Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/_WaDfELTBc_dUmy6Cu013iGAFy4.roa
File: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (raw, json)
Hash identifier: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=
Subject key identifier: FD:66:83:7C:42:D3:05:CF:DD:52:6C:BA:0A:ED:35:DE:21:80:17:2E
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 019424B37FBBEF587217130D654E7F2B49F1
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/_WaDfELTBc_dUmy6Cu013iGAFy4.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 195.211.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7f:bb:ef:58:72:17:13:0d:65:4e:7f:2b:49:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd66837c42d305cfdd526cba0aed35de2180172e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:00:a1:6f:87:65:cc:cb:1b:59:4e:cf:2b:
83:72:e6:2a:bc:f5:28:ff:d4:85:02:9c:a6:ae:39:
24:30:b2:5a:d5:6a:2f:6d:bb:28:5f:03:0a:7a:ad:
a3:d1:f7:71:b1:a7:66:39:ee:0d:ca:4a:02:4f:0d:
35:cf:79:2a:13:9b:9e:0b:17:59:a8:aa:cb:c5:d0:
01:3e:9c:a7:67:ef:e0:d9:31:f9:23:48:b6:be:75:
64:2d:93:5c:3d:1e:5e:b3:87:3b:10:f7:88:21:f1:
b2:31:e5:f1:74:55:be:53:82:aa:cd:4d:17:82:86:
63:9c:4b:87:74:a6:b2:9f:f0:36:0f:1d:df:21:4f:
1a:92:89:14:fd:07:c1:41:39:03:1e:43:1d:49:61:
c6:92:89:62:cf:7b:dd:c3:13:1e:8a:51:43:35:7d:
f4:f6:04:ee:eb:8c:d8:16:3d:68:c5:73:a6:fd:61:
a8:05:da:fe:73:ab:5c:35:cb:bb:8c:15:2a:8f:0e:
cb:4a:6a:98:b9:a0:55:86:f1:15:e8:f5:28:f9:64:
c2:4d:35:59:f4:16:fc:c0:2b:5a:50:f0:4b:ff:f3:
bd:ed:b3:6f:f5:dc:2c:0a:30:bc:aa:31:7b:7d:55:
b2:e1:fd:51:9e:ec:95:c0:2d:45:33:d2:eb:d6:35:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:83:7C:42:D3:05:CF:DD:52:6C:BA:0A:ED:35:DE:21:80:17:2E
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/_WaDfELTBc_dUmy6Cu013iGAFy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.92.0/24
Signature Algorithm: sha256WithRSAEncryption
39:55:b2:c2:01:44:4a:62:76:fa:9d:5c:c3:15:ae:d5:1c:62:
51:ae:83:b6:08:bd:bc:f8:d0:65:22:48:24:34:49:27:c9:fb:
79:3e:36:98:4f:76:65:bf:60:1a:d0:59:d0:56:e4:46:3b:33:
da:c3:2e:06:10:c5:52:56:f2:29:ff:5f:0f:ca:bc:21:e5:16:
71:f1:86:19:2d:05:f5:3b:81:fb:27:9c:45:d2:aa:97:b4:fb:
14:59:6b:84:7e:b1:bc:75:37:d8:d5:40:3a:83:61:e3:f9:6c:
ff:a3:88:70:24:a1:d4:46:42:6e:24:5d:db:0c:4d:a6:cb:b9:
84:da:10:56:19:28:94:c8:5c:87:3c:b8:15:c1:46:ec:fd:58:
d6:00:8b:69:18:79:de:e1:d6:98:f4:a5:52:55:b0:06:d0:8a:
45:a0:b2:76:e3:2d:16:13:09:d0:af:f3:31:c6:43:36:c9:89:
42:e0:dd:69:b8:0f:d8:1b:65:05:a8:e2:ca:bc:4f:b2:d6:64:
57:5e:45:ee:e2:dc:4a:7a:8e:73:f9:dd:28:f4:5c:89:08:db:
e6:ce:aa:f9:6a:4e:89:cb:63:0c:1e:ba:f2:a2:d7:e0:77:a5:
81:0c:53:2a:ed:f8:36:de:b6:f8:98:a2:f4:d3:87:4c:8b:45:
1c:46:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:07 2025 by rpki-client