Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/ikpXpQqEeKOUAN2n0T2XoJ1_lnM.roa
File: ikpXpQqEeKOUAN2n0T2XoJ1_lnM.roa (raw, json)
Hash identifier: DvwuvJwIyH8PLIOgCBmt3IY2f/Q3rbEpZxObPY2CA/4=
Subject key identifier: 8A:4A:57:A5:0A:84:78:A3:94:00:DD:A7:D1:3D:97:A0:9D:7F:96:73
Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial: 048D2B
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/ikpXpQqEeKOUAN2n0T2XoJ1_lnM.roa
Signing time: Fri 01 Jul 2022 13:34:25 +0000
ROA not before: Fri 01 Jul 2022 13:34:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8820
IP address blocks: 92.119.104.0/22 maxlen: 24
2a09:b0c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298283 (0x48d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Validity
Not Before: Jul 1 13:34:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a4a57a50a8478a39400dda7d13d97a09d7f9673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:ca:7a:60:20:34:d6:b9:8d:f3:85:8e:b9:
cd:38:11:6e:db:91:ef:f7:57:38:b2:ca:a9:c6:58:
8c:36:1d:7d:94:11:6c:e9:85:b8:52:af:32:8d:7e:
91:e0:4f:a7:44:84:f2:4b:d4:ac:d8:aa:f2:13:a9:
74:fd:dc:7e:8e:26:4c:d6:e5:bf:13:53:dc:88:57:
8b:b4:fc:fa:55:c3:59:24:fd:fd:bb:38:fa:cc:9c:
97:79:83:4d:15:22:b9:6a:1d:62:30:e2:f9:ac:86:
4c:65:73:85:2a:ff:c8:16:be:23:32:41:3d:39:75:
33:93:7c:90:8a:9e:33:ff:be:0d:17:af:9f:26:b3:
99:28:de:e3:a0:0d:13:cd:10:8e:f0:30:d3:26:e9:
2d:6d:0e:61:1f:bd:e6:1a:54:d2:77:c0:48:5c:b6:
d4:48:57:74:1e:93:90:68:ef:17:cc:54:d9:23:4d:
8f:fd:be:bf:87:86:8a:08:a9:c9:4e:0d:c0:87:b7:
8e:50:18:24:88:8a:d7:1c:9c:4d:2b:b7:46:bd:58:
ca:97:46:ce:16:0f:ca:1f:b7:bc:b0:2e:6b:1e:a8:
53:be:d0:52:5f:3e:1c:18:6d:8f:4c:84:bd:2e:56:
c4:32:4c:a6:dd:db:06:47:f1:b4:22:cf:a7:ee:d5:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4A:57:A5:0A:84:78:A3:94:00:DD:A7:D1:3D:97:A0:9D:7F:96:73
X509v3 Authority Key Identifier:
keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/ikpXpQqEeKOUAN2n0T2XoJ1_lnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.104.0/22
IPv6:
2a09:b0c0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:61:df:84:4c:18:e3:67:cc:f0:e6:45:c3:e6:e0:d4:69:8f:
bb:76:1b:09:f8:b4:68:26:17:34:fe:f8:71:31:0c:04:2e:4e:
8d:b6:9f:b1:3d:20:06:d4:3b:17:d0:af:5b:3a:ef:f3:64:54:
75:81:01:f8:97:22:35:97:d1:d9:e8:16:c2:42:a5:a0:07:8d:
80:45:bf:4a:15:d0:90:4b:bf:d7:2c:37:80:13:96:cb:20:39:
c1:1e:47:7d:a2:91:86:6f:cf:c7:89:0c:ef:cb:b6:81:4d:95:
70:53:6b:83:cf:87:25:a8:99:ee:0c:42:0b:b9:90:67:b2:36:
0c:96:58:99:f5:85:64:95:fd:62:00:a6:16:9a:59:02:c6:3f:
4c:f2:57:20:c9:a2:8c:f2:93:7d:37:eb:77:49:d4:8e:e8:11:
45:12:48:46:d2:a8:08:0a:39:2b:a0:df:48:c5:54:e4:4b:2f:
58:36:96:f4:ef:8a:8f:1c:ac:77:f9:25:17:7e:7a:00:2a:ae:
c8:8f:4e:1e:23:66:e0:30:0f:f2:c0:ee:c3:69:c2:a6:68:5c:
85:7f:ee:c4:30:90:1d:81:97:a4:c6:46:4d:e9:8a:76:6c:90:
73:64:eb:2c:f7:3d:35:3d:4a:8e:39:d9:27:7d:ee:33:c1:1a:
c8:a5:20:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDBI0rMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
NzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNiOWZlMDQwHhcNMjIwNzAx
MTMzNDI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4YTRhNTdhNTBhODQ3
OGEzOTQwMGRkYTdkMTNkOTdhMDlkN2Y5NjczMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi9vKemAgNNa5jfOFjrnNOBFu25Hv91c4ssqpxliMNh19lBFs
6YW4Uq8yjX6R4E+nRITyS9Ss2KryE6l0/dx+jiZM1uW/E1PciFeLtPz6VcNZJP39
uzj6zJyXeYNNFSK5ah1iMOL5rIZMZXOFKv/IFr4jMkE9OXUzk3yQip4z/74NF6+f
JrOZKN7joA0TzRCO8DDTJuktbQ5hH73mGlTSd8BIXLbUSFd0HpOQaO8XzFTZI02P
/b6/h4aKCKnJTg3Ah7eOUBgkiIrXHJxNK7dGvVjKl0bOFg/KH7e8sC5rHqhTvtBS
Xz4cGG2PTIS9LlbEMkym3dsGR/G0Is+n7tUk8QIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFIpKV6UKhHijlADdp9E9l6Cdf5ZzMB8GA1UdIwQYMBaAFBJzH21+PiCtm/Mb
is1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4LzEv
aWtwWHBRcUVlS09VQU4ybjBUMlhvSjFfbG5NLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85
MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJi
OHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXHdoMA0EAgACMAcDBQAqCbDAMA0G
CSqGSIb3DQEBCwUAA4IBAQA7Yd+ETBjjZ8zw5kXD5uDUaY+7dhsJ+LRoJhc0/vhx
MQwELk6Ntp+xPSAG1DsX0K9bOu/zZFR1gQH4lyI1l9HZ6BbCQqWgB42ARb9KFdCQ
S7/XLDeAE5bLIDnBHkd9opGGb8/HiQzvy7aBTZVwU2uDz4clqJnuDEILuZBnsjYM
lliZ9YVklf1iAKYWmlkCxj9M8lcgyaKM8pN9N+t3SdSO6BFFEkhG0qgICjkroN9I
xVTkSy9YNpb074qPHKx3+SUXfnoAKq7Ij04eI2bgMA/ywO7DacKmaFyFf+7EMJAd
gZekxkZN6Yp2bJBzZOss9z01PUqOOdknfe4zwRrIpSB7
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:31 2025 by rpki-client