Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/am2sy58F1CS8R1serePPA8VUSM8.roa
File: am2sy58F1CS8R1serePPA8VUSM8.roa (raw, json)
Hash identifier: mn9+spB9id4ITF5EVifryU58phMpNbZ14Htzb13CxjQ=
Subject key identifier: 6A:6D:AC:CB:9F:05:D4:24:BC:47:5B:1E:AD:E3:CF:03:C5:54:48:CF
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019427B47A42BEC146EC41A51B97665FD92C
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/am2sy58F1CS8R1serePPA8VUSM8.roa
Signing time: Thu 02 Jan 2025 15:48:46 +0000
ROA not before: Thu 02 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207990
IP address blocks: 92.118.69.0/24 maxlen: 24
92.118.70.0/24 maxlen: 24
92.118.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:7a:42:be:c1:46:ec:41:a5:1b:97:66:5f:d9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Jan 2 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a6daccb9f05d424bc475b1eade3cf03c55448cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:12:24:de:91:66:e2:09:a3:10:02:da:4f:
59:e8:ff:8a:c2:aa:26:40:4a:f4:78:f4:d5:37:05:
03:a7:f4:4c:2e:72:56:d8:98:56:57:ee:69:43:12:
8a:cc:46:58:a6:a2:5e:94:af:25:78:68:bc:d0:59:
9d:e5:78:27:30:ff:4b:65:b7:d0:1f:79:90:8b:80:
a0:4e:96:4e:80:ad:dd:92:a5:32:2a:cf:08:12:74:
34:4d:01:80:15:a4:d7:27:0b:e7:d9:77:45:ec:46:
2a:3e:98:e8:d6:9f:b4:f5:c0:41:95:c8:ee:28:67:
05:6b:50:aa:6f:14:f6:41:ee:60:e4:b0:61:4f:7b:
ea:ce:9c:4f:86:a8:25:4d:1f:b2:c3:cb:8f:5d:72:
c3:f5:cc:25:40:ea:eb:64:38:51:5d:0e:79:13:97:
f7:4f:48:cf:56:b5:30:d4:0c:7d:3f:46:d5:e8:46:
54:36:ed:e4:7e:41:e0:5a:96:ee:9d:bb:51:c2:6f:
66:2c:47:83:f1:86:8b:2e:48:37:f7:7f:6c:6a:eb:
90:45:a0:0b:4f:6f:24:d0:bf:92:43:50:cf:43:8f:
a0:64:ac:26:e2:57:8d:de:0c:31:11:62:d9:ef:9c:
62:fa:a4:75:08:ba:5a:0f:62:d5:90:02:9d:64:8d:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:AC:CB:9F:05:D4:24:BC:47:5B:1E:AD:E3:CF:03:C5:54:48:CF
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/am2sy58F1CS8R1serePPA8VUSM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.69.0-92.118.71.255
Signature Algorithm: sha256WithRSAEncryption
7a:f0:65:b1:7d:32:63:86:83:56:f2:3e:7e:0c:3f:6e:f1:de:
5d:81:61:1e:a8:7d:80:95:81:30:f7:02:a1:c7:0d:b4:82:be:
21:71:5a:ba:ce:bb:7a:f0:7c:23:7d:15:88:0a:d8:ee:bf:5f:
6e:90:5c:b1:35:97:79:e4:f0:2a:fc:8f:6d:43:5e:b4:54:4d:
63:b9:14:13:0f:f8:49:3f:85:86:2b:2b:cb:c6:f3:d3:b0:90:
2a:ce:38:5f:9b:63:6a:f2:38:76:75:85:7e:1b:c2:27:c5:2a:
a0:6a:d1:93:84:24:54:6e:38:ab:9f:bd:d0:d0:47:94:58:b2:
aa:fc:88:66:21:6e:e9:27:59:af:15:40:1d:2f:bd:f9:dd:de:
67:51:41:a1:d6:a3:ca:6f:2f:3b:d3:40:8f:da:89:6b:7b:c2:
28:60:9a:55:8c:04:d0:87:d1:4d:82:28:46:56:e2:07:70:a7:
86:7f:62:3c:5b:f4:4b:b9:42:6e:16:6c:2a:23:aa:af:9c:bc:
f2:00:0a:0e:11:83:a1:2e:33:e8:9d:2b:e9:ae:5c:ee:25:59:
2f:ed:a2:f1:a4:4a:bc:e8:6b:52:dc:6d:e9:84:ba:37:34:80:
81:9a:cf:4d:11:dc:43:4a:60:de:84:b5:c1:d2:a6:3a:26:1a:
5a:85:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:29:31 2025 by rpki-client