Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa
File: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (raw, json)
Hash identifier: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=
Subject key identifier: BF:45:5F:85:D9:53:60:75:59:F1:21:16:96:0B:D3:91:48:02:C9:AF
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 0194274877AFAF0162EA81B2912D0AFEF6EB
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 92.60.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:77:af:af:01:62:ea:81:b2:91:2d:0a:fe:f6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf455f85d953607559f12116960bd3914802c9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:b9:92:73:af:6b:f8:44:05:ef:5c:77:74:
31:fd:aa:1e:88:4f:ac:ee:eb:ba:46:43:d3:c1:af:
b5:41:4d:43:99:21:b8:51:93:6a:d1:77:9a:ad:a9:
83:60:86:e6:f7:15:8f:21:10:bf:96:6d:00:95:c5:
65:a9:d5:e6:07:da:4b:fb:88:a3:27:f8:61:07:a3:
2f:f8:0e:85:37:3a:0c:2e:10:ae:ea:fe:12:f4:bb:
b2:bc:63:6b:a0:09:91:69:2f:8c:aa:95:0f:59:cf:
59:8e:aa:a9:ba:00:45:e4:67:2c:eb:8f:d9:5d:c9:
f9:29:a6:ff:c8:e2:88:64:b7:f7:2d:a0:42:8e:c9:
f0:bf:b2:d9:2f:f3:45:2e:06:0c:30:a3:8a:c0:ac:
de:21:c2:b7:a4:6c:d8:68:26:0d:04:19:b4:31:b7:
fa:b8:87:6f:a8:ef:e5:62:c3:24:40:de:d3:cb:35:
d2:3f:02:49:38:8d:a0:a1:d8:91:a1:c7:11:6c:dc:
16:3d:eb:70:8e:5c:a8:cb:6c:fd:b5:e5:d0:ee:08:
4d:3b:d3:53:e4:bc:af:e4:15:d8:b9:24:ae:f8:b6:
5a:e6:8f:e2:bb:bf:4d:1b:48:9e:e3:75:6f:ab:19:
55:af:f4:d6:06:e1:30:16:4c:4c:f9:1b:a9:15:97:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:45:5F:85:D9:53:60:75:59:F1:21:16:96:0B:D3:91:48:02:C9:AF
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8b:1b:d9:5b:fa:46:be:c0:9a:7c:fd:e0:6d:41:c9:87:45:
23:ed:01:08:bf:5b:2e:68:54:d1:7e:57:c4:8e:ff:91:24:77:
d1:89:89:a1:a6:39:1b:cb:51:e8:11:e4:ce:06:f6:0f:1e:24:
19:9c:c1:3e:9d:04:11:81:23:08:ad:cf:d3:6b:e6:5d:41:77:
0f:fc:0e:32:d7:a9:13:7d:d0:6d:8c:6d:6d:9d:c7:cb:b4:4e:
06:6a:41:9c:2e:f9:86:fa:1c:a9:76:db:75:2a:44:fd:e3:65:
45:f6:d9:a7:ab:f8:04:cb:34:4c:f9:3f:52:1d:26:9f:35:8c:
e6:7f:ec:a0:32:cf:cc:52:a7:06:fa:d8:c3:25:29:88:09:60:
7a:96:96:41:05:a4:6a:eb:74:9b:0c:7f:30:30:66:4e:3f:b2:
28:79:bc:6d:26:18:d2:83:9e:ab:15:2e:86:fe:dc:cd:d2:f2:
c9:27:c2:44:66:f3:1a:fe:17:3b:c9:8e:a9:e3:e2:75:b1:29:
96:4e:50:d8:30:19:27:07:65:55:8e:d8:12:6c:c0:ec:2a:a9:
6e:79:83:3b:ba:e8:95:86:81:00:c3:8d:c2:5c:be:67:f5:a7:
db:d8:6d:3d:84:a2:d4:70:83:18:e8:ea:ef:0b:3a:be:14:1c:
ad:6f:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:48 2025 by rpki-client