Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/92eglBFm4UMAVtPH9IkG9URQIWk.roa
File: 92eglBFm4UMAVtPH9IkG9URQIWk.roa (raw, json)
Hash identifier: bpICQo3Md95UoWjh41NuV2joPCJhpEI/T4pNh3i8ITQ=
Subject key identifier: F7:67:A0:94:11:66:E1:43:00:56:D3:C7:F4:89:06:F5:44:50:21:69
Certificate issuer: /CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
Certificate serial: 019420D631A1568486A81D7372F181BACC15
Authority key identifier: 82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/92eglBFm4UMAVtPH9IkG9URQIWk.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39022
IP address blocks: 195.66.134.0/23 maxlen: 23
2001:67c:2464::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:31:a1:56:84:86:a8:1d:73:72:f1:81:ba:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f767a0941166e1430056d3c7f48906f544502169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:6a:25:fb:3c:ae:6d:7d:e2:ff:12:e0:b3:
76:02:a1:c6:43:46:b0:67:4e:83:23:16:05:54:92:
ae:58:ae:9b:63:9d:6e:c6:51:a9:d2:e4:a5:00:98:
51:66:0d:1e:a5:24:48:65:c0:c2:33:30:b4:c1:a0:
6c:90:02:bf:d0:8f:a0:c8:31:ff:90:32:97:07:0b:
70:ba:8b:0f:75:6f:60:f6:57:fb:93:20:36:ba:c8:
d9:d3:0d:db:9a:56:68:85:4a:24:88:e6:25:af:74:
a6:63:e5:b6:26:66:4c:16:65:b7:3b:b3:d8:8d:8a:
d4:27:c7:6f:d1:8a:d7:f3:91:32:20:33:5e:ed:cf:
cd:f2:12:fb:0e:91:af:14:a5:84:7e:24:a0:7e:37:
dc:37:8f:c4:45:d9:d4:39:0a:aa:f5:84:e3:b5:f3:
06:c5:ad:9b:59:8b:f3:06:b3:c3:1f:32:85:df:e1:
e6:58:9c:55:ff:35:2e:02:c9:98:b0:ad:3e:0f:31:
46:70:36:b3:0d:ec:14:3d:73:8e:b5:ca:3f:fb:e8:
10:53:01:4e:7b:b0:78:ed:04:f7:52:6f:d1:e6:7d:
af:3a:df:f0:90:b0:f9:00:a6:78:b1:3c:da:4e:be:
05:a4:0a:0e:3f:66:bd:2b:55:fb:99:a3:db:ee:8d:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:67:A0:94:11:66:E1:43:00:56:D3:C7:F4:89:06:F5:44:50:21:69
X509v3 Authority Key Identifier:
keyid:82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/92eglBFm4UMAVtPH9IkG9URQIWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.134.0/23
IPv6:
2001:67c:2464::/48
Signature Algorithm: sha256WithRSAEncryption
48:b6:08:a3:51:54:f8:a6:f6:c6:b8:e6:fe:f4:a8:d1:14:40:
15:ca:2e:b4:b0:33:ef:ef:f3:40:08:ac:8d:06:17:c2:ec:7e:
15:9b:88:f3:1d:0a:67:93:4d:c4:f8:ff:13:f4:74:51:4a:e3:
5f:5b:58:a5:f9:d0:b6:e4:85:3e:91:25:0b:5c:6a:91:7d:01:
7f:14:75:83:4a:f0:3b:1f:21:3d:6a:7b:6a:0e:76:c1:6f:dc:
99:23:ed:ac:cd:de:73:be:18:69:fd:0c:84:cd:a4:4c:a7:20:
69:5a:10:69:9c:4b:df:27:65:f3:6c:1b:1d:3d:5e:bf:13:39:
58:be:b1:49:b7:4e:fe:8e:a5:72:68:c3:09:8d:04:cb:e8:fa:
1d:93:8a:23:57:9d:5b:85:bd:72:b3:81:b8:9b:88:22:5f:37:
ce:b2:92:7e:f6:c7:2b:84:50:c5:35:a7:e3:86:b2:8d:ad:7d:
77:66:d8:91:a1:8a:b5:ff:a8:62:7e:21:a8:07:2f:82:c3:d1:
fd:48:ce:82:54:95:aa:a4:cc:86:67:3e:6b:78:12:02:2d:6f:
b8:17:ce:23:75:ae:a7:fc:7f:5d:ac:2c:66:a2:ce:80:93:55:
b2:19:0c:47:99:de:67:f8:37:69:88:1b:c3:d0:25:47:13:4f:
0c:f8:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:05 2025 by rpki-client