Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa
File: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (raw, json)
Hash identifier: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=
Subject key identifier: B5:D2:DF:5D:C0:E9:58:E3:2D:93:CC:0B:88:16:72:14:0F:B4:70:DA
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FBA25287EC799D81C803C4FBC40640
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209196
IP address blocks: 92.52.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a2:52:87:ec:79:9d:81:c8:03:c4:fb:c4:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5d2df5dc0e958e32d93cc0b881672140fb470da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:88:08:72:4d:0a:71:d5:23:0f:d8:64:0b:
5e:3a:28:57:f9:ae:f9:79:84:b6:ac:b1:24:3d:2a:
fd:aa:3b:31:b8:5a:1c:5e:47:40:bf:68:eb:c0:7f:
e6:5f:7e:65:0b:f1:64:b6:18:1d:df:dc:36:a1:de:
a9:f0:90:65:d4:06:74:1b:ed:4c:2e:7b:f2:e7:b6:
c9:30:ef:5d:54:c8:14:f4:d0:68:5b:5a:dd:14:f2:
67:c6:e9:93:d1:fa:10:5a:23:c3:c8:ee:01:6d:3e:
87:0f:75:71:2b:33:5c:c8:e7:e7:ad:e3:fb:2c:b4:
2e:a4:01:6e:10:fc:7a:01:4b:43:64:3e:1f:fd:59:
9a:91:eb:ac:59:e4:ed:90:5a:d7:c6:97:a3:5a:09:
a3:dd:e3:f4:19:50:6c:4c:d5:d2:a5:88:ae:77:ac:
b7:e3:40:b9:31:d9:97:67:fb:c0:d1:05:f2:f9:ac:
6e:38:44:79:c1:9e:f9:66:5a:55:49:32:a0:2c:f2:
3e:53:58:bb:08:ba:90:a6:8f:dd:f3:4a:61:c4:e0:
82:cb:bd:af:72:af:83:d1:1a:2b:82:03:04:17:e9:
9b:aa:f6:3a:55:db:04:c5:21:7f:fc:64:e0:4d:d5:
46:62:67:aa:e6:2d:49:ab:d9:6e:e1:f2:a0:b0:fc:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D2:DF:5D:C0:E9:58:E3:2D:93:CC:0B:88:16:72:14:0F:B4:70:DA
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.215.0/24
Signature Algorithm: sha256WithRSAEncryption
15:84:c3:82:44:0e:ae:c7:f9:1d:a4:da:d5:84:5e:9d:2e:36:
61:60:c8:f4:6d:9a:11:a8:1c:ea:de:45:dc:b7:a1:5c:22:bf:
62:14:ac:cc:a5:d4:40:77:1b:87:29:b6:16:e5:bb:d7:2e:7a:
ac:ff:c5:1d:ed:85:81:2a:e6:73:8d:71:79:17:6a:2c:09:a3:
75:d8:9f:38:db:ce:dd:25:9d:04:1b:d3:9c:7a:36:4f:c1:e4:
e1:23:d4:0c:9b:2d:69:cd:56:06:0d:3c:34:89:8e:f5:39:52:
39:51:0d:c7:21:f9:8d:07:7b:27:54:8a:a1:79:70:80:16:5c:
bd:6c:ce:0b:5f:6d:f7:fd:fa:3e:71:99:1c:ea:f0:95:2e:66:
ec:38:3f:6e:7e:76:22:c2:57:17:30:8a:d8:44:2b:67:61:b8:
e3:d8:1e:cb:ef:99:f5:38:9c:a7:14:f9:29:50:b6:c4:c9:2b:
e2:f8:6c:48:7b:d8:80:07:a0:3c:c4:d2:4f:10:31:47:4a:ee:
43:a6:6e:fa:e5:38:f7:a4:af:2b:8e:47:d9:95:4e:c2:35:f0:
39:7c:1e:7f:1e:a1:8c:cf:4c:05:b1:e9:4f:6d:0d:25:85:f2:
4e:c7:bf:6c:94:d9:da:67:d4:62:ba:e5:0e:23:4f:7e:ab:27:
07:17:4c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:05 2025 by rpki-client