Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/cnLqz6Kh83iV906wpgWkxQuX_-s.roa
File: cnLqz6Kh83iV906wpgWkxQuX_-s.roa (raw, json)
Hash identifier: KwRJARsixxsJl6qp3pBwEDPF/6TBUWBOFwYl9jwvdb0=
Subject key identifier: 72:72:EA:CF:A2:A1:F3:78:95:F7:4E:B0:A6:05:A4:C5:0B:97:FF:EB
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019426D9A245EFEA89ABD0BF79E3A2EACA3A
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/cnLqz6Kh83iV906wpgWkxQuX_-s.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62273
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a2:45:ef:ea:89:ab:d0:bf:79:e3:a2:ea:ca:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7272eacfa2a1f37895f74eb0a605a4c50b97ffeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:2a:de:c7:3f:9f:f6:8e:5a:43:f4:47:72:
dd:58:69:01:32:3b:ca:35:49:98:9a:5a:1e:0a:c7:
d9:81:af:c1:d1:b9:26:d1:25:3c:45:d7:77:45:99:
64:99:ec:3a:6a:85:19:cf:e6:75:09:29:57:14:97:
94:28:4e:c5:2c:8e:d1:e5:63:1f:8d:00:ff:cf:55:
24:c0:fa:45:ef:d9:96:2a:b2:70:1e:ad:37:03:97:
77:55:95:40:21:4c:d7:43:ad:06:15:7c:e7:f8:99:
5f:ed:0b:b6:46:db:95:3d:b5:a9:2a:f7:9c:85:4c:
c2:74:1e:1b:c2:43:d3:4f:6c:5c:de:fc:3d:10:20:
d7:3c:e1:4a:f9:52:02:7f:45:a9:ba:3a:06:28:01:
99:82:eb:8d:0d:d1:f7:dc:14:fa:89:77:3d:be:18:
d8:0b:18:16:43:e5:5d:41:93:ce:73:7d:19:62:a8:
a2:f4:99:25:92:77:1b:a5:72:4c:6a:4e:a4:ed:f1:
7b:42:05:eb:5b:df:07:34:cd:7b:c2:a4:5e:5d:01:
09:f1:f1:ac:13:83:38:3c:b7:f7:c1:52:08:a4:c4:
76:9a:c7:fa:73:c2:f9:52:79:74:28:a8:f9:fd:6a:
b3:5e:c5:44:00:98:22:de:5c:2a:fe:f7:7a:db:c7:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:72:EA:CF:A2:A1:F3:78:95:F7:4E:B0:A6:05:A4:C5:0B:97:FF:EB
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/cnLqz6Kh83iV906wpgWkxQuX_-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
76:77:35:4c:93:b0:08:de:dd:38:10:28:d8:77:1c:bb:29:7f:
14:1b:d6:93:03:1d:97:7c:a6:f2:90:7e:15:dc:2e:a7:70:3f:
c4:5f:94:85:38:02:3a:69:d3:82:2e:88:fc:a9:92:3b:1a:62:
43:86:84:37:3d:2b:07:25:ac:df:8d:05:e4:5d:15:51:66:3c:
cb:07:03:4b:b4:d7:72:e6:24:f2:70:7c:03:8b:3f:f9:31:39:
b3:26:50:ec:9c:87:da:83:85:8e:90:c7:dc:ca:77:63:3c:0f:
5e:7d:11:f5:14:26:37:fe:88:6d:2f:eb:a6:a5:3f:9a:a1:49:
7e:b3:c5:f3:b5:3b:c4:55:84:5f:5c:24:0e:8f:5b:ed:c4:a5:
c5:b9:ae:0e:c4:0d:53:2d:f8:1c:5e:6e:ed:5b:20:6d:95:ef:
fe:96:68:9a:cb:3c:49:c2:f3:21:03:0f:ef:c9:5c:3d:db:8e:
55:62:fa:5c:4d:c3:ad:01:fb:33:30:e4:e5:9a:75:3d:03:fe:
b9:31:83:2f:9b:ce:b6:1c:ce:1c:6c:4b:5c:72:59:90:51:cb:
ca:86:d2:71:0e:af:ea:1d:5a:41:7d:68:e4:81:b3:5b:3a:4a:
79:d4:29:a4:6c:2d:6f:be:32:1f:e6:d8:97:58:7c:bf:ea:ae:
22:03:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:55:47 2025 by rpki-client