Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/xrVpJW5NTxw2LBd8Iv9FZT4lQ-A.roa
File: xrVpJW5NTxw2LBd8Iv9FZT4lQ-A.roa (raw, json)
Hash identifier: h8yZFyp/WVM+2rEmbSX1VYbUPFY/HM8yKujlDzmyNT0=
Subject key identifier: C6:B5:69:25:6E:4D:4F:1C:36:2C:17:7C:22:FF:45:65:3E:25:43:E0
Certificate issuer: /CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Certificate serial: 01B2E984
Authority key identifier: 9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/xrVpJW5NTxw2LBd8Iv9FZT4lQ-A.roa
Signing time: Sat 01 Jan 2022 09:56:23 +0000
ROA not before: Sat 01 Jan 2022 09:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 92.119.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28502404 (0x1b2e984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Validity
Not Before: Jan 1 09:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6b569256e4d4f1c362c177c22ff45653e2543e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:56:86:b9:ea:80:3b:30:23:39:d8:e0:7e:
87:62:d1:b6:7f:bc:60:4e:51:85:e6:5e:8c:87:9f:
98:d9:d4:7f:03:16:4c:9b:6e:2f:e2:64:4b:34:53:
eb:6c:a9:7f:b2:ea:00:26:f0:de:e0:ad:50:de:38:
f0:4d:70:74:3f:46:fa:6a:f2:38:b4:0a:6f:2b:0e:
bc:c4:3e:70:8b:d3:3c:b8:49:cd:e9:a0:fb:4b:bf:
91:f6:7e:ee:62:36:b8:fe:13:d4:52:e7:50:ff:d5:
67:7f:69:1a:cd:e1:e6:eb:13:e8:1f:7b:0e:b8:75:
fb:33:b7:49:c0:e0:2b:86:59:ce:47:a7:8d:bb:b7:
ba:99:bf:98:b1:ea:c1:3d:e1:b0:17:44:4e:d7:47:
e5:58:30:cc:4d:06:02:1f:bf:cd:6c:88:24:96:61:
05:ed:9a:2f:20:b7:2f:dd:b4:8f:22:04:0d:21:fd:
86:a2:34:d7:1a:3e:b7:1e:d9:6a:51:8a:9a:b1:0a:
e4:d7:ec:7e:4c:8a:6c:86:df:f7:86:56:67:cb:d6:
48:38:b6:c9:49:f9:c9:26:5b:0b:97:5c:98:1d:87:
ed:b2:e9:fd:74:f1:39:f7:86:09:0f:03:85:6e:b4:
3e:93:79:e0:26:2a:3b:2a:f1:4e:4a:d5:68:b1:8e:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B5:69:25:6E:4D:4F:1C:36:2C:17:7C:22:FF:45:65:3E:25:43:E0
X509v3 Authority Key Identifier:
keyid:9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/xrVpJW5NTxw2LBd8Iv9FZT4lQ-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/m0h4hjxhXxsDxsgOVx7BcK40iiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f7:57:48:81:37:1f:de:6a:64:ee:dd:96:37:19:05:d6:ab:
b6:4d:64:ed:3a:02:84:cb:be:f1:08:fa:c3:40:89:36:b9:ca:
09:05:f2:0d:5a:b1:2e:c4:62:58:cf:e7:e7:00:2d:07:e1:85:
83:d5:06:5f:5b:5a:78:81:7d:5c:86:6a:b6:74:eb:9b:a4:9c:
dc:39:a5:35:ea:c8:6b:16:bd:85:23:bd:b0:71:61:53:99:36:
fc:ad:e6:ff:47:57:ce:83:2c:f3:27:ce:9e:6e:1c:b4:5d:ce:
02:c8:90:1f:20:20:b1:50:ce:19:ed:e2:b5:ac:30:e1:4b:18:
a3:0f:9a:62:95:d3:b5:27:51:e4:28:35:c4:4a:56:a3:9f:3d:
b5:fe:d9:55:26:5f:52:e3:1a:92:12:8f:be:1c:c9:52:2c:9a:
dd:9d:02:21:5a:25:ec:ed:c3:09:7c:0b:03:74:2f:ad:52:3f:
a4:3e:d9:fc:db:10:bb:b4:09:76:88:25:d5:39:71:8a:0d:f2:
13:c8:a3:ef:b8:fb:b8:04:ad:ee:7a:69:c1:2a:f1:cc:51:8e:
39:7d:2d:6b:49:b4:f5:61:4b:50:a4:16:1c:4f:58:05:4b:da:
13:ee:66:f2:49:42:61:da:98:a7:b5:5c:54:d3:b1:7b:ed:bd:
7d:77:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:40:17 2025 by rpki-client