Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/oD7gH23J4FZOhl72dypn6WbKJOU.roa
File: oD7gH23J4FZOhl72dypn6WbKJOU.roa (raw, json)
Hash identifier: SiayfXhgbOl90t/mtTvRWNdsIvCpiGEcMBLSlE7dlGY=
Subject key identifier: A0:3E:E0:1F:6D:C9:E0:56:4E:86:5E:F6:77:2A:67:E9:66:CA:24:E5
Certificate issuer: /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial: 2AB27CF1
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/oD7gH23J4FZOhl72dypn6WbKJOU.roa
Signing time: Sat 01 Jan 2022 09:03:32 +0000
ROA not before: Sat 01 Jan 2022 09:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212673
IP address blocks: 92.255.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716340465 (0x2ab27cf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8912e418225da95d6a21302407923ff94549572b
Validity
Not Before: Jan 1 09:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a03ee01f6dc9e0564e865ef6772a67e966ca24e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:3f:9e:cc:a1:6b:30:1d:63:08:0b:ad:7b:
e9:9e:2e:71:61:68:21:df:d0:28:f9:f9:1f:d5:d2:
f4:5e:66:22:1b:86:8d:f1:d8:a3:88:3e:2b:93:21:
29:f9:b5:8b:5e:3a:f5:c1:79:41:32:53:36:5f:a5:
8e:8b:6c:0a:7f:e3:87:87:a7:87:21:03:6f:1f:d6:
c8:35:95:0f:5e:7a:c2:ef:ca:c5:e9:c4:59:7c:2b:
4d:2f:49:17:eb:69:05:dd:d4:d6:84:b8:24:04:3c:
f8:54:77:33:a5:35:51:36:ee:12:6f:f8:41:f2:fc:
66:4a:9b:c7:18:88:f2:49:02:f7:b0:b3:54:04:2f:
35:18:3e:1d:34:4f:a5:fd:03:32:29:62:7d:3a:ce:
f1:ce:1e:29:41:c4:ba:a8:1a:8f:ab:21:36:d2:6a:
52:20:44:1d:de:8b:54:fb:77:fa:3c:a3:a5:d9:07:
33:70:40:6b:cf:d7:20:23:40:04:56:05:b6:93:e7:
e4:75:e7:fa:4f:09:d3:3c:b5:ec:84:17:23:85:1b:
92:4b:1e:25:64:ae:a8:ce:79:6d:b8:0d:8c:ac:ad:
c2:b5:75:ab:5f:15:24:d8:e5:c0:8f:02:8c:fa:ca:
0d:ae:65:d2:12:b3:7a:b0:af:5e:7a:96:f1:fe:eb:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:E0:1F:6D:C9:E0:56:4E:86:5E:F6:77:2A:67:E9:66:CA:24:E5
X509v3 Authority Key Identifier:
keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/oD7gH23J4FZOhl72dypn6WbKJOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.51.0/24
Signature Algorithm: sha256WithRSAEncryption
35:47:c4:57:30:15:2a:a9:8f:96:2f:77:0b:5a:6a:d2:36:1f:
cb:30:04:1b:18:82:25:85:72:e4:0a:4a:a7:f6:3e:0e:62:4b:
63:f2:24:b3:b0:5d:c6:97:48:72:5d:97:ab:09:da:bc:a4:8b:
2d:d6:49:f1:24:1b:14:d9:17:b7:d9:ce:c6:47:f2:c7:f6:1c:
11:c4:4a:b4:a7:c9:9e:0e:95:16:e3:32:7c:50:38:e4:d6:9b:
56:23:b2:4d:fe:9b:ca:10:55:28:69:fb:32:ae:ff:bb:32:9b:
ad:79:46:cc:b2:07:71:4e:6a:6c:ca:35:8a:33:af:c0:73:1f:
df:07:35:30:2e:2d:d8:f4:1f:28:2b:81:38:8d:e3:05:c2:aa:
2d:5e:e3:5d:00:1d:fb:eb:d5:b2:51:b2:e8:11:fb:57:e8:d0:
dd:1d:13:8c:ad:28:13:01:a1:25:8d:08:45:f8:78:9c:06:fb:
6e:6f:84:40:37:94:4a:a0:1e:7f:16:ce:e9:c7:f8:52:fd:d8:
a0:3e:dd:f3:50:1b:82:45:d7:39:0b:78:e3:eb:5b:4e:90:a3:
9a:7c:d9:bd:1b:23:84:64:b7:54:6c:83:29:4a:18:bc:a5:9a:
a7:ba:28:5b:ff:56:a7:28:23:b0:f9:f0:02:35:1b:02:10:4b:
7b:63:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:55:42 2025 by rpki-client