Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/E8lmVC7bau5tj5Iiwk3c0i8l2Ps.roa
File: E8lmVC7bau5tj5Iiwk3c0i8l2Ps.roa (raw, json)
Hash identifier: w6Z0YEJQvfL4NvmqQHTVNtC2n3ge/nKiZiSd6ate0dI=
Subject key identifier: 13:C9:66:54:2E:DB:6A:EE:6D:8F:92:22:C2:4D:DC:D2:2F:25:D8:FB
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019425214B98DD7FAF8D037EFA585413E24C
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/E8lmVC7bau5tj5Iiwk3c0i8l2Ps.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 92.61.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4b:98:dd:7f:af:8d:03:7e:fa:58:54:13:e2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13c966542edb6aee6d8f9222c24ddcd22f25d8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:8a:c2:0d:86:fd:96:27:6f:f5:57:2c:f4:
ff:c5:02:c8:50:fa:40:7f:7e:5a:13:fe:b2:a1:5e:
af:5c:4c:2b:46:d3:9a:8a:47:9e:7a:ed:5a:56:f5:
54:39:ad:65:c2:98:e2:46:b1:49:06:88:53:d8:e4:
b4:d2:52:0f:46:0f:39:86:a0:db:9b:7c:76:41:a8:
8d:2c:dc:c4:69:d1:8e:94:2c:41:b9:7d:44:59:44:
ca:83:9d:ec:ee:06:d1:5c:44:2d:27:84:af:f1:40:
c4:74:b2:99:a9:9f:ac:7b:75:df:e6:7e:a5:52:3b:
3a:e6:52:70:9a:b1:b6:f6:cb:b0:76:1c:76:87:32:
ed:7a:c7:23:bb:2e:a1:09:5e:8b:02:34:87:12:b1:
3d:95:99:e9:99:53:84:a0:c2:ce:52:51:43:4f:f7:
05:f1:cd:f0:7c:b9:ba:f2:f6:60:ef:6b:67:69:7f:
2b:2a:4a:14:92:c1:08:86:49:ff:37:f2:7a:0c:77:
0f:34:5f:71:d5:e7:7f:c0:16:cd:eb:f4:59:73:5a:
96:1a:23:f3:a0:bd:68:64:70:56:34:0e:ff:2d:7d:
27:e3:13:d7:57:c8:08:fb:59:4f:6e:6c:5e:fe:68:
08:c4:aa:2a:45:df:85:fd:e0:7e:57:7e:9c:0e:e9:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:66:54:2E:DB:6A:EE:6D:8F:92:22:C2:4D:DC:D2:2F:25:D8:FB
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/E8lmVC7bau5tj5Iiwk3c0i8l2Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.108.0/24
Signature Algorithm: sha256WithRSAEncryption
91:24:1c:05:29:b8:02:c5:e0:11:fa:5e:19:ad:bf:cc:2a:49:
1d:74:cd:ce:63:fd:5d:9b:b5:23:b8:da:85:82:99:b2:ee:a5:
98:48:7c:eb:37:a6:08:29:51:fb:99:e7:8e:c9:8e:4d:b1:51:
22:a6:2a:e6:72:75:3f:06:6a:0f:61:54:1d:82:41:e5:9d:9f:
cf:8a:f7:ce:01:4f:ea:d7:8d:68:9d:1d:89:6e:3f:1d:76:f2:
0b:ae:de:ee:30:c5:aa:3d:b6:7a:e7:11:b9:67:cc:e1:bd:2e:
54:21:d5:5c:f1:cf:02:d0:f2:c0:96:c2:8e:a0:6b:d7:c9:83:
2f:ea:6a:42:c6:73:d6:3d:52:dd:89:e7:d4:db:80:c2:7c:f8:
20:fb:47:ea:12:ce:dc:4e:d0:1f:9b:ca:a1:8b:fe:c6:10:4c:
20:ce:70:31:c4:9a:5e:5b:28:ef:4c:9b:67:e4:05:93:fb:ad:
61:b2:bc:20:a7:8d:d3:e8:e6:66:ef:27:74:ca:35:64:48:99:
64:18:6a:bf:0e:fc:15:22:23:72:f9:08:bc:1a:80:22:4b:c0:
c8:29:4c:47:7c:4a:1a:35:5c:0c:ae:ad:d2:5c:75:db:42:ac:
96:02:5e:e9:c2:ac:2f:c5:17:95:31:19:82:6e:89:b9:0f:18:
41:f9:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:36:25 2025 by rpki-client