Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/jClAwbUeFaeJ9TptwDDyXZvlc14.roa
File: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (raw, json)
Hash identifier: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=
Subject key identifier: 8C:29:40:C1:B5:1E:15:A7:89:F5:3A:6D:C0:30:F2:5D:9B:E5:73:5E
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 0194274879E0ECEF444A330AA7F9508972AB
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/jClAwbUeFaeJ9TptwDDyXZvlc14.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214557
IP address blocks: 92.60.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:79:e0:ec:ef:44:4a:33:0a:a7:f9:50:89:72:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c2940c1b51e15a789f53a6dc030f25d9be5735e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:7d:78:9f:17:3a:23:3c:56:2c:b8:4b:b7:
e7:68:4c:8c:96:c9:f9:13:2a:4d:1d:e7:57:ec:05:
0c:fb:c2:b0:9a:4b:b4:cb:af:2a:cf:9d:e1:38:01:
aa:35:09:70:17:5d:96:4e:0b:2d:4d:dc:c4:93:26:
37:40:18:6f:28:58:8c:de:db:e2:43:7d:a0:97:61:
77:99:72:e2:19:fa:74:f0:74:7a:96:94:93:d3:d0:
a0:ea:3b:76:51:2c:fa:82:c2:34:a4:a0:e8:21:82:
c8:54:42:42:3b:c6:66:52:f8:f7:8a:56:37:2c:bc:
4c:48:ed:82:a7:9a:da:8f:5e:3d:d3:a4:a6:af:ee:
44:a5:fa:d8:f8:de:ea:3b:79:61:18:2e:c8:b1:77:
4a:d0:41:65:50:34:fd:7b:c5:d7:15:09:0c:7b:98:
a9:b8:9b:65:2e:d0:b6:d5:ad:44:51:63:44:32:97:
45:34:93:db:f2:30:21:2a:42:24:24:20:97:33:de:
6d:37:75:e2:61:aa:3c:b8:a9:b6:de:64:97:75:bb:
5b:39:d8:6a:57:04:15:36:9f:40:91:ec:90:0b:67:
59:10:96:7b:54:e1:f7:8d:c7:36:5b:4b:69:5e:43:
06:8b:12:89:f7:a7:0c:36:cb:53:64:9e:40:1d:74:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:29:40:C1:B5:1E:15:A7:89:F5:3A:6D:C0:30:F2:5D:9B:E5:73:5E
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/jClAwbUeFaeJ9TptwDDyXZvlc14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.77.0/24
Signature Algorithm: sha256WithRSAEncryption
66:af:73:88:b5:34:32:d4:6e:0a:ec:d8:50:90:af:7d:ff:9a:
96:fa:84:9c:9d:ba:f4:ef:4d:95:3d:14:56:e9:81:16:41:11:
b6:2d:82:b9:17:51:5e:f8:77:53:e1:d1:52:5d:5f:02:ab:70:
f3:08:41:af:5d:00:c3:7e:0f:df:bd:81:fe:86:93:7f:85:3d:
33:e9:a8:59:bb:0e:19:ac:d3:4b:26:13:32:29:f7:42:30:78:
d4:f5:d7:bf:06:b0:af:0c:0f:8f:35:c3:87:84:c1:01:98:29:
84:e3:f0:d1:1a:4a:46:55:5d:5c:6c:86:c8:14:14:4b:68:52:
9b:79:48:83:21:a0:80:48:25:60:56:ea:0f:9d:92:08:ca:58:
43:6c:4e:f5:fc:e0:8a:1b:9a:ad:52:d1:87:c4:91:fd:bf:39:
08:38:51:11:3c:4d:fb:8c:4c:30:8e:47:64:51:84:15:c6:a9:
5f:88:84:48:04:e0:d6:8b:45:0b:b0:2c:05:d8:dd:f7:65:5a:
f4:ad:ad:a8:2d:96:70:ef:81:86:0d:80:a9:4c:61:93:32:0f:
40:2a:50:07:22:70:04:a2:ef:b1:f6:c6:2f:ea:ae:47:fb:a0:
d7:e4:d1:1c:a9:d3:ed:d3:f0:5c:95:06:cd:34:12:46:36:57:
8d:30:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:55:44 2025 by rpki-client