Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/r40XtPdgr8Y3RxrHTUe0xVuomM0.roa
File: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (raw, json)
Hash identifier: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=
Subject key identifier: AF:8D:17:B4:F7:60:AF:C6:37:47:1A:C7:4D:47:B4:C5:5B:A8:98:CD
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D9539D30F2EA94A6E3007CCF3D0B5E
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/r40XtPdgr8Y3RxrHTUe0xVuomM0.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209679
IP address blocks: 92.255.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:53:9d:30:f2:ea:94:a6:e3:00:7c:cf:3d:0b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af8d17b4f760afc637471ac74d47b4c55ba898cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:8a:f6:5b:f5:0f:ef:7d:77:16:15:9c:1e:
6c:4d:1a:9e:e6:e9:79:07:29:22:f3:51:bb:ef:0e:
e8:a4:63:da:7f:92:04:87:31:44:5c:50:f8:d6:b5:
aa:ec:01:4e:4d:a2:6b:55:07:24:f5:79:bc:64:32:
ef:2d:a0:82:e9:87:db:1b:1f:73:57:b5:30:ef:81:
28:70:8f:e9:7e:15:8a:7c:8b:39:b7:31:e7:f3:c8:
46:82:8e:67:8b:83:e6:15:7f:08:37:ef:d1:fb:c0:
5a:24:64:59:ca:be:6a:96:bf:c1:15:79:5f:24:90:
61:75:16:fb:34:96:68:85:7a:be:89:d1:2f:a1:02:
b2:4c:a6:4e:c0:f9:57:0d:94:52:4f:d8:2c:3f:c8:
2f:37:95:9c:f8:c0:d8:54:52:cf:ca:36:6a:80:90:
99:c7:cb:4d:40:74:db:32:cf:29:2d:81:dc:5a:a4:
57:49:01:ee:13:8f:3a:66:4a:0e:33:1d:3d:7d:ac:
b5:46:5d:94:c2:a1:ea:a4:e6:db:9d:9c:96:93:17:
f7:e0:4f:d2:07:bd:8d:0e:56:71:29:0f:ca:80:47:
a3:3d:dd:51:ea:fb:8c:48:d6:4b:c5:e1:63:64:ee:
a2:78:bd:46:05:3e:ff:ae:9b:83:fc:fb:08:72:67:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8D:17:B4:F7:60:AF:C6:37:47:1A:C7:4D:47:B4:C5:5B:A8:98:CD
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/r40XtPdgr8Y3RxrHTUe0xVuomM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.55.0/24
Signature Algorithm: sha256WithRSAEncryption
17:38:b0:b3:18:90:85:03:49:78:bb:22:84:19:4d:8f:bb:c5:
d1:9a:d1:0e:8c:9b:e6:8b:0a:4e:8c:d7:58:a3:a3:23:d2:9b:
90:b3:2c:d3:12:b0:fd:1a:3a:d6:2e:75:72:cd:88:61:91:59:
b8:03:0d:ac:09:fe:8d:0c:b0:68:e8:75:7a:b9:4f:8a:98:d4:
9d:c6:44:9a:b0:0b:4b:ff:44:02:e9:a5:79:4f:ad:53:0c:93:
16:8f:b0:f3:35:27:6a:b8:0a:7c:78:0b:25:ed:0b:e3:9d:2a:
af:f6:1e:c6:11:0c:06:fd:a6:5a:38:0b:8c:b5:44:db:4a:93:
3b:b0:9c:2e:18:85:40:ae:67:00:e8:1c:a4:27:0c:44:ac:9e:
03:27:e2:a0:cf:0b:49:cc:f3:77:67:69:b7:9d:e5:7c:75:c7:
22:f3:f9:d9:86:7f:b8:d5:d0:05:10:3f:ca:e6:8f:31:8a:ad:
e1:68:96:9f:dd:67:2b:53:f2:3f:2e:12:bd:0b:5b:17:ea:d6:
f7:ab:b1:d2:5f:70:b7:92:28:b1:ef:d3:24:90:64:d4:a4:9b:
7b:fc:b7:01:3a:9c:11:f0:fe:5f:72:0a:3d:4f:39:e7:05:c9:
b9:16:21:48:aa:0c:da:e6:14:1b:58:38:3d:a0:4c:e9:b8:58:
55:28:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:38 2025 by rpki-client