Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/lD4BYyk8OR0jbZEENfhNOgyjmkc.roa
File: lD4BYyk8OR0jbZEENfhNOgyjmkc.roa (raw, json)
Hash identifier: jGafRvBB54+HBZUZmpWv2mmGxL785Ig0Z+4b2JkMk6o=
Subject key identifier: 94:3E:01:63:29:3C:39:1D:23:6D:91:04:35:F8:4D:3A:0C:A3:9A:47
Certificate issuer: /CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Certificate serial: 01828CD89AD12653654DC0CF0C7A7309E506
Authority key identifier: CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/lD4BYyk8OR0jbZEENfhNOgyjmkc.roa
Signing time: Thu 11 Aug 2022 12:19:41 +0000
ROA not before: Thu 11 Aug 2022 12:19:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 92.119.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:d8:9a:d1:26:53:65:4d:c0:cf:0c:7a:73:09:e5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Validity
Not Before: Aug 11 12:19:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=943e0163293c391d236d910435f84d3a0ca39a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:7b:39:72:4c:ae:0a:3f:94:bf:9b:22:17:
80:25:76:0b:8c:c4:58:2f:8d:c0:89:90:a4:80:18:
71:79:c4:95:32:29:7e:58:a7:3b:9f:78:b8:d9:e8:
41:39:87:e8:b8:dc:06:72:a1:2f:3d:70:ac:82:81:
8f:bb:e7:74:ec:59:8b:8b:6d:fc:de:19:27:ed:46:
4a:a1:eb:39:f1:5f:20:0d:00:36:37:cd:47:6b:d7:
57:7c:40:8d:dc:ad:86:40:3f:43:ea:bc:fd:80:9b:
f1:7a:b8:5f:37:41:87:91:46:47:3f:2d:cf:48:34:
d9:ff:5a:1a:19:e3:5e:54:67:3c:d5:14:ce:88:11:
6b:93:61:3b:bd:cd:a3:f5:af:f9:21:bb:f6:e7:29:
ca:3a:d1:44:8f:df:c3:15:3e:f1:ee:c4:bd:75:5d:
db:30:51:05:08:07:44:da:00:fd:01:04:4f:0f:ed:
fd:a3:68:ef:1f:8d:31:3a:5b:18:f0:36:c6:1f:e7:
4b:5e:0c:db:cf:0a:f2:45:4a:32:fd:8d:b5:a6:b5:
58:c2:fc:0e:c4:62:a2:bd:8b:1f:6c:90:1c:dd:44:
19:70:3e:23:f8:03:62:d1:d0:be:2f:1c:fd:bd:fb:
ee:97:19:64:ea:00:7f:e6:50:77:16:c6:f1:35:7d:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:01:63:29:3C:39:1D:23:6D:91:04:35:F8:4D:3A:0C:A3:9A:47
X509v3 Authority Key Identifier:
keyid:CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/lD4BYyk8OR0jbZEENfhNOgyjmkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/za7RPzCm3J1NJ3DTIyNtH9IEU5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e1:4e:25:9d:8c:00:6a:be:85:6d:fc:85:9c:67:b4:a9:26:
cf:67:ea:fd:91:96:86:f7:1e:35:dc:d4:b2:df:f1:4e:61:f3:
8e:40:9a:8e:c4:d3:3f:91:bc:5b:5c:12:92:07:3b:c9:96:25:
8e:38:45:54:5f:0b:3a:18:61:75:de:c6:47:e0:3c:b4:ab:ee:
ce:39:cd:e8:a8:92:b5:be:31:3f:d0:77:70:7a:2b:06:e2:49:
c2:7a:9f:48:2f:36:95:df:f7:12:67:db:2f:e9:ec:ac:38:f1:
18:ba:20:2b:c7:fe:b0:b3:a0:5a:98:35:3d:ca:84:d2:78:56:
35:28:cd:fd:0d:99:4d:52:e3:8a:bb:57:16:9c:9c:7c:05:e2:
86:ee:a1:d1:22:6a:78:e2:e0:c6:8e:61:0b:0d:2b:45:c4:b8:
d7:e1:3a:78:c8:49:d1:64:f5:ff:f0:8e:ab:1d:3e:0b:3c:d6:
72:9e:ac:af:43:13:5f:b1:72:0e:46:26:06:f9:d5:61:2e:74:
e3:c6:61:12:db:fe:03:dd:21:42:11:a6:2d:eb:7e:63:40:9a:
49:c5:c6:2e:0b:56:6a:01:9b:35:e7:34:51:81:e8:d9:df:80:
e2:51:b2:ad:f0:65:66:a0:1c:0c:15:d3:cc:de:3e:84:77:bf:
fd:f6:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:54 2025 by rpki-client