Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/exgV4-G6gQtu_8vaWBNpG7xgV8Q.roa
File: exgV4-G6gQtu_8vaWBNpG7xgV8Q.roa (raw, json)
Hash identifier: //bllkCMRWL+aJP9INeCpZFfDYkgdrMmr+a8Ed3cnLI=
Subject key identifier: 7B:18:15:E3:E1:BA:81:0B:6E:FF:CB:DA:58:13:69:1B:BC:60:57:C4
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019427487573281E4C4D62EFFED4DC1E413C
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/exgV4-G6gQtu_8vaWBNpG7xgV8Q.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 92.60.74.0/24 maxlen: 24
92.60.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:75:73:28:1e:4c:4d:62:ef:fe:d4:dc:1e:41:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b1815e3e1ba810b6effcbda5813691bbc6057c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:9a:e4:4a:b1:ab:5f:7a:1f:fe:49:ee:41:
0a:c7:f2:14:2c:e0:91:d5:e1:de:4c:8a:5e:78:8d:
b0:3f:f3:c9:e8:b4:83:de:86:3a:cd:c5:5c:2e:4b:
e6:fe:2d:8c:ee:71:65:8d:3d:4d:72:8a:4c:51:bf:
98:fc:98:09:4f:91:e7:58:68:46:66:48:2c:0a:05:
59:4c:16:e3:09:96:8b:4d:fb:b4:74:16:7e:39:f2:
a2:92:03:96:bf:ee:f4:5c:f0:6a:71:08:ff:89:50:
83:4b:3c:ef:4d:78:a1:4d:37:87:03:80:d9:74:44:
8e:6e:1b:be:6b:74:8e:bb:74:59:a3:17:f6:70:6e:
c3:cb:d4:df:89:49:69:25:d0:ff:47:3e:ca:2b:4b:
fe:82:f3:23:f6:5f:6c:a2:02:54:23:06:a6:ef:e9:
00:72:a6:d3:62:fb:21:29:6c:f8:b8:e2:16:73:c2:
b5:d6:c3:d0:a4:7d:2a:e1:6d:66:11:5a:68:dd:76:
fb:1e:d6:77:74:5a:89:e7:3c:84:d9:15:9a:7f:42:
d9:ea:00:0d:df:83:c8:13:9b:ba:bc:ca:96:a9:cb:
35:6d:72:ae:0e:3c:4b:e1:39:2e:78:a3:0d:49:b8:
89:df:02:81:8c:57:45:51:2b:6b:f3:75:cf:fc:85:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:18:15:E3:E1:BA:81:0B:6E:FF:CB:DA:58:13:69:1B:BC:60:57:C4
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/exgV4-G6gQtu_8vaWBNpG7xgV8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.74.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:60:1d:ee:01:31:f1:ad:b2:08:24:54:84:e2:71:c8:c8:b9:
fd:e1:ea:f2:d9:e1:07:0d:9d:19:06:09:21:55:80:71:c8:41:
30:c4:c2:91:e9:b8:fb:f2:20:b5:70:d3:ad:67:4f:c7:27:02:
9c:d1:5f:02:c6:0e:23:c2:42:03:5c:42:23:e6:80:20:cf:70:
c6:12:59:c1:54:fb:2b:bc:74:15:13:16:26:ba:f2:12:61:95:
36:dd:9c:c0:d1:c9:3c:28:32:a3:e7:18:0d:fc:9a:4b:29:44:
05:7f:a9:44:ba:59:d8:f7:73:d3:25:38:c1:21:f5:9c:96:23:
fb:b8:21:4e:8b:a4:d4:f9:35:40:70:98:22:c1:ce:9d:cb:1c:
53:07:13:89:b1:6b:ae:17:8d:e4:e7:e3:ab:9c:db:57:60:93:
5a:ab:09:3b:20:f3:e3:92:0b:d5:2a:0c:89:2e:c1:9f:17:a0:
e3:78:6b:5c:69:ca:59:48:54:fe:9a:71:78:55:cc:9e:9c:03:
17:81:f4:93:4e:78:84:c2:64:9d:50:91:cd:4f:6f:4c:da:b4:
08:cc:59:42:33:95:05:fe:6c:29:4c:86:40:9c:02:0a:a9:88:
be:84:a3:a9:7b:bf:ac:5b:62:04:bf:13:43:94:bb:8d:12:ba:
cc:f9:8a:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSHVzKB5MTWLv/tTcHkE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk
M2JmMTEwHhcNMjUwMTAyMTM1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjE4MTVlM2UxYmE4MTBiNmVmZmNiZGE1ODEzNjkxYmJjNjA1N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncWa5Eqxq196H/5J7kEKx/IULOCR
1eHeTIpeeI2wP/PJ6LSD3oY6zcVcLkvm/i2M7nFljT1NcopMUb+Y/JgJT5HnWGhG
ZkgsCgVZTBbjCZaLTfu0dBZ+OfKikgOWv+70XPBqcQj/iVCDSzzvTXihTTeHA4DZ
dESObhu+a3SOu3RZoxf2cG7Dy9TfiUlpJdD/Rz7KK0v+gvMj9l9sogJUIwam7+kA
cqbTYvshKWz4uOIWc8K11sPQpH0q4W1mEVpo3Xb7HtZ3dFqJ5zyE2RWaf0LZ6gAN
34PIE5u6vMqWqcs1bXKuDjxL4TkueKMNSbiJ3wKBjFdFUStr83XP/IUSDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHsYFePhuoELbv/L2lgTaRu8YFfEMB8GA1UdIwQY
MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt
MmJhZGNlNDY2ODUzLzEvZXhnVjQtRzZnUXR1Xzh2YVdCTnBHN3hnVjhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz
LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXDxKMA0G
CSqGSIb3DQEBCwUAA4IBAQBPYB3uATHxrbIIJFSE4nHIyLn94ery2eEHDZ0ZBgkh
VYBxyEEwxMKR6bj78iC1cNOtZ0/HJwKc0V8Cxg4jwkIDXEIj5oAgz3DGElnBVPsr
vHQVExYmuvISYZU23ZzA0ck8KDKj5xgN/JpLKUQFf6lEulnY93PTJTjBIfWcliP7
uCFOi6TU+TVAcJgiwc6dyxxTBxOJsWuuF43k5+OrnNtXYJNaqwk7IPPjkgvVKgyJ
LsGfF6DjeGtcacpZSFT+mnF4VcyenAMXgfSTTniEwmSdUJHNT29M2rQIzFlCM5UF
/mwpTIZAnAIKqYi+hKOpe7+sW2IEvxNDlLuNErrM+YrI
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:48 2025 by rpki-client