Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1luOJoceYPS7-7_I-iLk83jG10s.roa
File: 1luOJoceYPS7-7_I-iLk83jG10s.roa (raw, json)
Hash identifier: glzAMzpehVIVqtiL5xQbV0AFdvaZOZALNLH6WGtE0n8=
Subject key identifier: D6:5B:8E:26:87:1E:60:F4:BB:FB:BF:C8:FA:22:E4:F3:78:C6:D7:4B
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5CACB7494AD2977229DFEDB712C35
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1luOJoceYPS7-7_I-iLk83jG10s.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44149
IP address blocks: 92.246.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ca:cb:74:94:ad:29:77:22:9d:fe:db:71:2c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d65b8e26871e60f4bbfbbfc8fa22e4f378c6d74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b6:b8:d2:ca:b2:3b:06:0e:ac:d1:22:ee:e4:
66:49:de:65:e4:60:66:f4:ef:cf:02:1f:bc:89:64:
57:bb:a9:98:f0:ff:71:83:63:4d:a0:ad:46:58:2d:
7c:c0:5a:d4:af:75:16:6a:51:f6:82:30:a1:ec:ba:
6f:f3:7d:10:00:ce:53:e6:17:36:de:c1:0c:1a:ef:
8e:6f:b7:36:5a:5f:02:a1:ab:04:40:ab:39:cb:df:
e0:ad:3d:8d:3b:50:27:54:84:fe:45:40:48:8b:c5:
a6:9b:64:f0:14:fc:b5:a6:bb:a3:c8:d2:bf:28:a2:
9d:10:f4:0a:d7:fc:18:db:8b:f6:69:c7:18:e8:21:
93:88:2e:33:d1:55:f2:5d:8e:2d:40:a7:01:ba:7c:
f9:4a:c6:ee:6f:ba:64:ea:db:d6:44:eb:fc:63:74:
b4:b1:74:a6:fe:cd:df:1d:78:45:c6:72:9e:81:32:
58:89:91:e2:73:ec:fb:e3:33:7c:92:df:b7:d4:14:
5f:34:37:8a:c6:93:6f:f8:3f:9d:09:3f:73:51:94:
9f:90:2b:dc:82:cc:10:6c:25:a7:74:7a:d2:41:bb:
01:94:60:e8:00:c7:05:52:ef:f1:32:cb:ee:87:9a:
ee:1b:67:65:5e:8f:e2:7f:bd:38:a6:24:85:0b:e5:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5B:8E:26:87:1E:60:F4:BB:FB:BF:C8:FA:22:E4:F3:78:C6:D7:4B
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1luOJoceYPS7-7_I-iLk83jG10s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.78.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e8:04:6f:8a:be:b3:d7:ad:3c:12:15:fe:94:4f:87:10:0c:
80:38:39:cd:fe:4f:08:6d:35:a7:3c:33:10:d2:80:86:e5:3e:
f8:2e:be:56:75:a5:e4:c0:a8:81:e4:d5:72:82:f4:0c:25:62:
b9:4f:fc:4e:58:fc:e7:3f:2d:96:66:64:10:85:be:f7:90:76:
0e:9f:78:6d:cd:ec:fc:2b:a1:2d:6b:a9:b4:44:80:63:bc:69:
c0:cb:ac:fa:95:e3:1d:fa:70:ea:53:ae:de:9c:8a:9c:3e:a0:
1e:89:ae:1b:a6:8b:be:c2:2d:c0:d8:77:c6:15:de:09:bc:4a:
93:a4:4a:74:42:23:61:79:b7:41:0e:8c:5e:b3:88:06:f4:c4:
72:5d:3e:b3:9f:39:cd:66:80:7c:d0:6d:bb:c6:23:21:6b:8f:
2b:a5:1f:61:c0:fb:7f:a1:bd:2a:c5:ec:f3:ca:44:49:65:ed:
ab:b3:ea:4f:5b:ea:ca:e5:60:7e:09:25:94:cc:cd:d2:0f:ef:
44:3e:7d:22:4f:89:67:17:b8:1f:ec:b3:a3:7c:3a:62:2c:5c:
be:3a:cc:94:b0:71:12:29:18:8a:ea:3f:e6:bf:23:4d:04:ac:
5b:12:8a:e2:58:27:f4:23:aa:00:c5:6a:be:45:7d:90:92:c9:
01:da:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:24 2025 by rpki-client