Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/zCcp7j-FTR7h6zyRr__6kmhwg_M.roa
File: zCcp7j-FTR7h6zyRr__6kmhwg_M.roa (raw, json)
Hash identifier: ep4Wt4XOrawaaEnM0c8/+z8Ud6DA2WUnVWDUZ1tn3mc=
Subject key identifier: CC:27:29:EE:3F:85:4D:1E:E1:EB:3C:91:AF:FF:FA:92:68:70:83:F3
Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial: 0194266B232D83F21EF0FFBD11A35507E20E
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/zCcp7j-FTR7h6zyRr__6kmhwg_M.roa
Signing time: Thu 02 Jan 2025 09:49:03 +0000
ROA not before: Thu 02 Jan 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208134
IP address blocks: 45.92.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:23:2d:83:f2:1e:f0:ff:bd:11:a3:55:07:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Validity
Not Before: Jan 2 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc2729ee3f854d1ee1eb3c91affffa92687083f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:12:c3:6a:ab:ab:f2:74:c0:3d:2e:21:13:
17:9c:18:04:58:dc:dd:f9:a7:a0:5c:20:e1:c3:1c:
2b:5b:81:43:e1:3a:ac:62:b9:44:ba:72:c3:2e:4c:
a7:fc:8a:cf:46:fd:c0:a5:24:42:0d:e5:6b:a5:4e:
01:e2:2b:47:33:f9:64:ed:32:9f:95:ec:cc:e6:b3:
4f:aa:2d:44:13:6a:43:b8:09:a9:26:17:31:ff:03:
77:e0:4c:5f:f3:5c:2f:6a:06:4a:f8:03:94:67:95:
f5:66:d6:93:ec:c2:1d:93:15:61:a6:c5:dc:6b:da:
3f:b5:35:26:0e:50:82:26:1e:ab:5f:73:b8:eb:21:
48:92:96:97:d5:65:17:72:f1:d8:0e:74:25:dc:dc:
0c:4c:50:83:3b:b8:0a:94:69:30:67:ac:f7:6e:3a:
e6:a1:2a:4c:d3:b1:8e:bc:10:73:54:25:61:03:9f:
6b:bf:56:38:83:83:81:5e:21:00:7a:7b:d9:09:88:
d6:f3:20:80:59:ad:21:88:f2:24:18:e2:73:fa:83:
b6:39:e4:e9:3c:e7:f4:f6:1b:c9:12:16:0e:25:10:
2f:34:21:f6:57:b6:52:45:4b:5b:2b:db:4a:87:e4:
a7:e2:9d:ab:35:df:aa:b1:2b:da:01:c2:fb:c0:91:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:27:29:EE:3F:85:4D:1E:E1:EB:3C:91:AF:FF:FA:92:68:70:83:F3
X509v3 Authority Key Identifier:
keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/zCcp7j-FTR7h6zyRr__6kmhwg_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.136.0/22
Signature Algorithm: sha256WithRSAEncryption
75:e8:42:58:37:d8:21:8f:96:85:c1:13:ab:fe:29:27:18:26:
b8:7f:ff:45:3b:b2:ab:ae:14:ec:97:e4:39:62:1d:a1:25:a1:
a8:ea:62:26:25:99:10:9d:19:d4:6d:2c:37:3b:be:4a:aa:a0:
d6:48:ed:c1:70:d4:b7:69:fe:0a:c3:e5:6d:3e:4f:34:7f:93:
3c:44:40:6c:06:f3:18:d2:7a:75:bf:fb:60:5e:99:ea:55:54:
2f:8c:78:64:14:92:df:b7:90:e2:56:c9:19:88:c4:52:9b:e0:
5f:0d:69:fb:39:64:04:e8:10:e0:bc:9c:bd:64:2d:76:f5:21:
d7:50:0c:a9:98:fc:62:18:2b:c9:f4:32:f9:45:8d:49:32:35:
33:c0:cb:59:5c:e2:d7:33:08:ca:3a:d3:fc:a8:ae:e8:36:06:
9c:cc:8a:14:37:4f:e8:8f:b2:20:78:38:06:15:c1:98:ea:04:
4d:85:47:1c:be:5f:3c:9d:e2:7b:ed:5b:8d:e7:7c:82:dd:51:
59:04:5f:fc:7d:b8:f0:56:53:78:64:3e:3d:8e:ea:42:cd:1a:
31:0a:40:8a:94:c2:bd:30:a7:b8:f6:b7:f6:cd:fe:eb:5b:3d:
cd:a7:39:23:f6:42:3d:40:f6:5c:01:0d:6a:77:48:3d:7f:e2:
d7:77:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:19:32 2025 by rpki-client