Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa
File: 8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa (raw, json)
Hash identifier: nQrHTPYYHsaKcsU7K7NBUNZKUwu8kquBvMwb0t9InZk=
Subject key identifier: F0:E6:78:12:E7:67:F9:99:A6:F4:12:64:94:BA:98:50:E8:41:AE:8F
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 019426D93DB6A052145754F1ACBA7D1624D4
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa
Signing time: Thu 02 Jan 2025 11:49:18 +0000
ROA not before: Thu 02 Jan 2025 11:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 188.92.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:3d:b6:a0:52:14:57:54:f1:ac:ba:7d:16:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Jan 2 11:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0e67812e767f999a6f4126494ba9850e841ae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:1c:c2:52:d7:f1:35:c9:26:db:ac:62:fc:
b1:3b:d3:de:60:e8:15:56:81:36:11:6f:ea:f1:f2:
de:77:39:8e:89:00:e1:26:e3:bc:5f:68:19:18:50:
16:48:5e:cb:c8:cf:93:45:0c:e3:36:30:39:78:e8:
1d:ee:29:d4:1a:44:df:12:ad:de:cf:84:52:10:5d:
23:71:a8:ba:05:1c:4a:32:3b:89:c6:40:3b:fa:d7:
dc:e1:8c:0b:08:75:b3:02:93:6d:35:a5:b1:ba:3d:
fa:bc:ed:94:a7:12:26:f9:d3:a2:78:71:7c:2b:cf:
40:17:7d:76:79:92:43:96:15:57:b2:b7:a7:ff:3e:
f0:b1:07:ae:aa:81:37:9b:1e:f4:0e:42:41:1a:c5:
b7:0e:fb:b0:c8:19:f8:d8:31:be:1d:37:09:53:5f:
e9:f7:bb:4b:01:ee:4d:95:2b:d9:d0:71:02:6f:c0:
00:37:b6:f5:3e:c8:21:d5:73:91:d1:b9:4d:ca:5a:
f3:69:70:ad:c2:83:97:5e:79:e2:6d:f6:5e:32:94:
0b:e0:55:b9:a7:74:d2:ef:f3:43:7a:7f:e8:9b:dd:
c2:74:5b:6f:0a:06:64:3f:9d:b8:6b:1d:43:11:98:
d7:32:1a:69:06:d1:e9:d3:42:73:12:4e:ab:e4:5a:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E6:78:12:E7:67:F9:99:A6:F4:12:64:94:BA:98:50:E8:41:AE:8F
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.120.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:c0:25:be:c3:4f:97:64:21:82:5f:4e:1f:fd:35:d3:c5:ba:
58:a3:cd:2e:ce:25:95:d9:f1:a6:d0:bf:9c:90:02:03:0d:f5:
51:f2:0d:63:4f:80:69:82:81:89:9b:dc:bb:42:6d:33:e5:28:
df:14:dd:2b:df:94:73:46:11:01:f7:ee:1a:3b:b4:b0:41:a5:
c9:b2:33:a4:f1:0e:56:c9:bd:b1:b0:4d:c9:6d:f0:cc:03:bb:
b3:1b:b9:20:7d:25:07:6e:c6:df:03:1c:e2:54:81:c0:39:08:
1f:e0:08:b9:2c:3b:d0:6e:83:2a:c3:ab:fc:aa:3a:a5:a3:f4:
5a:a6:cf:aa:f8:25:b6:ca:fb:13:29:7b:78:fe:69:21:61:ed:
f4:96:3d:97:30:b2:4c:94:47:c2:bd:cd:90:f1:3e:78:9d:9c:
e4:9a:36:82:4b:1b:cb:7a:cc:09:05:c5:65:ed:8f:cc:af:ea:
79:13:78:db:07:1f:66:60:40:ab:2b:3c:97:95:f7:19:25:f3:
fd:a5:36:6f:69:06:3e:24:89:fb:27:8c:0c:7a:94:a5:64:eb:
a4:b2:9e:ff:fe:d2:28:1a:95:8f:53:27:e7:a1:3d:b4:68:e8:
e7:c4:05:11:c1:73:82:38:21:27:51:05:1b:b9:a0:59:3c:47:
99:72:94:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:56:54 2025 by rpki-client