Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/mz3469_dtACZeYaYh44O_260cfQ.roa
File: mz3469_dtACZeYaYh44O_260cfQ.roa (raw, json)
Hash identifier: h4u8i1vrzDz7y0aSq9vGoATyobilirV5QcjBH5QYLLw=
Subject key identifier: 9B:3D:F8:EB:DF:DD:B4:00:99:79:86:98:87:8E:0E:FF:6E:B4:71:F4
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 019420684002C18FA8DD1B806A9CE2CB7698
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/mz3469_dtACZeYaYh44O_260cfQ.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209255
IP address blocks: 92.119.52.0/22 maxlen: 22
92.119.54.0/24 maxlen: 24
2a09:b640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:40:02:c1:8f:a8:dd:1b:80:6a:9c:e2:cb:76:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b3df8ebdfddb40099798698878e0eff6eb471f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:0b:8f:de:c1:4f:08:ea:d1:52:64:42:17:
11:1e:ec:4c:93:23:2b:05:ee:82:4f:66:8f:ca:43:
a3:f5:c3:26:cc:d5:8b:51:f5:50:35:50:8f:27:5c:
84:a7:1f:ff:a6:1c:57:29:84:10:6b:b0:ae:d0:96:
28:68:a0:a5:5d:d1:d1:f5:0b:2f:da:c1:ed:53:6e:
67:79:57:f5:7b:88:6d:81:c0:a1:aa:71:0c:1c:3b:
5f:03:0f:55:c2:57:db:f3:f4:46:08:4d:9e:72:e7:
aa:e9:bd:5d:bf:91:5e:b0:1a:8d:23:fe:37:96:75:
58:5f:14:45:1b:81:a3:d5:8a:81:48:09:2b:6b:4f:
84:f1:f9:c1:a3:d6:b7:87:07:48:e8:97:ea:ba:58:
ff:c2:43:7f:65:11:f9:28:5d:cd:7f:91:ed:0e:46:
0b:9e:b9:e6:58:06:1c:3d:83:66:24:56:70:70:63:
53:32:c9:d4:f0:fe:26:c9:58:44:c2:d0:9e:34:27:
a9:9b:c4:c6:d9:f9:e3:90:8c:99:3f:43:7b:7c:31:
6a:cb:a8:a4:a9:fd:6f:6d:33:ad:15:e7:57:ff:61:
42:0e:4f:77:a4:7d:35:b5:a6:25:99:08:51:17:c1:
d9:ec:bb:94:6b:50:62:32:1b:c7:8f:d6:fd:5b:a4:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3D:F8:EB:DF:DD:B4:00:99:79:86:98:87:8E:0E:FF:6E:B4:71:F4
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/mz3469_dtACZeYaYh44O_260cfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.52.0/22
IPv6:
2a09:b640::/29
Signature Algorithm: sha256WithRSAEncryption
6b:3d:8c:30:a3:91:26:d9:ff:fe:f9:d6:45:a4:bf:3d:16:72:
03:9f:98:18:ca:58:0c:f8:a9:b4:d4:38:8b:5f:5b:d3:83:55:
8e:58:12:ab:05:bf:1e:66:f3:7f:37:bf:2e:57:67:03:11:00:
dd:7a:0c:91:67:53:6a:43:eb:0f:84:c9:64:90:f5:e2:89:a0:
df:4f:5f:2b:0f:15:a1:ca:29:37:2b:81:f1:c4:6a:85:c5:fe:
b9:da:97:7f:92:69:fa:ee:65:bf:06:db:ea:07:e0:1b:57:87:
38:65:0f:08:fe:0f:1c:ce:5a:a1:a2:79:28:45:b8:d2:04:17:
f3:24:3f:ca:82:76:d8:d6:7b:44:09:ec:eb:a7:54:f9:93:9a:
e6:55:32:08:fc:0c:cc:15:2c:03:16:d5:87:1e:c1:f4:7c:c1:
03:a9:26:b0:6d:4a:f3:ff:fe:09:95:2b:04:f6:54:1b:cc:0f:
42:37:ec:ae:8d:69:b9:79:a9:f0:62:6d:80:9a:35:59:ef:79:
ca:da:fa:8d:e1:ab:2d:3e:4e:fd:e5:a4:65:23:03:62:6e:c9:
d5:e4:b7:cd:1c:9d:70:fd:4f:6d:66:80:17:7f:ad:b1:12:55:
a4:57:00:78:92:d1:22:78:da:d6:bd:0d:cc:0c:b5:9f:ba:7d:
f3:4b:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:02:00 2025 by rpki-client