Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/5ZYhCNxqOm04hmY0BhngKxN9rig.roa
File: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (raw, json)
Hash identifier: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=
Subject key identifier: E5:96:21:08:DC:6A:3A:6D:38:86:66:34:06:19:E0:2B:13:7D:AE:28
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01941F8C99AA9BF5474920A6FBA369A88E8F
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/5ZYhCNxqOm04hmY0BhngKxN9rig.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206124
IP address blocks: 185.92.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:aa:9b:f5:47:49:20:a6:fb:a3:69:a8:8e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5962108dc6a3a6d388666340619e02b137dae28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:80:cc:0f:f2:b5:b2:9f:09:8e:e7:80:3f:
bd:f5:a8:56:ca:41:f9:71:94:b9:96:4e:3b:53:17:
76:95:a6:0e:c8:73:dd:64:75:71:22:e6:e3:1b:d5:
b6:76:96:30:7a:71:71:fa:ef:cd:cf:cf:35:d4:bb:
78:a8:fe:a3:73:7e:02:4c:4f:65:e5:96:71:e7:f8:
3e:5d:1b:00:fa:67:73:e0:63:cb:df:ce:e4:8b:d2:
25:e1:d7:92:72:0a:b0:d5:b0:b5:da:98:bd:de:a2:
81:51:34:ff:f5:d7:76:77:94:95:40:47:10:ed:c1:
50:0e:1b:f6:01:78:fc:45:30:ac:52:0a:66:11:f9:
75:7f:8b:b1:d7:f1:f3:70:50:18:d6:19:96:4a:51:
73:37:23:ea:72:0f:a7:59:47:e6:7d:f0:bf:10:e1:
c6:80:63:e1:48:b2:0e:b5:52:0f:0d:87:f3:9d:89:
0d:f2:a5:9c:60:cf:9e:ab:ae:1c:08:03:14:d0:9e:
33:47:ab:7d:a8:de:79:52:f5:25:21:07:29:cb:fe:
82:0e:e6:77:33:fe:fc:f0:37:cb:8a:df:ac:8a:01:
ba:3e:10:fc:45:2e:62:8f:5c:91:ce:1c:bc:1f:0b:
6f:2b:21:ed:24:07:d2:e8:1f:bd:c7:79:2d:bc:9a:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:21:08:DC:6A:3A:6D:38:86:66:34:06:19:E0:2B:13:7D:AE:28
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/5ZYhCNxqOm04hmY0BhngKxN9rig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.236.0/24
Signature Algorithm: sha256WithRSAEncryption
19:57:06:20:3c:4d:76:0b:8e:57:91:81:d4:66:85:94:53:af:
18:45:d5:01:e1:b0:28:db:d5:7f:f9:65:e5:7d:b5:3e:70:fb:
b4:0d:55:33:c9:a1:22:79:92:93:85:d7:db:74:1d:6f:62:39:
66:8a:61:91:4a:ac:8b:3b:e4:54:0a:00:fc:ba:a1:4d:4b:a8:
12:aa:ac:51:96:cc:f5:84:6e:47:cd:68:f6:e6:ad:d8:d9:c4:
2d:da:66:c9:31:4f:7c:42:2a:59:ee:bb:03:c5:64:b2:4b:96:
77:ac:ca:b7:d5:58:95:60:45:d0:bc:72:4f:d2:3c:5c:fa:53:
73:56:e1:83:5c:72:d0:9f:84:2c:7d:6c:ea:cf:10:1a:90:7b:
5c:99:be:20:71:78:72:9e:46:1b:cd:1a:dd:63:21:97:b3:83:
7a:c7:f3:40:d5:16:5f:67:1a:c1:9c:db:da:ac:d3:5e:06:92:
c7:9b:cb:ae:c2:01:11:18:a6:09:cd:64:43:d2:3f:17:1c:0f:
67:83:1a:6d:9f:b3:c6:54:6b:9d:bd:95:c7:6c:96:57:77:5d:
6f:5a:e5:29:6b:3a:9d:73:3f:01:4a:38:38:38:b2:06:8f:5c:
7d:0c:9b:d4:67:e0:fa:b4:84:fe:e8:30:ce:e3:d5:02:2c:68:
4a:f6:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:06 2025 by rpki-client