Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/W_sHm_j4Us4WuJIflhoh5A3qArU.roa
File: W_sHm_j4Us4WuJIflhoh5A3qArU.roa (raw, json)
Hash identifier: lym5iTCXocAh5Sfb6nzaSgtoF24KI3wy3Z8D53MitHE=
Subject key identifier: 5B:FB:07:9B:F8:F8:52:CE:16:B8:92:1F:96:1A:21:E4:0D:EA:02:B5
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D380EC03DBBEBFB856E63AB2B3EE
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/W_sHm_j4Us4WuJIflhoh5A3qArU.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64433
IP address blocks: 92.119.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d3:80:ec:03:db:be:bf:b8:56:e6:3a:b2:b3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bfb079bf8f852ce16b8921f961a21e40dea02b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:38:ba:1c:56:19:53:e3:c5:0d:c4:3e:a1:
c9:89:00:1f:48:30:cb:3c:99:92:fe:93:36:74:21:
53:3b:91:96:b7:18:b7:52:fc:8d:07:7f:64:c7:dc:
d1:fa:86:75:42:6b:04:5a:f0:00:36:ad:ee:67:6d:
32:17:b8:ee:0b:d2:a2:6e:c0:d3:7d:88:16:b9:d8:
3f:19:f0:e2:db:6f:2d:ee:25:fd:24:37:e4:03:bb:
15:24:d3:df:f1:b7:2d:21:b1:17:3f:35:6f:3c:d9:
71:21:e1:0c:ea:15:27:64:bb:b1:29:45:ce:be:52:
2a:ee:e7:2d:00:72:f2:25:2e:27:93:a9:06:d8:c6:
25:0f:40:a9:19:a9:b3:6b:34:0f:72:a5:2b:ad:ce:
99:d8:6b:1d:49:a5:5a:0f:37:e5:67:a5:70:76:a6:
f5:65:c2:2d:b5:1b:c5:82:f8:56:08:48:17:bb:5a:
3c:e4:7a:2a:f2:2c:78:37:a1:6a:3f:4c:0d:2b:98:
22:c2:94:f7:50:a0:8e:be:2c:9a:a9:dc:29:eb:83:
40:fa:14:3a:08:c9:64:c8:2a:37:3d:b2:c3:73:43:
74:5c:70:83:b9:7d:81:df:7a:38:80:c3:49:e7:44:
19:d2:fe:f1:8a:d0:66:1a:41:7e:8e:04:21:e1:83:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:07:9B:F8:F8:52:CE:16:B8:92:1F:96:1A:21:E4:0D:EA:02:B5
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/W_sHm_j4Us4WuJIflhoh5A3qArU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2f:10:60:5b:ce:ae:be:28:d5:81:80:a1:f7:71:bf:28:49:
39:b8:b8:4d:01:b4:c9:b9:c4:b8:32:84:c0:aa:43:a8:db:54:
9b:73:29:eb:d1:24:78:65:28:9d:3c:ae:4f:b1:8d:d6:c6:6e:
79:c2:37:0a:57:c6:05:e6:05:90:a7:2b:e3:4c:6f:21:82:a0:
31:5a:34:d0:4e:e3:d2:28:64:f0:e3:a0:72:e1:5f:65:f0:88:
42:0d:45:65:ee:d4:ae:46:82:4b:84:17:4f:85:ec:e7:81:94:
79:77:4b:a7:08:e1:cc:bd:6a:b9:7a:e3:76:19:d7:15:8d:e0:
35:8c:3d:c2:49:14:43:5e:00:53:f8:75:4a:04:8d:88:52:b2:
3a:39:8b:86:1e:f2:6b:b0:57:a8:f7:d3:c8:86:c9:92:b3:9c:
7a:04:11:0b:f3:0e:89:02:ec:dc:b2:7c:e3:c6:ca:96:8d:2e:
f3:cb:ea:3e:ba:7c:97:4f:e7:1e:2b:2d:70:4f:0d:15:7b:31:
6e:1e:83:76:5e:85:4f:95:13:a1:44:7b:cd:c4:a1:30:73:af:
13:c0:56:0f:12:9a:2a:f4:f6:00:7a:e9:fa:08:51:b5:ab:09:
07:2d:e1:58:45:bb:0e:63:f4:a2:29:3c:b5:32:e4:64:92:5e:
13:26:b6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:27 2025 by rpki-client