Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N2FDTkGcVwcO-dQcJoMMJw3u9sA.roa
File: N2FDTkGcVwcO-dQcJoMMJw3u9sA.roa (raw, json)
Hash identifier: nudWfK9APe8zpUoQJLKNv/TAMxOQd1++TE1cuAzqmPU=
Subject key identifier: 37:61:43:4E:41:9C:57:07:0E:F9:D4:1C:26:83:0C:27:0D:EE:F6:C0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222044F664A569728F6F99E8C2307653
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N2FDTkGcVwcO-dQcJoMMJw3u9sA.roa
Signing time: Wed 01 Jan 2025 13:48:47 +0000
ROA not before: Wed 01 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208769
IP address blocks: 92.60.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:44:f6:64:a5:69:72:8f:6f:99:e8:c2:30:76:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3761434e419c57070ef9d41c26830c270deef6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:05:be:17:8b:c5:27:cc:2a:1a:1b:9c:02:
78:33:f4:36:ec:fb:d7:83:77:6b:bd:e0:31:e3:f6:
da:2a:63:66:b2:30:06:f6:08:65:fa:e4:36:09:ba:
e1:13:e2:af:05:b8:e6:5f:79:31:d1:17:cd:95:bb:
25:88:cc:71:73:a0:60:76:0d:b0:24:63:1e:91:d7:
f8:6d:d8:e2:30:cd:84:7f:de:62:cf:71:ca:22:92:
b3:2f:9f:de:a8:0b:31:f4:c5:98:0b:d7:01:97:03:
b5:ff:57:d2:b9:79:c8:75:b1:f4:75:d8:a3:ec:20:
0d:1b:79:d3:87:16:69:77:79:9a:cc:65:7a:de:ce:
2c:1d:de:05:67:43:3f:ea:82:a8:38:af:28:ff:d5:
b9:57:ad:8d:fc:9c:72:50:78:c6:19:e4:ca:b1:b7:
e0:a8:59:4f:3b:81:6e:7e:46:8b:38:c1:09:94:48:
f0:13:4a:cb:7a:12:54:14:19:c3:22:b4:c0:77:04:
c0:79:97:61:c9:12:ac:7b:8a:1d:87:b6:a1:2d:df:
32:a8:0f:00:39:00:98:bb:10:a3:42:9b:83:f2:37:
c4:e6:a6:eb:7a:df:16:f9:a5:f9:98:b6:bb:40:84:
75:1b:11:31:97:4f:c5:c0:f9:93:3b:28:62:c8:d5:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:61:43:4E:41:9C:57:07:0E:F9:D4:1C:26:83:0C:27:0D:EE:F6:C0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N2FDTkGcVwcO-dQcJoMMJw3u9sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.32.0/23
Signature Algorithm: sha256WithRSAEncryption
47:3a:f2:6a:18:de:d1:d8:1e:55:d7:ec:84:fd:ec:f2:f8:ee:
e8:13:8c:3c:ec:bb:ad:07:a1:b7:57:0d:da:c2:b7:74:c4:16:
af:f5:94:27:fa:93:89:91:ea:6c:12:1d:07:8b:16:05:12:07:
42:fd:fe:ca:c6:1c:85:81:82:ab:84:f9:f5:7a:b9:b0:54:86:
5a:74:98:22:46:78:b5:bf:2e:17:2a:68:5a:ee:b4:7a:13:a5:
30:30:bc:c5:7a:dd:79:75:a4:f2:c4:31:39:fa:28:ee:d5:99:
4b:d8:0b:0f:08:a3:16:26:1c:a3:71:07:70:bb:01:2d:fe:ed:
ec:02:86:39:65:8b:10:fa:2a:51:df:77:a1:fa:65:d6:7a:6d:
fc:1b:f1:cc:e6:dc:25:2b:79:51:f0:4e:75:ec:de:ab:01:f3:
9b:fd:11:28:23:07:3b:e5:fd:a7:f7:17:6b:ca:f8:da:d6:16:
24:ad:48:c3:59:f7:b3:51:4f:5b:38:fc:65:e3:03:c4:c9:90:
d4:d0:73:1c:7d:ed:68:86:dc:fe:1d:2a:ef:b0:e5:af:4d:35:
56:57:ee:bb:5c:0e:c7:05:81:43:96:e9:78:81:10:e3:21:05:
df:ca:b3:be:ab:f6:e2:68:b4:53:d5:3f:9a:e4:b6:dc:9a:05:
91:d2:82:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:57 2025 by rpki-client