Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/f_yXJGNzegLxOLz8jRnmFe-XGpI.roa
File: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (raw, json)
Hash identifier: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=
Subject key identifier: 7F:FC:97:24:63:73:7A:02:F1:38:BC:FC:8D:19:E6:15:EF:97:1A:92
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 01942826516E753A863F7CB8365B455DEB2B
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/f_yXJGNzegLxOLz8jRnmFe-XGpI.roa
Signing time: Thu 02 Jan 2025 17:53:07 +0000
ROA not before: Thu 02 Jan 2025 17:53:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 92.119.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:51:6e:75:3a:86:3f:7c:b8:36:5b:45:5d:eb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Jan 2 17:53:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ffc972463737a02f138bcfc8d19e615ef971a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:05:63:b8:e9:f8:c8:ef:a7:0f:bb:c2:09:
18:d5:88:68:12:6c:e0:bd:f8:50:ee:41:a5:af:82:
63:c5:cc:13:b3:55:50:4e:3b:35:4c:1c:1d:02:96:
27:c9:95:ab:6a:68:a8:d2:58:7c:ef:56:d5:13:4d:
e5:59:42:32:95:58:3e:41:6f:a8:30:64:e8:de:89:
8f:93:70:2e:06:80:3a:e8:81:a0:b4:26:25:82:4d:
29:dc:b9:94:9e:68:18:53:11:24:fb:8a:3c:a5:15:
3a:41:6f:2b:e8:aa:b8:2a:98:4b:d0:5c:4b:a3:cf:
84:7a:d5:1b:07:5b:78:b8:19:47:c5:1b:7d:dd:ad:
49:9a:63:b0:37:c4:66:ed:35:f8:29:64:83:c3:32:
61:5d:26:bf:95:a7:64:bb:46:fb:31:0d:0d:db:2b:
40:8a:5e:05:46:5c:7a:83:93:56:9a:02:3c:0e:b9:
ae:5f:b4:d0:be:87:7a:b0:82:54:c7:d0:51:19:d3:
cd:9b:b1:0c:bb:9f:c0:3c:31:93:bb:d4:2d:95:9d:
88:5a:86:08:2a:08:ec:75:df:5e:79:b3:88:ab:96:
5c:4d:00:14:d7:ca:f3:58:91:64:82:1f:c1:7b:58:
d5:85:bc:0b:4d:1f:26:03:2e:c9:c0:e2:6a:37:3f:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:97:24:63:73:7A:02:F1:38:BC:FC:8D:19:E6:15:EF:97:1A:92
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/f_yXJGNzegLxOLz8jRnmFe-XGpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.157.0/24
Signature Algorithm: sha256WithRSAEncryption
09:33:d9:dc:3e:56:73:a4:a2:c9:78:c6:0a:ed:9a:de:64:ab:
b1:d4:a3:63:cf:aa:b8:05:57:16:6b:0c:58:af:40:7a:d4:57:
c3:f1:ad:26:37:bf:7b:45:c4:05:c9:b2:68:f1:2b:2e:68:27:
27:91:0d:4c:68:d5:0f:61:4e:00:f5:67:1c:ba:4b:2f:f6:5b:
9f:c6:58:77:0f:c9:90:1d:0b:79:3d:df:15:07:51:5f:f7:e5:
44:f1:f1:4e:b2:f0:ce:8c:5b:10:bc:f7:a4:1f:f1:a6:2e:10:
94:b8:89:2a:30:d1:a2:7a:7c:a9:ce:31:31:c0:8a:a3:d1:1e:
db:67:01:a0:ac:35:bb:c2:5b:7e:ec:cd:6c:7f:c9:1b:d4:17:
7b:cc:b2:d5:b2:6d:a0:94:38:d0:f1:74:41:fe:71:24:37:07:
86:9f:0a:db:0d:8b:6f:93:4d:08:02:17:1a:b4:f4:4a:24:1d:
b4:47:f6:4e:d3:b0:46:96:fc:40:8b:eb:4a:ce:cf:bd:a4:0c:
02:30:a6:4c:c6:ff:43:e6:81:24:95:c5:98:23:7d:7a:18:af:
dc:d6:df:77:25:a0:da:b9:b2:b4:6e:2a:5d:9a:70:f2:2c:17:
b7:ae:88:de:24:15:1a:96:f8:09:5c:7a:58:66:6f:4b:26:4a:
93:06:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:01 2025 by rpki-client