Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8l3Mm_Cy6xSzpayMeFE5kf57R5M.roa
File: 8l3Mm_Cy6xSzpayMeFE5kf57R5M.roa (raw, json)
Hash identifier: EsEfqqzOxOHg3a77FN1hSowfgkbvHaL7Li2wNFzdlOo=
Subject key identifier: F2:5D:CC:9B:F0:B2:EB:14:B3:A5:AC:8C:78:51:39:91:FE:7B:47:93
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0192ACC57DFC2E7C963DAED82A994F16465F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8l3Mm_Cy6xSzpayMeFE5kf57R5M.roa
Signing time: Mon 21 Oct 2024 01:51:16 +0000
ROA not before: Mon 21 Oct 2024 01:51:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11798
IP address blocks: 185.176.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ac:c5:7d:fc:2e:7c:96:3d:ae:d8:2a:99:4f:16:46:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 21 01:51:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f25dcc9bf0b2eb14b3a5ac8c78513991fe7b4793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:25:c6:78:16:11:87:39:75:4a:0d:f4:2a:
29:55:ff:6a:2c:5c:16:2e:b7:d5:61:aa:dd:12:c6:
16:f2:ea:5f:b7:01:e1:64:01:ad:43:73:d2:d5:d4:
8d:9e:e1:57:96:27:5c:7b:f1:ac:7b:d6:31:a8:51:
75:2f:bd:c7:3d:9e:2e:e8:f7:20:f2:7b:31:2f:0f:
a7:3b:87:a4:ad:2f:86:5a:39:59:c5:7f:28:60:2c:
0d:1b:00:23:87:cd:c0:be:54:38:2c:59:69:35:7a:
ce:ab:2c:f6:38:69:bb:d3:a2:28:7b:89:9d:6e:1b:
1d:44:a1:30:0a:81:f8:d0:02:f2:e6:b8:fd:41:3b:
23:1d:8a:9f:35:b0:99:1e:49:ce:49:3b:1c:8c:c8:
11:fc:50:2b:1e:4e:2a:e0:e7:3d:da:b3:66:fc:4d:
6a:94:3b:6e:50:c9:c4:96:04:b0:4d:ca:1b:6a:6d:
09:4b:68:3a:23:5a:66:d7:d6:90:45:18:34:fd:aa:
b9:e5:cf:e6:19:84:63:e3:d4:e3:12:b0:d7:c6:ba:
5c:2b:1d:39:81:cb:b2:03:df:65:88:0f:a6:6e:fb:
c9:d8:d1:87:7a:a5:82:3b:1a:cb:8e:c2:c8:11:f5:
93:33:fb:82:bd:0f:34:10:67:4d:71:7a:c8:1e:5a:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:CC:9B:F0:B2:EB:14:B3:A5:AC:8C:78:51:39:91:FE:7B:47:93
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8l3Mm_Cy6xSzpayMeFE5kf57R5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.92.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d7:73:64:47:38:54:b7:c0:a5:5e:f5:a1:63:e2:f1:77:a1:
26:68:de:57:a4:79:54:f4:fb:0c:5a:85:48:20:36:7f:9a:1a:
70:ee:87:6c:1f:5c:32:6d:a4:ec:08:30:4f:f5:7c:9f:2a:6b:
1a:6d:53:9a:51:8a:e7:0a:c0:b9:fd:85:f2:4b:b5:4a:ce:99:
5b:ae:87:00:c3:8d:2e:e2:01:d5:93:9d:8c:f1:a7:85:52:0c:
72:53:15:e7:97:a6:24:0c:3d:e8:53:cf:2a:cb:99:bc:07:48:
c1:12:65:83:4a:0d:61:2a:ab:c8:2c:e6:e8:28:c1:1c:c4:0e:
52:b3:bc:b5:e3:99:fd:8e:d2:8a:78:d4:d5:a6:a6:53:c2:e4:
b0:9a:9c:8a:d4:54:99:03:04:1f:b0:19:27:7d:29:fd:28:3f:
65:f8:de:1f:15:fd:97:c7:ff:90:10:90:0b:4a:bf:e4:d2:93:
9d:0a:c2:c5:07:b3:e6:1c:d8:74:0d:88:37:e0:dc:eb:d0:51:
96:70:fa:6a:6f:29:21:b6:2a:3f:2c:b1:76:5b:6d:96:9c:51:
f2:a8:cf:27:6e:26:0d:de:4b:29:d4:30:ce:e9:6a:8e:d2:ee:
33:e9:a5:d2:fe:22:aa:77:2a:85:1c:10:eb:0e:2c:3e:bf:1d:
82:bd:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:09 2025 by rpki-client