Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/gQAkI1ussBoBRHUxzEgtHzyMVoo.roa
File: gQAkI1ussBoBRHUxzEgtHzyMVoo.roa (raw, json)
Hash identifier: lP4itzvbFbwQ6+ow8evIdSU7RLOGTZaJ2/PMrGP6MJ0=
Subject key identifier: 81:00:24:23:5B:AC:B0:1A:01:44:75:31:CC:48:2D:1F:3C:8C:56:8A
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D381761FE097FE997DC0C3790543
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/gQAkI1ussBoBRHUxzEgtHzyMVoo.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58033
IP address blocks: 92.246.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d3:81:76:1f:e0:97:fe:99:7d:c0:c3:79:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=810024235bacb01a01447531cc482d1f3c8c568a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:54:3a:eb:62:7d:f3:f2:39:17:ae:36:77:
36:1d:9a:85:ee:f2:38:90:f4:26:ac:fc:28:54:0f:
b6:19:e0:82:f5:57:fb:e4:95:e4:cd:e5:e2:fc:af:
7d:37:d5:43:5b:2c:c6:ef:e1:b0:56:77:df:e1:c1:
ea:36:b1:b8:7e:8a:fb:a7:f6:c9:f3:c8:f7:93:7b:
3e:b2:7b:77:ae:52:d7:87:72:29:ba:dd:57:02:d2:
fa:91:8b:6f:53:6d:b7:3d:56:93:c9:36:38:7d:c9:
da:79:d9:ff:dc:e6:80:26:0f:00:b2:0d:fb:42:cc:
6f:06:2a:3f:3b:59:b4:44:f4:aa:ae:7e:c1:9f:f6:
3f:51:b8:e3:af:5b:42:2d:c3:74:6b:36:82:8c:fe:
17:02:61:f3:54:d3:44:b2:01:13:80:06:b1:ad:64:
8f:6e:45:bb:7d:e2:04:e8:39:bf:c1:c8:cf:2c:a0:
79:73:66:17:eb:61:ba:52:a1:79:56:05:a7:a4:0a:
e2:65:82:df:aa:2f:53:5b:b1:11:e1:19:41:a6:6b:
44:78:54:29:fa:ad:78:93:cb:41:7a:6f:70:91:4c:
19:f9:81:87:b9:da:f5:fa:4d:c8:39:01:69:10:50:
2c:5c:7e:6d:1e:a5:d2:7e:8b:01:74:18:0d:57:bd:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:24:23:5B:AC:B0:1A:01:44:75:31:CC:48:2D:1F:3C:8C:56:8A
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/gQAkI1ussBoBRHUxzEgtHzyMVoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f8:3d:81:0b:a4:64:e4:c3:d7:9d:4c:5b:5a:7f:b3:55:bb:
d4:be:56:fb:ed:b1:0c:73:e6:39:04:6a:40:e8:10:8c:57:8f:
2c:e1:c7:46:dc:33:fe:15:1b:fa:b5:16:9d:c1:6c:30:13:90:
1b:b1:5a:18:98:79:3c:fb:cd:5d:33:f1:e6:f6:a9:84:42:5a:
a1:30:e1:c0:0c:6c:4b:b5:cd:13:4a:62:86:f1:22:ab:5f:b8:
6a:28:c3:fe:82:7d:42:e9:ed:27:ff:72:9f:e1:d0:8b:9c:b9:
71:84:28:e0:8e:96:b1:8a:f5:2a:39:81:1b:91:cb:4a:99:be:
2c:e0:77:d8:a8:23:53:33:35:26:1f:28:35:b2:5a:b1:60:d6:
44:bc:64:26:a9:13:d7:e5:9f:cb:fc:2d:5f:a4:db:cf:64:f3:
e7:e9:af:37:11:35:9f:13:1d:d6:b9:54:1f:9d:0a:e9:33:30:
86:57:ab:a8:6c:be:1e:5e:66:80:a6:9e:ea:c5:24:c1:bd:8f:
8f:82:e8:7b:2e:21:fa:37:3b:c4:fd:fc:6b:56:5b:43:78:76:
5f:a7:7b:5a:c8:b9:3c:27:64:19:ff:86:9f:13:e6:9d:27:72:
15:c0:75:59:05:c8:f2:3b:79:50:be:b9:66:c6:7c:11:61:a6:
66:fd:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:11 2025 by rpki-client