Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/kITElgml7RZxWNr4eKfvM1E5VyM.roa
File: kITElgml7RZxWNr4eKfvM1E5VyM.roa (raw, json)
Hash identifier: mYphYuWKa2oClwokItjP8xyLuFG6crqS5Vudhf5XeTk=
Subject key identifier: 90:84:C4:96:09:A5:ED:16:71:58:DA:F8:78:A7:EF:33:51:39:57:23
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0194221F5C281F4226842CD511DCF420F016
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/kITElgml7RZxWNr4eKfvM1E5VyM.roa
Signing time: Wed 01 Jan 2025 13:47:47 +0000
ROA not before: Wed 01 Jan 2025 13:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 92.53.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5c:28:1f:42:26:84:2c:d5:11:dc:f4:20:f0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 13:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9084c49609a5ed167158daf878a7ef3351395723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:36:03:7a:5f:ae:b6:64:a9:f7:f0:b6:fd:
90:c1:42:07:56:28:9b:7d:ff:72:d2:3b:44:b9:1f:
b9:30:e5:15:ea:78:43:5f:59:47:35:48:58:38:44:
38:ac:b5:b9:05:6e:4d:34:e8:49:dc:a8:3d:02:78:
0d:ca:c7:a5:f7:18:0c:25:38:a1:17:26:28:3f:a5:
7e:f6:5b:43:6a:b0:21:31:35:b2:98:49:66:59:d4:
da:ca:03:cd:14:02:2c:0f:b4:e2:a6:d9:47:5e:cb:
cc:aa:84:6e:40:3f:87:20:09:f1:92:f0:14:41:b1:
f6:0a:1e:77:1c:e7:fe:2e:40:95:8b:6c:20:29:57:
8c:1c:c0:1f:52:fb:d1:0f:3a:ba:78:3d:e1:5c:03:
fb:de:92:71:b2:c1:12:f0:9b:9e:59:55:d2:27:e7:
18:f0:1a:53:d7:80:1b:53:19:fb:36:39:21:5b:26:
18:be:b5:e5:8e:a1:6b:27:c9:95:28:1b:be:82:06:
ac:10:4b:1e:ce:df:65:4d:12:5a:f3:1e:86:d8:73:
df:f8:3f:24:36:8a:a9:40:b4:41:0c:fd:44:66:cc:
af:ac:38:63:83:18:36:a0:cc:82:45:8a:d7:fb:ec:
8b:63:b6:a1:9c:f8:a0:c8:3e:a2:5b:66:b7:20:ef:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:84:C4:96:09:A5:ED:16:71:58:DA:F8:78:A7:EF:33:51:39:57:23
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/kITElgml7RZxWNr4eKfvM1E5VyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.176.0/22
Signature Algorithm: sha256WithRSAEncryption
33:e5:1b:7f:df:3c:16:9e:4b:e7:4e:ff:65:dd:1b:af:f8:27:
12:74:0b:72:5b:03:50:b2:9e:dd:03:24:1d:85:96:34:5a:3f:
99:06:26:2c:6a:c9:88:cb:f0:79:9e:1c:f7:40:12:28:41:ac:
61:3e:88:7e:93:67:00:0d:f7:82:1e:1c:6a:4c:19:4f:66:d3:
37:78:3f:91:3c:65:e9:9c:d6:fa:8d:0a:a0:7c:e4:bc:06:55:
1c:4e:56:71:a3:c1:21:f1:58:93:75:ef:75:ae:9a:cc:58:fb:
5c:7d:26:8a:1f:03:5b:9d:4a:99:a1:3b:cb:d9:98:9b:2d:c7:
da:84:5d:f8:e0:ae:b5:89:b1:af:68:23:28:5f:4e:db:9f:db:
6e:5b:fe:d1:8e:c7:61:41:2b:ec:b0:e2:fb:17:bd:d3:33:9c:
42:27:4a:9e:cf:31:84:61:15:10:45:a3:1d:ea:17:b0:6b:61:
45:ca:61:7b:b9:dc:aa:8a:03:69:ff:f2:b6:fa:7f:5a:91:94:
38:17:e3:59:e9:d9:50:94:92:ff:d8:a2:2b:c6:80:73:9c:bf:
1b:10:3c:4c:64:af:ab:9a:c4:fd:ad:58:16:e6:68:e7:cc:2e:
aa:92:86:28:72:0b:76:f2:36:98:a7:5f:d7:47:12:1d:fa:42:
61:c2:83:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH1woH0ImhCzVEdz0IPAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjUwMTAxMTM0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDg0YzQ5NjA5YTVlZDE2NzE1OGRhZjg3OGE3ZWYzMzUxMzk1NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf42A3pfrrZkqffwtv2QwUIHViib
ff9y0jtEuR+5MOUV6nhDX1lHNUhYOEQ4rLW5BW5NNOhJ3Kg9AngNysel9xgMJTih
FyYoP6V+9ltDarAhMTWymElmWdTaygPNFAIsD7TiptlHXsvMqoRuQD+HIAnxkvAU
QbH2Ch53HOf+LkCVi2wgKVeMHMAfUvvRDzq6eD3hXAP73pJxssES8JueWVXSJ+cY
8BpT14AbUxn7NjkhWyYYvrXljqFrJ8mVKBu+ggasEEsezt9lTRJa8x6G2HPf+D8k
NoqpQLRBDP1EZsyvrDhjgxg2oMyCRYrX++yLY7ahnPigyD6iW2a3IO+XkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJCExJYJpe0WcVja+Hin7zNROVcjMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEva0lURWxnbWw3Ulp4V05yNGVLZnZNMUU1VnlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDWwMA0G
CSqGSIb3DQEBCwUAA4IBAQAz5Rt/3zwWnkvnTv9l3Ruv+CcSdAtyWwNQsp7dAyQd
hZY0Wj+ZBiYsasmIy/B5nhz3QBIoQaxhPoh+k2cADfeCHhxqTBlPZtM3eD+RPGXp
nNb6jQqgfOS8BlUcTlZxo8Eh8ViTde91rprMWPtcfSaKHwNbnUqZoTvL2ZibLcfa
hF344K61ibGvaCMoX07bn9tuW/7RjsdhQSvssOL7F73TM5xCJ0qezzGEYRUQRaMd
6hewa2FFymF7udyqigNp//K2+n9akZQ4F+NZ6dlQlJL/2KIrxoBznL8bEDxMZK+r
msT9rVgW5mjnzC6qkoYocgt28jaYp1/XRxId+kJhwoPu
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:39 2025 by rpki-client