Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/jBd9B-QxZd6kSJHakHtwWCRpb8g.roa
File: jBd9B-QxZd6kSJHakHtwWCRpb8g.roa (raw, json)
Hash identifier: D/BN6zrh/Ppu12+wqVsmd0mbM1Dy48uvpuG5EGpyN0o=
Subject key identifier: 8C:17:7D:07:E4:31:65:DE:A4:48:91:DA:90:7B:70:58:24:69:6F:C8
Certificate issuer: /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial: 0194236A14C85F14094D4919FD555F982EBF
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/jBd9B-QxZd6kSJHakHtwWCRpb8g.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:14:c8:5f:14:09:4d:49:19:fd:55:5f:98:2e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c177d07e43165dea44891da907b705824696fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:9e:b6:cc:06:2a:9a:44:4a:ad:dd:ce:40:
28:c3:e0:9c:86:19:47:82:af:91:31:31:89:99:8c:
d9:59:46:a3:14:5a:a1:b1:df:d5:f3:2f:a9:87:62:
4f:89:80:94:02:60:a9:84:30:87:8d:9e:03:90:6e:
29:e3:72:88:ed:93:2e:ff:2d:68:cb:72:9e:25:06:
9d:59:d8:6b:79:9f:9c:9c:83:46:ab:9b:18:65:57:
83:a4:18:d9:d9:7e:89:e7:ac:85:0b:2f:c9:95:90:
53:f2:ae:3f:ad:0c:f2:f3:c1:8a:22:28:95:03:af:
f7:db:0e:6d:71:fa:0e:02:3b:29:6d:09:4b:aa:90:
38:be:12:ac:56:44:3e:38:61:48:4c:67:78:bd:38:
08:31:53:72:fb:1d:07:90:2b:6a:ce:38:49:de:5c:
27:1c:0d:4b:37:f8:88:ed:7c:44:50:aa:77:75:4d:
19:24:29:f2:f4:1c:5e:1a:cf:7d:9e:5a:0c:6a:1b:
bd:80:a0:b6:63:22:5d:be:9f:8a:37:74:df:b1:18:
f9:b2:f9:68:28:93:a0:d7:e6:77:cf:b9:1b:93:25:
e2:1c:65:c3:af:aa:c1:74:d5:33:9a:63:b5:06:a4:
2b:d1:17:1c:de:bf:d3:da:e4:c3:37:30:0d:b1:db:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:7D:07:E4:31:65:DE:A4:48:91:DA:90:7B:70:58:24:69:6F:C8
X509v3 Authority Key Identifier:
keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/jBd9B-QxZd6kSJHakHtwWCRpb8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.146.0/24
Signature Algorithm: sha256WithRSAEncryption
77:34:36:98:1e:5e:a8:10:04:6b:e5:6b:b4:d6:0c:e8:1a:c5:
ef:b8:e8:74:60:5b:45:c6:fa:c5:ee:f2:cc:48:9f:fe:de:a1:
ef:bb:21:a4:0d:e0:f9:9c:46:b0:ac:c3:37:a6:96:d3:c3:88:
78:6a:36:ed:dd:01:f8:26:56:4b:fe:9c:5f:a8:9e:fc:8f:e4:
92:67:d0:94:27:db:4c:d6:38:34:f8:6b:f9:59:a6:e6:e5:da:
76:e7:c7:28:80:1b:1c:5b:4f:ce:68:53:50:bc:01:68:c2:b8:
15:ad:17:48:b8:ef:49:e7:45:cb:61:b1:13:1b:49:d3:ff:b4:
24:c6:d3:dc:31:ed:d8:77:50:19:2c:be:fd:5e:66:0a:8d:a4:
3e:a2:f6:16:03:6f:53:ca:2d:6d:8b:11:ce:d7:e1:7a:65:3a:
f6:08:a3:fa:72:fa:12:77:98:55:64:96:00:96:3f:e2:58:8c:
79:62:d4:01:8e:b6:11:c2:f0:54:39:2a:37:ad:34:37:f5:4f:
a1:c5:3d:b0:0e:98:a3:ab:99:d9:8a:e9:d6:57:2a:35:7f:2e:
11:b3:aa:34:6b:9a:21:95:4c:62:17:e8:38:47:44:2a:fd:91:
be:8c:89:03:7b:97:29:14:14:71:66:fe:a1:b9:1a:da:f3:57:
51:09:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:45 2025 by rpki-client