Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa
File: CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa (raw, json)
Hash identifier: 1bONPKFzyDS/3APoxZR25vqyDAsgCQifSMXpTfL4F0s=
Subject key identifier: 08:1C:7E:15:E2:63:EF:3E:28:4E:B6:62:56:66:3E:31:B1:E7:CC:CE
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 019421B1D701DCB069DC59988EEEE11437F6
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51268
IP address blocks: 92.63.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d7:01:dc:b0:69:dc:59:98:8e:ee:e1:14:37:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=081c7e15e263ef3e284eb66256663e31b1e7ccce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:43:27:96:13:1c:bb:b8:f8:d0:b7:78:64:
4f:ff:bf:0c:de:c2:82:6c:6c:47:17:47:29:ce:8b:
bb:95:e5:42:43:4c:47:9a:b2:a9:28:70:43:63:4c:
3c:47:87:26:ab:87:6d:cf:0a:8e:7e:48:64:75:b0:
c2:4f:8e:13:51:05:f9:99:5f:f9:79:49:e5:52:0f:
ae:a9:7b:c4:28:ac:f8:11:6c:dc:4e:fa:21:15:ca:
4e:27:46:18:d2:0f:1f:af:7e:3d:87:f3:1c:21:ee:
e3:ea:c5:cc:8a:ad:47:23:f7:cb:45:fa:6d:2b:9d:
d5:dc:c9:ea:89:39:92:28:12:39:1c:98:a9:37:2f:
64:0e:de:fa:81:31:5f:f7:4c:fd:ec:65:77:cb:32:
b0:65:02:6b:2a:eb:e6:75:2f:35:e5:74:ca:25:ee:
74:50:c5:ea:a0:52:13:4c:a0:a4:2c:ae:70:1a:fa:
e1:92:67:4c:e8:62:4b:64:c0:03:0c:b1:4c:8b:d0:
51:62:18:54:09:92:f5:2e:76:0e:10:1b:44:40:57:
8d:e8:72:4a:04:f5:71:14:b9:67:4f:ae:7c:44:d3:
4c:43:dd:4d:63:a9:94:73:77:0d:d5:a0:cd:91:67:
57:b1:20:01:2a:ba:4f:5c:fe:18:a5:a9:21:ca:4b:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:7E:15:E2:63:EF:3E:28:4E:B6:62:56:66:3E:31:B1:E7:CC:CE
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.94.0/24
Signature Algorithm: sha256WithRSAEncryption
06:02:5a:55:9e:e2:7a:ec:e0:d5:ea:91:76:47:e3:e1:78:bc:
69:a1:ff:6c:76:f7:9c:d7:58:61:32:67:41:05:5f:56:e3:8e:
00:6d:23:b4:29:19:61:86:96:08:ed:44:b4:36:69:fa:21:6e:
0b:81:80:a6:bb:57:ac:1c:06:3c:93:fb:46:be:96:6c:a9:f1:
40:4b:f8:ca:4d:f6:5a:bd:da:88:0f:c1:59:47:37:6c:ba:4e:
39:a0:14:6b:0f:fb:f5:16:15:65:28:ad:e9:0d:2a:36:44:01:
03:23:6f:48:08:01:05:61:53:a5:30:d7:20:50:ef:d5:cf:35:
a8:cc:41:e9:19:84:c1:54:f6:ea:55:85:a1:19:b7:9c:a6:13:
26:6f:32:28:1a:16:f4:ce:dc:de:58:84:2b:3e:c8:db:13:18:
52:4b:43:b4:f2:e4:3e:25:b9:ad:a5:be:ba:9b:98:28:d7:ec:
b9:9c:47:0e:64:0a:64:4b:6b:f1:e0:42:f1:d9:89:0e:24:e0:
49:96:0a:c1:2e:50:7e:ae:d3:6b:f3:f3:5c:6b:94:65:d5:1d:
b4:85:4a:f8:44:41:c6:b5:22:9b:3f:79:ab:5f:85:ee:4d:ef:
ee:bb:40:ec:e1:52:2c:2c:1d:59:52:7b:b2:a7:20:24:71:8f:
2f:7b:cf:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsdcB3LBp3FmYju7hFDf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTA0ZTRmN2Q5ZjM4ZDhlMjJhMmQzMmJlMDE5MDMxOTMw
YzFhNDcwHhcNMjUwMTAxMTE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODFjN2UxNWUyNjNlZjNlMjg0ZWI2NjI1NjY2M2UzMWIxZTdjY2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWJDJ5YTHLu4+NC3eGRP/78M3sKC
bGxHF0cpzou7leVCQ0xHmrKpKHBDY0w8R4cmq4dtzwqOfkhkdbDCT44TUQX5mV/5
eUnlUg+uqXvEKKz4EWzcTvohFcpOJ0YY0g8fr349h/McIe7j6sXMiq1HI/fLRfpt
K53V3MnqiTmSKBI5HJipNy9kDt76gTFf90z97GV3yzKwZQJrKuvmdS815XTKJe50
UMXqoFITTKCkLK5wGvrhkmdM6GJLZMADDLFMi9BRYhhUCZL1LnYOEBtEQFeN6HJK
BPVxFLlnT658RNNMQ91NY6mUc3cN1aDNkWdXsSABKrpPXP4YpakhyksKvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgcfhXiY+8+KE62YlZmPjGx58zOMB8GA1UdIwQY
MBaAFGYQTk99nzjY4iotMr4BkDGTDBpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQt
NDc0NzJlZDNiZWNiLzEvQ0J4LUZlSmo3ejRvVHJaaVZtWS1NYkhuek00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQtNDc0NzJlZDNiZWNi
LzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD9eMA0G
CSqGSIb3DQEBCwUAA4IBAQAGAlpVnuJ67ODV6pF2R+PheLxpof9sdvec11hhMmdB
BV9W444AbSO0KRlhhpYI7US0Nmn6IW4LgYCmu1esHAY8k/tGvpZsqfFAS/jKTfZa
vdqID8FZRzdsuk45oBRrD/v1FhVlKK3pDSo2RAEDI29ICAEFYVOlMNcgUO/VzzWo
zEHpGYTBVPbqVYWhGbecphMmbzIoGhb0ztzeWIQrPsjbExhSS0O08uQ+Jbmtpb66
m5go1+y5nEcOZApkS2vx4ELx2YkOJOBJlgrBLlB+rtNr8/Nca5Rl1R20hUr4REHG
tSKbP3mrX4XuTe/uu0Ds4VIsLB1ZUnuypyAkcY8ve8/k
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:33 2025 by rpki-client