Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Io1tznSh-GOgc8SrB8aKsJmTYdU.roa
File: Io1tznSh-GOgc8SrB8aKsJmTYdU.roa (raw, json)
Hash identifier: CmiLKKEV0OJ4fWhZXavfx+jbJs8fV6BUsSVAayR8svE=
Subject key identifier: 22:8D:6D:CE:74:A1:F8:63:A0:73:C4:AB:07:C6:8A:B0:99:93:61:D5
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019426D99B1469A26A08DBAE6DC2C6EA5706
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Io1tznSh-GOgc8SrB8aKsJmTYdU.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214891
IP address blocks: 92.42.102.0/24 maxlen: 24
185.225.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9b:14:69:a2:6a:08:db:ae:6d:c2:c6:ea:57:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=228d6dce74a1f863a073c4ab07c68ab0999361d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:30:96:ef:4b:68:17:1a:2a:78:73:1f:e4:
b5:dd:4c:fc:60:f1:c9:1f:f9:af:10:63:4a:5a:cd:
11:32:31:5d:9e:c3:46:11:85:b0:35:dd:76:01:de:
de:5b:ac:f4:61:ad:19:36:f4:6c:73:20:17:75:33:
44:25:6c:7c:ea:cb:63:8d:c5:f4:95:68:20:0d:b2:
5f:87:02:d4:dc:6f:06:b2:c8:5a:c1:b8:7e:25:93:
09:91:4a:f5:a6:bc:c7:73:32:69:49:29:bd:b2:49:
31:f4:a9:d5:24:3e:07:54:e0:a9:a5:7a:83:f2:df:
bd:a8:ed:22:fe:df:19:7b:50:80:58:25:f6:26:76:
c9:71:d0:9c:ff:82:b8:a8:c3:e4:85:02:fb:7e:24:
af:e4:bf:8b:5f:66:49:4e:35:c7:4a:ea:6d:4a:4a:
d9:29:12:92:13:6d:a5:37:9b:b1:3b:1d:61:05:3d:
00:50:3c:9c:20:c0:1e:05:40:57:a3:e8:2b:6b:11:
bb:47:f1:5f:e9:8f:e5:4c:bf:c8:f9:d5:84:4c:a5:
10:58:51:ca:c7:e9:0b:85:1b:8e:9d:78:83:78:cc:
3f:14:f1:15:3d:f2:6f:a1:52:45:1a:a2:6b:78:b4:
e1:f4:1e:52:f6:f8:f1:b4:80:6b:58:81:9a:cd:cf:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:6D:CE:74:A1:F8:63:A0:73:C4:AB:07:C6:8A:B0:99:93:61:D5
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/Io1tznSh-GOgc8SrB8aKsJmTYdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.102.0/24
185.225.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:2e:57:55:54:57:87:92:cf:16:ed:b3:b1:31:52:6e:6a:7e:
63:c6:bf:1f:79:59:51:ce:a8:2f:71:a5:cf:94:c5:56:a8:36:
df:64:a1:bf:f4:a4:8d:46:72:1e:88:c4:0d:9c:fb:19:65:27:
da:27:e4:18:c8:14:76:22:73:08:04:fa:a8:eb:16:0d:1b:7d:
7b:45:73:5e:4c:6c:8a:09:a0:7e:8b:3d:c3:55:4a:ec:1a:48:
3d:de:bb:f4:80:88:0c:65:52:f6:12:38:6a:40:b3:40:4e:1f:
90:70:de:c0:dd:3f:23:ac:0c:bf:85:c8:02:fc:ca:40:43:df:
6a:1a:2f:66:a3:42:c5:be:c7:1f:8b:bb:d0:ae:8d:dc:4c:c1:
16:9b:31:ac:be:2c:fd:e8:c7:5f:23:ce:62:ae:9c:22:e3:8c:
ea:b7:47:c6:04:59:1e:45:c3:6f:cc:60:60:d0:a0:47:01:39:
26:43:3f:23:5c:dd:f2:2b:2e:2e:61:21:c9:b3:ab:6a:e9:0c:
01:ac:d8:73:63:be:3c:70:e1:3c:c9:40:f0:f0:87:77:c3:03:
4c:3d:71:56:d1:49:fa:af:25:a6:e8:f0:2a:8f:84:e9:00:60:
1c:0e:3b:6a:71:ba:e9:7d:be:f1:6d:61:19:80:0a:34:88:dc:
54:03:49:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:36 2025 by rpki-client