Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ar6RluCxRWglyl3vcKXh9UngTHI.roa
File: ar6RluCxRWglyl3vcKXh9UngTHI.roa (raw, json)
Hash identifier: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=
Subject key identifier: 6A:BE:91:96:E0:B1:45:68:25:CA:5D:EF:70:A5:E1:F5:49:E0:4C:72
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019427487840C3C77621497602B4C46E4BA7
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ar6RluCxRWglyl3vcKXh9UngTHI.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 92.60.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:78:40:c3:c7:76:21:49:76:02:b4:c4:6e:4b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6abe9196e0b1456825ca5def70a5e1f549e04c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:f7:fc:eb:60:94:a3:df:15:99:09:d7:2e:
f1:b9:a0:c8:33:01:90:da:0d:33:c7:35:4e:37:8c:
4c:11:db:8c:1a:61:48:1a:d9:1b:fe:3e:47:1c:1d:
e2:42:3c:08:11:7c:9b:23:38:1a:c8:52:c5:8b:4c:
c7:02:6d:fd:4d:2d:24:a3:31:16:85:3f:04:e6:70:
5d:d6:98:f5:1e:67:d9:cb:38:a4:90:63:dd:5e:98:
61:1e:cd:a1:ff:04:cb:c6:81:f1:1d:4b:b8:bc:89:
69:8e:f8:77:34:88:18:bd:46:01:1f:b1:0d:e7:9c:
13:e3:8d:2a:de:b4:3b:2e:17:e7:f5:8b:98:6a:88:
27:69:54:fd:bf:54:d7:f9:ef:67:60:d1:44:af:34:
be:4a:f9:f8:04:a2:7c:53:25:17:05:fe:1d:9e:7f:
6a:6c:5f:21:97:73:dd:f4:08:4f:f9:cf:f2:55:8a:
04:49:e3:b9:db:93:95:60:12:5c:82:f0:e8:6c:85:
77:73:af:f4:52:1c:14:2c:32:9b:4c:80:b4:f8:81:
f1:10:86:f7:70:1d:4b:ae:b2:02:a8:0f:0a:13:29:
9f:85:4b:cd:62:4b:90:93:2a:09:87:4e:e0:db:ea:
df:98:bc:ba:65:fc:d7:35:e5:5a:84:a6:7a:50:c5:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:91:96:E0:B1:45:68:25:CA:5D:EF:70:A5:E1:F5:49:E0:4C:72
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ar6RluCxRWglyl3vcKXh9UngTHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.78.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a3:12:87:5d:06:7e:39:9c:e8:f4:5c:08:85:53:37:90:b0:
62:68:c2:6d:ec:ef:ee:8c:bb:82:de:fa:88:ba:62:25:0e:10:
96:1e:e4:14:a8:75:43:16:b4:15:27:f5:24:07:ae:20:55:b2:
ba:07:e3:56:08:a0:dd:31:7d:c1:ba:16:31:8d:55:d9:d3:46:
2b:bb:7d:76:fe:7a:40:23:34:a2:0c:f2:cb:da:a4:e8:0e:a0:
21:a6:a7:e5:f0:28:22:49:3c:aa:42:0a:ac:7c:6d:47:d0:19:
98:08:a4:f2:30:ee:fc:63:1f:ea:26:55:42:57:45:09:83:28:
9d:02:fc:e9:50:36:de:0c:e2:db:6c:64:75:74:16:dc:12:98:
78:bf:21:a9:47:ea:b9:21:38:41:3b:ff:9d:0f:a2:31:d0:11:
3b:79:95:67:40:d6:c0:18:fc:2b:38:0d:5b:8f:d5:7c:9e:e9:
b4:e5:d3:e9:6f:ba:33:8e:9b:04:bb:27:60:8c:63:f3:13:15:
d9:b2:48:68:2c:e0:d3:ed:20:f5:43:fb:d1:01:f6:89:e1:24:
bf:fc:3c:5b:45:90:31:b7:4b:96:9f:a4:1b:08:01:1d:dd:d1:
d4:ee:66:1a:31:58:6a:93:33:64:55:3f:34:38:73:98:28:bb:
6a:f9:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:10 2025 by rpki-client