Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/flLqC5dzLy0iPRpksg7nr1cB16s.roa
File: flLqC5dzLy0iPRpksg7nr1cB16s.roa (raw, json)
Hash identifier: M3Z9Bdhnjr+mqLRaGjWfeMBxC6QJQJ2+Ui7YuhZAOzU=
Subject key identifier: 7E:52:EA:0B:97:73:2F:2D:22:3D:1A:64:B2:0E:E7:AF:57:01:D7:AB
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 01857082B9C8BF76374DC2E5619BB7719162
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/flLqC5dzLy0iPRpksg7nr1cB16s.roa
Signing time: Mon 02 Jan 2023 03:24:53 +0000
ROA not before: Mon 02 Jan 2023 03:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211327
IP address blocks: 92.249.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b9:c8:bf:76:37:4d:c2:e5:61:9b:b7:71:91:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Jan 2 03:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e52ea0b97732f2d223d1a64b20ee7af5701d7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:05:84:51:18:2e:d9:ef:7b:f2:13:5d:3a:
53:49:af:e5:59:a5:b2:2d:6c:b8:61:38:75:f3:0f:
9b:3e:55:30:61:a7:84:38:53:34:9a:63:04:30:51:
d7:0d:8f:ef:76:ab:bb:2c:da:58:26:3c:83:bf:4b:
34:73:4c:96:3a:9a:f9:da:7f:1e:9d:44:82:e8:60:
3a:be:7f:b9:7a:f7:25:54:c7:d8:37:16:89:39:c4:
e9:91:5e:81:df:03:c0:8e:5c:26:54:09:f1:27:5b:
48:08:fc:74:cf:73:b4:0d:cd:ed:e5:1b:de:93:69:
d0:95:e3:b0:2c:89:02:b1:e5:a6:15:4f:e4:85:e9:
60:05:32:38:25:a8:3d:21:98:71:73:27:ee:fe:0a:
7c:18:bc:d4:1b:ee:5b:82:48:cd:05:93:b5:68:3d:
00:c6:54:6e:dd:78:dc:f2:41:2b:bd:ac:ce:ba:eb:
08:28:05:16:b4:21:6b:88:b8:81:08:86:b5:e1:3a:
82:01:64:1d:8b:c3:80:75:e7:97:52:b0:c4:9d:88:
1f:87:d9:96:3e:3a:a6:9d:2e:b1:ef:87:cc:8e:91:
13:d2:02:10:5a:ce:70:9e:68:de:3d:c1:3e:9b:a9:
5d:ef:b6:d1:85:cb:9b:05:d0:8c:e7:fc:10:85:dc:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:EA:0B:97:73:2F:2D:22:3D:1A:64:B2:0E:E7:AF:57:01:D7:AB
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/flLqC5dzLy0iPRpksg7nr1cB16s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.24.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c0:08:14:1a:98:85:4b:b7:9e:2a:d0:27:2c:b7:c6:6f:32:
c4:a9:26:e0:55:c9:9d:e1:19:00:7c:09:6f:b5:3b:04:4c:24:
f3:58:26:d1:9e:51:1c:2b:68:b1:7c:e7:e8:de:b9:aa:05:bf:
84:54:b5:b4:59:2f:43:5d:43:07:63:d1:17:de:7a:04:09:f2:
31:18:29:86:da:a9:90:d9:1b:90:2e:13:cb:96:05:29:dc:50:
c2:7a:0c:cd:9d:21:fd:c4:15:2d:e1:61:ec:b2:60:ac:93:a0:
44:97:9c:b6:de:39:57:33:1a:89:aa:37:16:78:e5:53:b3:82:
66:a7:b4:2f:94:37:4f:5d:f4:51:75:3b:bb:b9:3e:69:09:ac:
58:5a:28:3b:59:2d:26:a2:ba:e3:11:61:02:fc:56:1b:07:9e:
63:aa:2b:ec:bf:84:66:a0:0e:8c:a9:79:7a:7d:a7:bd:ed:19:
4a:4e:c1:ab:73:ff:4b:31:cd:b1:1b:43:94:6e:f7:39:91:82:
e7:83:42:91:a1:8b:d2:68:71:36:2e:a5:33:41:cc:71:b4:d5:
bd:00:88:b2:9b:56:08:4c:4b:08:6b:86:39:e1:11:15:cd:be:
bf:d4:0d:28:2d:e7:da:ec:e0:d5:61:8a:73:26:bc:fc:94:c1:
e4:37:ee:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgrnIv3Y3TcLlYZu3cZFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTc4NGYzNzA2NDAzODNlOTdlYzkyOTYzYmNhZDMxODFi
OTk3NzQwHhcNMjMwMTAyMDMyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTUyZWEwYjk3NzMyZjJkMjIzZDFhNjRiMjBlZTdhZjU3MDFkN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksYFhFEYLtnve/ITXTpTSa/lWaWy
LWy4YTh18w+bPlUwYaeEOFM0mmMEMFHXDY/vdqu7LNpYJjyDv0s0c0yWOpr52n8e
nUSC6GA6vn+5evclVMfYNxaJOcTpkV6B3wPAjlwmVAnxJ1tICPx0z3O0Dc3t5Rve
k2nQleOwLIkCseWmFU/khelgBTI4Jag9IZhxcyfu/gp8GLzUG+5bgkjNBZO1aD0A
xlRu3Xjc8kErvazOuusIKAUWtCFriLiBCIa14TqCAWQdi8OAdeeXUrDEnYgfh9mW
PjqmnS6x74fMjpET0gIQWs5wnmjePcE+m6ld77bRhcubBdCM5/wQhdy2vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH5S6guXcy8tIj0aZLIO569XAderMB8GA1UdIwQY
MBaAFPfnhPNwZAOD6X7JKWO8rTGBuZd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMt
NjhlMGE4NGZlYjQ2LzEvZmxMcUM1ZHpMeTBpUFJwa3NnN25yMWNCMTZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMtNjhlMGE4NGZlYjQ2
LzEvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkYMA0G
CSqGSIb3DQEBCwUAA4IBAQCDwAgUGpiFS7eeKtAnLLfGbzLEqSbgVcmd4RkAfAlv
tTsETCTzWCbRnlEcK2ixfOfo3rmqBb+EVLW0WS9DXUMHY9EX3noECfIxGCmG2qmQ
2RuQLhPLlgUp3FDCegzNnSH9xBUt4WHssmCsk6BEl5y23jlXMxqJqjcWeOVTs4Jm
p7QvlDdPXfRRdTu7uT5pCaxYWig7WS0morrjEWEC/FYbB55jqivsv4RmoA6MqXl6
fae97RlKTsGrc/9LMc2xG0OUbvc5kYLng0KRoYvSaHE2LqUzQcxxtNW9AIiym1YI
TEsIa4Y54REVzb6/1A0oLefa7ODVYYpzJrz8lMHkN+4F
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:55 2025 by rpki-client