Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BUewB9_NvYJ85g8W4DMrlK3_tQg.roa
File: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (raw, json)
Hash identifier: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=
Subject key identifier: 05:47:B0:07:DF:CD:BD:82:7C:E6:0F:16:E0:33:2B:94:AD:FF:B5:08
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB9A047DA54D12E7A40FDE6D6FA60F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BUewB9_NvYJ85g8W4DMrlK3_tQg.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62051
IP address blocks: 92.52.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9a:04:7d:a5:4d:12:e7:a4:0f:de:6d:6f:a6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0547b007dfcdbd827ce60f16e0332b94adffb508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:41:d0:c6:27:69:26:f8:24:d2:a6:8e:9d:
31:2c:ee:fb:e5:8d:59:06:78:c8:ff:cb:2f:00:d8:
fc:08:7f:8f:ca:22:e2:40:2a:b4:fc:66:6f:b7:c7:
79:20:29:05:89:e2:07:62:0f:84:fe:96:2f:bb:d0:
22:0f:48:83:63:0c:4b:5e:e4:81:f6:d5:89:ce:83:
0b:85:cd:8b:4c:96:b1:83:d6:6f:d7:18:00:e5:e6:
ad:e2:3d:aa:8d:13:40:bd:36:1d:2a:94:1f:66:cb:
63:5f:00:50:da:d0:fb:00:eb:8b:a3:91:48:8c:cc:
77:2c:93:d8:df:b5:c2:05:d9:8d:fc:03:73:70:73:
34:09:c2:47:fa:62:85:7e:f8:c0:7f:7a:07:48:5b:
e1:a8:b3:8e:17:f0:2f:47:3f:30:24:0e:5c:a6:0b:
70:6f:10:b9:3b:92:9c:7d:7d:5b:21:64:34:35:03:
a5:56:df:87:a7:46:1e:62:14:f6:6e:a9:4c:39:33:
44:36:a8:d5:4f:0b:1e:83:22:79:f9:c2:cb:d4:27:
49:38:ff:d5:21:6d:6d:8f:56:44:19:1b:86:84:08:
72:3b:d8:2d:49:8c:cf:76:d2:7c:4a:68:42:11:1a:
d5:d7:ad:f3:6d:b8:58:0e:0c:83:40:78:d2:9d:bf:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:B0:07:DF:CD:BD:82:7C:E6:0F:16:E0:33:2B:94:AD:FF:B5:08
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/BUewB9_NvYJ85g8W4DMrlK3_tQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ee:f1:ff:4f:f2:17:28:cb:e7:48:a4:b2:bf:af:44:cc:f3:
c0:f1:7e:e3:c7:3e:f0:ad:60:39:42:3f:19:a0:0e:7b:6b:22:
d3:9b:f2:9a:c2:42:8a:ee:45:9b:b5:a9:f8:d2:40:ab:75:11:
4f:f0:80:14:b4:95:9c:d9:09:37:56:87:4e:7f:98:d3:50:34:
4e:c2:06:97:a7:01:46:76:f1:ea:fb:a9:86:5b:ee:55:d3:9a:
f4:6f:84:ec:93:0c:83:e5:73:2d:79:6f:96:e1:4a:c7:32:64:
0e:87:7f:2d:84:fc:cf:7b:ba:11:c8:fa:5c:15:aa:a3:b8:99:
66:d8:e5:a5:73:19:b8:2f:d4:66:7e:26:ab:5f:3d:a8:59:5c:
0d:6c:44:56:4d:d8:5d:0c:e7:8d:2d:db:49:1e:6a:00:8b:23:
c3:0c:8b:8f:18:f5:9a:8c:87:62:6c:d8:9d:ff:a3:0b:bf:fb:
1c:66:46:1d:e4:bb:fa:b6:43:60:ce:2f:f0:b9:d8:61:43:f6:
64:52:bf:11:25:bb:1a:03:f2:0a:d8:c3:1f:a9:8b:06:72:52:
9d:08:cd:12:32:23:a4:df:96:41:9c:a9:ed:28:92:99:84:f2:
1a:de:06:9a:17:54:61:ef:aa:0c:9e:1c:e1:e6:c4:70:62:f1:
89:52:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:30 2025 by rpki-client