Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/n2q3FitcqDO_c2NUyqKB-dDvksE.roa
File: n2q3FitcqDO_c2NUyqKB-dDvksE.roa (raw, json)
Hash identifier: l/3zip7whQB/hB9QJijqYPsVoPjbHuHl7qhVrx0amJI=
Subject key identifier: 9F:6A:B7:16:2B:5C:A8:33:BF:73:63:54:CA:A2:81:F9:D0:EF:92:C1
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 0194206821F329F23762607BBDB64DAA220C
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/n2q3FitcqDO_c2NUyqKB-dDvksE.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 92.249.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:21:f3:29:f2:37:62:60:7b:bd:b6:4d:aa:22:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f6ab7162b5ca833bf736354caa281f9d0ef92c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:21:15:a9:fa:cc:d1:ba:3b:bd:93:53:3a:
2d:c6:54:89:45:d5:85:82:9f:05:82:fb:8f:7e:0a:
b1:0a:cd:18:e5:12:8c:47:05:03:57:6c:f0:88:c5:
3d:a2:5e:4d:9a:34:4d:52:3f:af:7a:6a:12:c8:71:
43:09:c3:6a:c5:7b:2e:ad:ca:41:dc:88:fa:85:a5:
6b:30:bf:0f:89:90:52:f3:83:fc:7f:6f:b7:aa:d7:
1b:a0:e3:66:76:c7:c6:66:a4:32:f2:9c:dd:0c:eb:
f8:4b:4f:73:ee:a6:94:b0:62:47:d2:f1:9d:54:61:
a6:24:14:b1:c8:06:30:b3:d1:00:c4:85:a0:46:2f:
9e:89:db:8d:d2:54:d5:4c:34:2d:58:03:22:6c:29:
18:e4:ba:20:9e:63:f8:a4:2e:63:aa:90:f7:27:3a:
15:d5:e8:4b:98:6a:c0:52:b2:52:21:94:90:2d:9d:
d4:c1:08:26:5e:5a:69:ec:51:dd:85:d4:a7:cc:e7:
ab:99:c0:0c:1d:9d:42:47:d7:47:98:6f:85:08:bd:
15:82:eb:db:b4:55:53:8f:c0:9f:dd:0a:a2:2e:9f:
da:8d:c1:08:f5:f8:ad:26:96:d1:23:3d:87:ae:2c:
4f:d7:3b:78:1f:0b:2a:40:9d:d8:b7:8d:4f:15:61:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:B7:16:2B:5C:A8:33:BF:73:63:54:CA:A2:81:F9:D0:EF:92:C1
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/n2q3FitcqDO_c2NUyqKB-dDvksE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.32.0/22
Signature Algorithm: sha256WithRSAEncryption
50:a6:d4:e9:d3:22:bf:ca:15:b9:9b:f3:10:7f:0b:4b:12:3e:
59:26:68:18:ee:60:c7:9a:65:30:5f:7f:75:4c:ed:5d:0d:4a:
89:50:ee:ef:d8:8f:77:d3:1a:bb:82:30:de:b3:8b:4b:6d:ef:
9b:44:3e:f0:79:b8:d4:bf:66:db:2b:84:b1:2b:22:46:af:ce:
16:82:88:37:ac:84:8e:52:8c:27:89:9f:20:48:0f:9c:7d:61:
9d:53:03:2d:bc:bf:86:f2:a7:b3:4d:33:4b:ea:b7:48:4a:dc:
6e:a7:1e:02:dd:57:7e:81:7f:0e:87:a6:18:9c:0e:a7:7b:ff:
1b:6c:a1:d9:f6:0c:9f:25:da:ec:43:c4:df:f8:2a:36:b5:87:
6b:66:b0:2c:af:1f:f1:46:79:fc:98:77:e1:2c:1d:32:37:98:
17:75:d5:4c:b7:d3:99:bd:21:fc:92:ae:ed:dd:24:0e:ce:c8:
da:39:c9:10:bc:59:b2:2c:a8:a5:f5:8d:56:78:b3:2c:fa:4d:
b8:44:52:0d:3e:2a:16:3d:aa:79:f6:f0:8c:68:6c:44:17:75:
78:ad:41:ab:5e:e1:e5:d2:b6:5a:66:9d:b2:83:98:df:b7:4e:
5c:7d:58:12:0c:8a:e6:75:25:10:0b:d7:28:9d:a8:fe:93:53:
54:82:cf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:38 2025 by rpki-client