bd:7f:6c:ea:
39:36:2c:45:42:8e:bc:c9:8d:6a:38:7c:c2:4c:ea:07:30:43:
e2:07:07:e9:06:f1:99:a2:f9:87:0d:7f:c0:1b:9a:7b:b4:5a:
6c:c3:8b:bb:43:f1:88:f2:d8:21:d4:3c:d0:72:e6:17:5e:33:
9d:ce:f5:77:99:00:5a:fc:7d:eb:10:44:0a:04:2b:4a:23:f2:
ef:e2:c6:02:dc:b3:2f:38:b7:f6:72:ab:fd:2c:c7:d1:b8:3e:
ad:e1:23:37:27:5f:de:ab:1b:01:45:bf:cb:81:91:45:57:19:
98:64:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:10 2025 by rpki-client