Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/R2wMoqdkLDHB1BCsXc7koujD71w.roa
File: R2wMoqdkLDHB1BCsXc7koujD71w.roa (raw, json)
Hash identifier: FmALC+nsf+pUttlOP2g4qVc5yZKYgI7dAbntzXZ0Nqk=
Subject key identifier: 47:6C:0C:A2:A7:64:2C:31:C1:D4:10:AC:5D:CE:E4:A2:E8:C3:EF:5C
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 019427B558B4F3B40E19EFE2A5E7D0606CF8
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/R2wMoqdkLDHB1BCsXc7koujD71w.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60722
IP address blocks: 92.255.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:58:b4:f3:b4:0e:19:ef:e2:a5:e7:d0:60:6c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=476c0ca2a7642c31c1d410ac5dcee4a2e8c3ef5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:be:5c:08:f2:9b:55:aa:c5:aa:e6:ab:3b:
af:39:13:6f:dc:06:a2:e7:3b:70:37:58:c5:fb:09:
00:dc:20:3f:de:48:da:5b:9d:de:cc:f3:6e:6d:99:
10:4a:12:0e:20:d7:f8:95:49:fa:f1:15:64:d5:40:
aa:c0:ca:f2:f0:67:14:2d:0b:fa:24:a7:5e:46:e0:
64:12:ef:26:03:a2:b3:0f:97:a7:03:08:c6:a1:8c:
8c:71:14:bc:ed:86:e5:7a:17:ae:7a:77:cc:8a:cd:
9c:05:d7:3d:7b:5b:78:51:47:e8:58:59:72:7f:99:
27:7c:ef:ec:a3:d5:be:38:3b:23:a5:ec:ff:cd:dc:
8a:00:e4:6d:02:14:60:3f:ad:e7:01:9f:a9:90:de:
7b:0e:d2:e2:d9:2c:1d:2e:ef:c7:e0:e8:a2:86:bf:
27:ee:4f:24:37:53:d8:bc:55:01:e1:bb:89:9f:c1:
77:78:76:2e:25:6c:f1:34:22:07:bf:0c:0f:f8:85:
7b:d7:e7:c0:3b:00:21:2c:c4:51:f5:97:f0:41:9c:
c6:f4:c3:3b:a4:67:40:65:79:ce:bf:74:9c:3a:ff:
fc:de:1d:08:11:48:d3:97:8c:60:9c:60:a0:86:52:
1b:49:8c:03:36:60:9d:4a:1f:5b:bf:a8:fe:7c:2f:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:0C:A2:A7:64:2C:31:C1:D4:10:AC:5D:CE:E4:A2:E8:C3:EF:5C
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/R2wMoqdkLDHB1BCsXc7koujD71w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b6:b8:57:c8:0a:c9:33:c8:fb:46:2d:5c:19:75:db:bb:39:
9a:9a:4c:a9:01:71:bb:d0:05:73:6d:48:33:8b:33:da:5d:ae:
aa:f0:80:63:07:96:dc:f7:a9:3f:e3:45:5b:c6:a3:c8:5a:08:
9d:75:76:64:7e:8b:05:41:0c:97:2e:bb:5a:95:e5:7b:9e:f5:
84:e9:ad:1f:42:7d:0c:00:60:91:31:2f:67:8f:f9:ba:0f:89:
63:11:e5:91:d9:07:32:43:3a:7c:e6:6f:77:d9:df:e2:dd:2f:
19:9e:91:57:0c:0d:5b:15:61:4e:b7:69:ee:ae:33:01:6d:18:
dc:9d:73:79:36:94:75:2e:60:e0:1f:06:87:d5:10:f3:b1:22:
4b:94:33:50:d6:ab:49:bc:71:48:fe:f1:3f:83:ba:09:9d:09:
e3:75:e6:a1:ee:d9:18:a2:bc:d1:2b:3c:f8:b0:16:e6:f9:55:
2b:c0:f5:db:04:2c:52:01:49:b6:dc:77:bc:83:65:26:0e:36:
54:fd:16:bf:a3:cb:58:be:0e:8e:bf:60:bc:d2:16:60:8c:df:
c5:42:e0:5a:05:54:dd:58:15:60:f8:6f:bc:b1:c4:2d:d8:77:
8b:10:4c:19:7a:49:ee:12:4c:92:51:8b:f6:08:ef:a2:88:b2:
10:76:76:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntVi087QOGe/ipefQYGz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOGQzNWVjYWU4YTUyOGNlZWM2NGRlM2JkNjNiNzNmYTQy
ZDVmNGEwHhcNMjUwMTAyMTU0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzZjMGNhMmE3NjQyYzMxYzFkNDEwYWM1ZGNlZTRhMmU4YzNlZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq2+XAjym1WqxarmqzuvORNv3Aai
5ztwN1jF+wkA3CA/3kjaW53ezPNubZkQShIOINf4lUn68RVk1UCqwMry8GcULQv6
JKdeRuBkEu8mA6KzD5enAwjGoYyMcRS87YbleheuenfMis2cBdc9e1t4UUfoWFly
f5knfO/so9W+ODsjpez/zdyKAORtAhRgP63nAZ+pkN57DtLi2SwdLu/H4Oiihr8n
7k8kN1PYvFUB4buJn8F3eHYuJWzxNCIHvwwP+IV71+fAOwAhLMRR9ZfwQZzG9MM7
pGdAZXnOv3ScOv/83h0IEUjTl4xgnGCghlIbSYwDNmCdSh9bv6j+fC+XPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEdsDKKnZCwxwdQQrF3O5KLow+9cMB8GA1UdIwQY
MBaAFFKNNeyuilKM7sZN471jtz+kLV9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWIt
N2EzNzIwZDNjZmZjLzEvUjJ3TW9xZGtMREhCMUJDc1hjN2tvdWpENzF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWItN2EzNzIwZDNjZmZj
LzEvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP9BMA0G
CSqGSIb3DQEBCwUAA4IBAQAKtrhXyArJM8j7Ri1cGXXbuzmamkypAXG70AVzbUgz
izPaXa6q8IBjB5bc96k/40VbxqPIWgiddXZkfosFQQyXLrtaleV7nvWE6a0fQn0M
AGCRMS9nj/m6D4ljEeWR2QcyQzp85m932d/i3S8ZnpFXDA1bFWFOt2nurjMBbRjc
nXN5NpR1LmDgHwaH1RDzsSJLlDNQ1qtJvHFI/vE/g7oJnQnjdeah7tkYorzRKzz4
sBbm+VUrwPXbBCxSAUm23He8g2UmDjZU/Ra/o8tYvg6Ov2C80hZgjN/FQuBaBVTd
WBVg+G+8scQt2HeLEEwZeknuEkySUYv2CO+iiLIQdnYR
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:26 2025 by rpki-client