Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/t92LD4JF1zzqhKIJX4gc4PGoZiU.roa
File: t92LD4JF1zzqhKIJX4gc4PGoZiU.roa (raw, json)
Hash identifier: QB9NxoH5XmIj8//Y6YIrgAvA3ml34TrM1hbyfS/v07g=
Subject key identifier: B7:DD:8B:0F:82:45:D7:3C:EA:84:A2:09:5F:88:1C:E0:F1:A8:66:25
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 01942444FEBB50D6839D6F5DC9B802D68D7D
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/t92LD4JF1zzqhKIJX4gc4PGoZiU.roa
Signing time: Wed 01 Jan 2025 23:48:08 +0000
ROA not before: Wed 01 Jan 2025 23:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21159
IP address blocks: 185.182.80.0/22 maxlen: 22
2a0a:e680::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fe:bb:50:d6:83:9d:6f:5d:c9:b8:02:d6:8d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Jan 1 23:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7dd8b0f8245d73cea84a2095f881ce0f1a86625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:89:6d:b9:b4:ec:78:62:e2:0c:60:9d:5c:
82:37:92:ed:81:5e:80:f1:b6:bb:2a:20:c4:7b:5e:
86:c8:b6:fc:93:16:dd:53:27:41:b3:4a:22:2d:d2:
4d:ef:ac:35:a4:d4:77:de:d8:ef:c9:c0:0c:81:fd:
5c:fb:c7:76:a5:e6:31:05:e7:e5:d0:e0:ad:e4:10:
04:71:31:9d:7c:22:bb:19:2a:92:a0:2b:02:02:ce:
34:d2:9d:0a:7c:bd:6a:89:53:db:15:97:a7:e6:b0:
fa:8f:2a:64:23:14:f4:7d:35:98:0a:ed:92:72:76:
05:18:47:00:a2:2a:c9:9c:fe:01:94:5e:de:c4:a6:
18:8e:e2:68:e2:b9:7f:82:dc:d5:2f:e0:f9:3e:73:
19:25:45:31:f2:19:c8:79:07:49:af:36:0f:36:82:
e9:e1:ec:aa:9b:3d:9c:e1:83:24:a7:fa:3b:a4:44:
a9:1a:a7:92:f7:c1:97:25:64:b0:4c:b3:a0:54:0e:
c4:ac:79:59:74:19:c4:79:26:45:3b:8c:eb:53:ae:
11:3d:35:62:c0:3f:76:51:bd:94:82:ad:ce:02:89:
5e:c5:9a:f1:53:46:10:2c:01:8d:08:c5:8d:db:c4:
1e:24:63:44:45:72:f1:c1:4a:bc:13:4e:83:7b:c7:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DD:8B:0F:82:45:D7:3C:EA:84:A2:09:5F:88:1C:E0:F1:A8:66:25
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/t92LD4JF1zzqhKIJX4gc4PGoZiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.80.0/22
IPv6:
2a0a:e680::/29
Signature Algorithm: sha256WithRSAEncryption
75:01:e6:0d:de:25:ff:c6:1c:a0:72:92:ac:4e:e3:d2:de:8f:
05:ef:70:a0:85:dd:14:3f:44:7a:07:77:3d:ce:27:0f:4b:02:
14:9e:74:fd:4b:6b:63:7c:7b:65:d4:44:14:35:d3:f6:1f:ed:
b7:4f:63:cd:f1:51:b8:ca:d5:9a:f8:8f:db:69:b9:cf:fe:41:
e6:a8:c3:7e:d4:a9:b7:d9:1f:4e:47:f9:4c:d5:8d:8c:40:1f:
86:03:52:af:f6:9d:d3:c7:71:c9:37:6e:b2:ae:e7:54:56:58:
05:f7:e2:e2:be:a3:2c:93:83:e1:fa:2d:ee:3c:22:6d:e9:c0:
2d:30:1f:8b:e8:b8:a9:81:07:a3:3e:6d:eb:06:08:fc:e1:fd:
a4:ae:5f:8d:76:d9:e5:ca:0a:9b:2e:af:3f:cb:15:83:22:5f:
9b:3f:36:95:61:46:40:ba:60:12:1d:63:b2:44:50:56:82:eb:
a5:cd:36:33:50:bd:e7:89:6a:f9:df:88:e1:83:cf:7f:4a:3e:
34:26:1d:45:76:41:e1:b7:3c:86:d5:6a:e8:7f:b2:fb:5b:79:
51:b0:a3:40:04:ee:32:70:20:8d:39:ad:5a:d5:d8:c3:62:ed:
46:e8:45:6b:63:6f:3f:1f:37:32:43:56:ac:ed:c5:44:a1:1a:
9b:3a:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:58 2025 by rpki-client