Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa
File: dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa (raw, json)
Hash identifier: PjGfWgf8wj53bPtlEQkRSwYcsy5G/eLRYAuG9DVnO5o=
Subject key identifier: 74:26:31:93:BF:83:F1:D3:6D:C4:88:04:B2:73:2A:C0:9E:93:1C:B8
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 01942745C81A619CE35A0FBCDB3D90CBA2C0
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa
Signing time: Thu 02 Jan 2025 13:47:52 +0000
ROA not before: Thu 02 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43766
IP address blocks: 92.43.168.0/23 maxlen: 23
92.43.168.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
92.43.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:c8:1a:61:9c:e3:5a:0f:bc:db:3d:90:cb:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Jan 2 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74263193bf83f1d36dc48804b2732ac09e931cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:30:db:e9:8b:22:20:44:17:ed:a5:bf:b0:e1:
29:e6:1f:9e:54:06:45:49:3f:f3:a7:01:10:1c:21:
4b:fd:9c:e2:75:b3:77:ec:1c:49:dc:45:05:fa:77:
73:71:a7:4f:f7:a6:77:6c:92:93:e5:b4:5c:32:3e:
f5:10:7e:a6:ea:fa:1c:ff:86:85:5c:70:45:f1:9d:
7f:c3:b9:e4:4e:6f:55:22:fb:34:4e:64:16:5a:15:
f1:5d:4b:f8:c5:eb:b4:e7:6c:66:f5:aa:47:6f:76:
98:ef:b8:d0:4d:1c:66:5f:bd:02:fd:e6:c1:89:29:
8a:cd:9d:56:8d:c9:56:4a:9b:20:39:30:ff:61:d9:
97:96:39:fc:22:53:01:16:d2:36:2b:8b:96:a5:ee:
0a:79:d7:37:c6:b6:9d:15:b2:74:d3:2a:dd:98:55:
c5:d9:9b:44:a5:c9:fc:b5:b4:c9:48:db:47:91:0e:
63:8b:c0:86:73:6f:a9:7d:58:00:33:9c:64:37:ae:
06:47:07:23:5d:09:ec:17:e5:b8:9d:88:b9:e4:d7:
04:65:76:e0:97:ac:47:0b:d3:b9:31:c5:f1:03:f9:
30:6f:e8:19:46:8b:89:b6:b1:b8:df:4a:27:1c:88:
93:c1:53:8f:a0:de:cf:30:e8:e4:b5:b7:b3:f0:a5:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:26:31:93:BF:83:F1:D3:6D:C4:88:04:B2:73:2A:C0:9E:93:1C:B8
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:c6:32:fa:0e:7a:ff:67:70:21:85:0b:33:1d:5f:c0:7e:4e:
27:40:f8:ce:6d:a0:37:47:3f:59:63:33:98:6a:83:7e:d0:54:
45:34:aa:ea:c2:43:c9:75:df:01:27:17:1c:1e:4f:d0:c0:b5:
07:8d:75:f8:37:f6:28:b3:07:67:97:ce:ed:77:db:4e:55:c5:
f6:b1:37:d6:14:39:c3:fa:41:4c:1c:fb:7c:41:85:a6:00:07:
0a:b7:12:60:42:40:45:bb:53:a8:fb:de:42:8c:c5:72:63:b6:
b0:fd:94:59:80:ae:3e:64:3c:d7:20:dc:ba:6b:23:5b:ac:b1:
67:1f:51:c0:ab:ff:42:07:46:3d:a0:5c:5e:86:c4:51:46:9a:
1b:52:13:ee:94:3b:2a:1f:54:47:6b:5e:df:df:36:bb:b3:6d:
da:93:e1:a9:1f:72:2e:f4:26:ea:2b:cc:62:69:f4:78:85:22:
16:c8:79:7c:2f:22:52:65:9f:4a:c9:e6:db:cb:a6:92:65:d7:
eb:ce:ca:69:cc:1a:69:4c:dd:b7:b9:ab:0d:f6:10:15:f0:34:
1e:96:11:4a:1c:bc:d2:ec:f7:2a:0f:8e:00:ff:ba:6c:3e:e9:
73:72:d2:26:09:22:50:24:86:16:d9:1f:3c:8e:bd:ae:df:ad:
5b:b9:85:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:16 2025 by rpki-client