Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/AoMGCD1NI5s-eGt0-z7rw49oJbw.roa
File: AoMGCD1NI5s-eGt0-z7rw49oJbw.roa (raw, json)
Hash identifier: hhPDE0oxbmEOPcozilbiW+/B+/CW258DeR4/pmj6Lb8=
Subject key identifier: 02:83:06:08:3D:4D:23:9B:3E:78:6B:74:FB:3E:EB:C3:8F:68:25:BC
Certificate issuer: /CN=de6ec345b7f36ecec256e8c4757e50de3fede7d1
Certificate serial: 1AFA5C74
Authority key identifier: DE:6E:C3:45:B7:F3:6E:CE:C2:56:E8:C4:75:7E:50:DE:3F:ED:E7:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7DRbfzbs7CVujEdX5Q3j_t59E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/AoMGCD1NI5s-eGt0-z7rw49oJbw.roa
Signing time: Sat 01 Jan 2022 13:56:45 +0000
ROA not before: Sat 01 Jan 2022 13:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5578
IP address blocks: 92.60.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452615284 (0x1afa5c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ec345b7f36ecec256e8c4757e50de3fede7d1
Validity
Not Before: Jan 1 13:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=028306083d4d239b3e786b74fb3eebc38f6825bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:5c:b1:e2:c9:e8:4e:a8:cd:00:88:f6:67:
c2:c0:b1:75:3c:6a:9b:2b:d4:e7:57:ea:1d:ec:9f:
04:61:0c:76:35:7b:b5:ab:28:bb:e8:da:fd:a6:35:
0e:c9:b1:58:c1:1a:c9:59:4b:b3:06:52:41:8f:d2:
3d:99:46:88:15:84:1a:f9:f3:e0:7f:bd:57:c4:10:
07:13:97:a6:b5:84:83:aa:7f:f3:7a:88:ea:d0:dc:
5d:09:bd:c7:fa:38:a3:28:43:6d:ef:32:0a:80:d8:
62:cb:23:ba:b5:f1:b4:3e:d3:20:9c:bb:c2:18:20:
cc:67:69:3d:e9:68:fa:5e:a0:b6:84:e4:01:13:55:
13:fd:45:68:94:60:9c:70:87:93:6d:22:1e:1a:f1:
f7:63:61:a0:0a:f5:0b:31:88:65:3d:57:a1:d5:71:
a1:c0:f3:7c:ea:60:95:6d:5d:09:b3:a0:e7:76:88:
c6:2a:5e:3f:fa:f6:4e:38:ba:07:92:84:42:b5:88:
3c:b6:61:e4:4e:54:d7:b0:d3:9b:dd:3f:a1:77:bb:
50:2d:8b:70:5f:82:40:cd:e5:51:1c:36:79:9b:71:
50:ba:d3:ba:d2:cd:32:da:5e:db:87:0a:01:c9:61:
30:a2:f4:f8:1e:9d:af:e7:ac:69:31:33:ce:bf:6b:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:83:06:08:3D:4D:23:9B:3E:78:6B:74:FB:3E:EB:C3:8F:68:25:BC
X509v3 Authority Key Identifier:
keyid:DE:6E:C3:45:B7:F3:6E:CE:C2:56:E8:C4:75:7E:50:DE:3F:ED:E7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7DRbfzbs7CVujEdX5Q3j_t59E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/AoMGCD1NI5s-eGt0-z7rw49oJbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/3m7DRbfzbs7CVujEdX5Q3j_t59E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:50:c9:35:fb:b0:f4:c4:41:04:2c:e7:8f:75:ca:60:6b:87:
4a:59:4b:e6:07:aa:5b:28:e2:d7:1c:4b:88:48:d6:57:ad:f0:
cc:59:c9:b9:dc:9e:56:1a:70:5b:2a:3f:5d:77:c6:4c:89:af:
40:94:ab:48:66:55:37:c6:81:aa:c6:78:4d:f8:bf:7d:db:69:
46:46:be:74:6b:93:3f:65:16:7a:e1:e8:50:55:ef:b4:a8:6e:
a3:b2:e0:ad:2e:ba:71:d2:14:17:21:83:47:8f:8b:ef:ec:b7:
7d:3e:62:e1:91:35:67:40:8f:ed:5c:8b:d0:15:1f:f5:16:27:
1d:85:89:fc:1d:d9:d9:db:54:3e:0a:e1:c5:2f:5d:de:2a:28:
b9:41:b5:eb:b6:b0:3f:31:7c:6e:1e:bf:74:72:b7:80:a6:a0:
3c:2a:da:dd:50:dc:49:2e:22:69:f1:c6:a4:aa:65:18:e5:86:
1d:96:b8:f9:6f:ea:c2:54:39:ff:6d:2c:2d:4b:c5:10:22:7c:
c8:46:75:9f:fb:89:21:19:4d:ec:b1:65:5c:57:73:75:52:c2:
a8:a2:11:23:f3:f5:0c:91:ba:fb:7a:ed:77:52:98:e5:b3:35:
9d:69:db:bd:cd:75:19:6d:12:0c:3b:cb:2c:84:39:52:47:82:
ff:7b:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:03 2025 by rpki-client