Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/xBzi6aoJjTm53TD0xrF4U_U95aQ.roa
File: xBzi6aoJjTm53TD0xrF4U_U95aQ.roa (raw, json)
Hash identifier: 0zOI7xYw+Im/8aNeJoY2RgP8FxjLVs/D+/1++LGNnUY=
Subject key identifier: C4:1C:E2:E9:AA:09:8D:39:B9:DD:30:F4:C6:B1:78:53:F5:3D:E5:A4
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 018521C19F00908DB701F2C09D70494AE9C8
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/xBzi6aoJjTm53TD0xrF4U_U95aQ.roa
Signing time: Sat 17 Dec 2022 20:23:35 +0000
ROA not before: Sat 17 Dec 2022 20:23:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209321
IP address blocks: 92.249.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:c1:9f:00:90:8d:b7:01:f2:c0:9d:70:49:4a:e9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Dec 17 20:23:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c41ce2e9aa098d39b9dd30f4c6b17853f53de5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:cd:50:53:da:c6:53:32:3c:e5:3b:bd:53:
c5:a3:1b:a5:27:0f:61:43:f2:88:8b:7a:75:5c:44:
f7:30:9c:93:e2:2d:33:79:a3:60:b9:5b:eb:97:2d:
8f:f1:f8:df:43:04:bb:47:e0:a4:96:54:ad:80:e9:
0d:0f:1d:aa:51:e6:9b:d4:03:fe:51:01:fe:21:2b:
84:15:64:12:c3:f7:0e:b4:64:38:d5:b4:ba:20:3a:
a8:82:72:97:fd:3e:e6:55:e4:3b:e0:0a:e0:eb:61:
2a:8f:2a:a8:d1:d6:a4:20:3b:a1:19:5d:df:f2:14:
32:c9:8c:a3:14:cf:80:52:95:3d:a6:0f:8a:f0:80:
05:9c:b7:5b:77:8f:1d:1e:10:a1:fc:e7:eb:b0:e1:
ef:61:a1:82:93:c9:23:54:eb:c8:34:e4:e2:f8:a8:
d8:16:ab:a6:8f:4d:e2:be:92:b4:55:6c:f2:55:fc:
40:96:7d:2d:5b:1b:ce:0a:d3:a4:65:48:cc:5b:f9:
bf:3a:1a:e7:26:69:85:ac:ce:c2:b8:98:5c:88:67:
13:59:af:95:b5:2b:88:e8:77:63:4c:5e:55:e5:86:
28:4b:a8:49:d2:ee:8e:c5:2c:d5:19:7d:68:c4:35:
fa:0b:ff:a1:fd:c4:dc:52:e8:63:be:5e:bb:25:61:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1C:E2:E9:AA:09:8D:39:B9:DD:30:F4:C6:B1:78:53:F5:3D:E5:A4
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/xBzi6aoJjTm53TD0xrF4U_U95aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.27.0/24
Signature Algorithm: sha256WithRSAEncryption
82:38:37:18:86:5f:1c:11:8e:4f:38:fb:a7:2b:66:46:67:e1:
e7:f1:d0:cd:2e:3c:9e:bb:7c:af:56:93:ec:9a:a3:3f:e8:7c:
ee:1d:1c:9f:cc:a9:56:8b:b0:84:ab:06:27:b5:ea:f5:bc:5e:
42:33:dd:4e:ed:32:6c:af:f1:5f:a8:d2:71:66:3c:3c:ae:af:
1a:a2:7e:8f:9d:f3:b4:96:6c:a0:3a:84:e5:11:19:88:a4:6d:
d7:6c:5c:bb:ca:02:fe:8a:b3:95:47:3d:a9:2b:49:bf:15:89:
c5:53:51:0b:0c:17:1e:ce:cc:69:63:9f:fe:15:18:dd:5f:40:
ac:73:e9:59:b0:61:bb:ee:be:af:8d:85:01:90:11:55:2b:be:
1d:98:a2:40:2c:5b:4c:bf:bd:e2:71:14:76:fd:c1:81:b8:e1:
84:c6:d3:5c:a6:28:d1:03:56:61:04:11:21:e7:fd:a8:ae:4d:
46:d7:69:28:1c:ed:d7:af:49:c5:7c:d7:28:8c:79:af:4d:67:
fc:65:41:e4:8b:fa:f3:2d:0d:ac:21:cd:2f:a3:8e:63:6b:d2:
a5:92:5f:11:ff:5d:78:ed:42:72:e0:79:b0:e6:84:3a:da:f4:
34:89:de:8d:bd:4b:a1:0e:44:29:73:75:68:db:a6:0d:12:ba:
1e:fa:84:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUhwZ8AkI23AfLAnXBJSunIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTc4NGYzNzA2NDAzODNlOTdlYzkyOTYzYmNhZDMxODFi
OTk3NzQwHhcNMjIxMjE3MjAyMzM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDFjZTJlOWFhMDk4ZDM5YjlkZDMwZjRjNmIxNzg1M2Y1M2RlNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmnNUFPaxlMyPOU7vVPFoxulJw9h
Q/KIi3p1XET3MJyT4i0zeaNguVvrly2P8fjfQwS7R+CkllStgOkNDx2qUeab1AP+
UQH+ISuEFWQSw/cOtGQ41bS6IDqognKX/T7mVeQ74Arg62Eqjyqo0dakIDuhGV3f
8hQyyYyjFM+AUpU9pg+K8IAFnLdbd48dHhCh/OfrsOHvYaGCk8kjVOvINOTi+KjY
Fqumj03ivpK0VWzyVfxAln0tWxvOCtOkZUjMW/m/OhrnJmmFrM7CuJhciGcTWa+V
tSuI6HdjTF5V5YYoS6hJ0u6OxSzVGX1oxDX6C/+h/cTcUuhjvl67JWHQNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMQc4umqCY05ud0w9MaxeFP1PeWkMB8GA1UdIwQY
MBaAFPfnhPNwZAOD6X7JKWO8rTGBuZd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMt
NjhlMGE4NGZlYjQ2LzEveEJ6aTZhb0pqVG01M1REMHhyRjRVX1U5NWFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MDBiMDItMzJhOC00ODk5LTgwNWMtNjhlMGE4NGZlYjQ2
LzEvOS1lRTgzQmtBNFBwZnNrcFk3eXRNWUc1bDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkbMA0G
CSqGSIb3DQEBCwUAA4IBAQCCODcYhl8cEY5POPunK2ZGZ+Hn8dDNLjyeu3yvVpPs
mqM/6HzuHRyfzKlWi7CEqwYnter1vF5CM91O7TJsr/FfqNJxZjw8rq8aon6PnfO0
lmygOoTlERmIpG3XbFy7ygL+irOVRz2pK0m/FYnFU1ELDBcezsxpY5/+FRjdX0Cs
c+lZsGG77r6vjYUBkBFVK74dmKJALFtMv73icRR2/cGBuOGExtNcpijRA1ZhBBEh
5/2ork1G12koHO3Xr0nFfNcojHmvTWf8ZUHki/rzLQ2sIc0vo45ja9Klkl8R/114
7UJy4Hmw5oQ62vQ0id6NvUuhDkQpc3Vo26YNEroe+oQd
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:43 2025 by rpki-client