Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/uN4WjGDUv5aAj5ins029UDm_hi4.roa
File: uN4WjGDUv5aAj5ins029UDm_hi4.roa (raw, json)
Hash identifier: BMAvU2kFMJ8a+Ei6vt5wIP3ADxYTPm9B/Fm6UYdpFsc=
Subject key identifier: B8:DE:16:8C:60:D4:BF:96:80:8F:98:A7:B3:4D:BD:50:39:BF:86:2E
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018CC9BC44CA4C3BE17E3CE05F90F07DF4B1
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/uN4WjGDUv5aAj5ins029UDm_hi4.roa
Signing time: Tue 02 Jan 2024 10:33:27 +0000
ROA not before: Tue 02 Jan 2024 10:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395092
IP address blocks: 92.119.161.0/24 maxlen: 24
92.119.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:44:ca:4c:3b:e1:7e:3c:e0:5f:90:f0:7d:f4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 2 10:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8de168c60d4bf96808f98a7b34dbd5039bf862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:b1:4b:41:db:a7:30:b3:56:41:6b:04:a2:
11:af:a9:54:85:6b:15:6e:4a:aa:66:1e:a3:4a:b6:
d5:c8:55:99:30:49:63:e9:38:ec:8d:42:0e:d3:53:
85:c9:8e:95:c1:d3:7f:f3:45:30:0d:93:8e:ad:f8:
53:4c:eb:80:b2:78:7e:ab:33:61:1c:8d:cd:a3:df:
54:d0:ea:25:0e:f0:f1:79:0b:b4:41:20:a6:8a:f8:
50:17:86:e4:fa:88:ba:26:6a:c6:49:a3:0d:52:83:
fa:3e:4c:f6:90:9b:a0:ea:b8:5c:aa:82:ea:a2:b1:
e1:6f:26:96:08:44:dd:fb:56:ee:8f:18:4c:17:57:
34:15:87:0d:df:5d:53:3c:55:5c:3b:43:69:04:4c:
44:03:d6:67:57:19:03:8c:10:c9:59:19:d0:9c:6f:
c4:93:7e:41:93:19:e8:db:17:36:25:04:9d:14:57:
29:ad:4c:d0:5b:7b:05:4e:62:af:27:4b:8d:ac:41:
db:15:54:04:80:ad:6d:e5:7b:e8:8a:ec:ec:69:56:
df:20:71:cf:bf:de:67:ba:14:ca:c3:92:29:7d:81:
32:51:4b:58:50:8b:89:fc:c1:dd:67:67:a0:f5:d7:
01:42:ec:00:af:0d:a2:81:7d:3b:9e:82:06:c3:18:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DE:16:8C:60:D4:BF:96:80:8F:98:A7:B3:4D:BD:50:39:BF:86:2E
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/uN4WjGDUv5aAj5ins029UDm_hi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.161.0/24
92.119.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9c:56:b1:b5:1a:da:17:f2:7d:be:d1:03:33:d3:f1:1e:b4:
62:53:f7:1c:01:2f:e5:04:0d:31:21:5f:80:4a:0e:b5:92:04:
d9:57:be:09:c0:ac:5b:e8:0f:7c:2b:a2:fc:ed:44:75:2b:64:
b4:0b:24:80:64:5b:b6:ea:a2:05:f3:4b:24:24:ac:71:c0:0e:
c5:a1:8e:7a:a3:b1:96:0c:50:a6:00:2e:d0:af:12:ae:81:f5:
96:bd:35:4a:f0:c6:f5:ef:b7:4a:27:18:f8:f2:64:ba:c2:48:
8e:c5:69:96:12:dd:d9:fb:69:91:7b:a4:8e:83:85:c9:57:d2:
34:8c:d5:bd:5e:05:34:7e:4f:79:75:68:2c:ee:18:3e:0e:f4:
3a:83:5c:d5:72:af:e8:94:c9:d4:63:16:93:dd:71:a4:8c:1e:
0b:4b:b0:05:33:00:6b:ba:15:79:dc:30:25:88:d3:3b:c9:0d:
15:ae:7a:38:12:00:e8:46:51:fa:dd:22:da:b2:99:92:d1:a0:
6e:32:97:a0:e2:30:48:56:37:60:b9:49:5e:b1:00:8e:be:8c:
ff:bf:77:d3:16:38:43:d6:2c:a8:a4:cf:16:44:1f:86:f5:32:
13:4a:a8:d7:39:d2:d6:ef:50:65:7a:e4:f9:6c:7c:4c:16:01:
8f:fa:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:45 2025 by rpki-client