Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa
File: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (raw, json)
Hash identifier: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=
Subject key identifier: 39:4B:79:64:1E:44:AC:DF:EA:8A:6F:51:3D:3D:60:77:2E:BF:7E:C0
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01942368F55D11D7937CAA592BC4EB24E5F0
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59584
IP address blocks: 92.63.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f5:5d:11:d7:93:7c:aa:59:2b:c4:eb:24:e5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=394b79641e44acdfea8a6f513d3d60772ebf7ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:84:98:a2:9e:df:e8:ca:1a:9c:96:6e:7a:
61:4b:59:7a:f5:f0:ea:49:21:6a:e1:38:c4:0e:50:
c1:ee:aa:ce:a4:76:80:9f:c7:fd:54:bb:54:7d:9d:
ec:7d:41:e5:b7:8a:e6:8f:87:b9:22:31:2a:76:80:
28:76:22:a4:0a:84:ad:75:67:42:45:ff:61:61:13:
f6:6a:a2:dd:13:76:db:c1:03:79:1c:29:33:5a:62:
e6:79:d4:1a:66:a4:b5:12:fe:04:43:f0:6b:a7:78:
b9:2b:d3:ad:60:5f:e3:1b:46:bf:0a:81:31:2d:3f:
b7:5a:a0:f2:a5:45:af:fd:44:16:d1:17:49:73:a0:
83:8e:7a:9e:03:d5:e7:da:85:f1:c3:51:52:4f:43:
ed:1c:6d:6d:c5:b6:f5:f8:fe:31:24:e9:7d:d3:f6:
08:70:48:c9:70:fa:f3:92:f4:81:82:9e:55:7d:03:
18:72:e9:b9:0e:06:cc:af:f5:49:08:81:98:c9:21:
d4:32:17:5d:a3:48:01:21:16:0f:58:25:24:3b:98:
1d:cc:5d:3b:ac:75:cf:4a:5f:22:fa:f0:91:a1:e2:
b1:d2:62:42:2b:6a:04:c0:56:f2:2f:7b:ac:b5:6e:
b7:84:7a:b3:5b:e4:54:6d:59:06:38:0e:8e:7a:53:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:79:64:1E:44:AC:DF:EA:8A:6F:51:3D:3D:60:77:2E:BF:7E:C0
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:17:a3:5c:86:41:48:af:03:f7:f6:72:be:2a:07:1f:f6:a4:
88:5c:f7:db:b8:00:cd:d8:53:5e:35:82:b1:32:65:d6:a9:79:
ee:23:53:f9:a6:4a:1b:b7:c6:01:31:c8:91:3c:f3:6a:7e:65:
1d:26:e6:25:d3:b5:a8:30:9d:40:a9:a2:85:2c:07:0b:b0:2d:
43:7c:8e:98:41:04:1c:cb:d6:3f:e3:19:ff:43:09:e2:5f:15:
67:0e:76:43:9f:dd:55:a0:7b:6b:ec:47:0b:c9:0f:96:67:ba:
93:4e:22:bd:1d:2a:04:b5:34:4b:62:16:03:9d:86:00:47:0f:
7a:2c:37:48:24:96:62:36:39:27:05:76:30:8b:1b:a5:91:f9:
cf:d1:c9:05:20:97:00:c1:18:58:63:4c:61:b3:b7:bd:0e:3c:
37:d1:8b:aa:fd:31:0a:ae:f2:dd:74:99:54:c5:7d:ab:d2:95:
4a:ea:95:09:f4:44:89:fa:82:6b:56:b9:13:b9:e1:1a:f2:65:
58:2f:74:25:a3:6e:de:f2:60:86:ba:e2:dd:fe:41:a2:61:f3:
63:64:45:6b:26:ff:ab:bc:a2:0e:95:9a:87:07:c5:e9:42:67:
cd:d1:c1:0f:1e:8a:80:29:ed:f1:c3:55:a8:70:40:59:f7:e9:
58:e1:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:51:22 2025 by rpki-client