Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/rIHZb_5Mc64A87xwROb5WoKPTaQ.roa
File: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (raw, json)
Hash identifier: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=
Subject key identifier: AC:81:D9:6F:FE:4C:73:AE:00:F3:BC:70:44:E6:F9:5A:82:8F:4D:A4
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 019422FBA50582D14F54A71DA310C871753A
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/rIHZb_5Mc64A87xwROb5WoKPTaQ.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62383
IP address blocks: 188.210.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a5:05:82:d1:4f:54:a7:1d:a3:10:c8:71:75:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac81d96ffe4c73ae00f3bc7044e6f95a828f4da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:88:1f:01:72:5f:55:94:6b:dc:d4:0f:98:
76:08:da:9e:73:23:cb:ec:35:a9:a1:bd:bf:7b:b5:
27:9c:8a:83:27:7b:03:9e:13:d3:e8:ba:63:c2:d6:
07:22:85:5d:0b:6a:a0:1a:15:5e:ed:f8:ee:be:69:
54:9e:6c:13:b2:d9:fa:f7:60:58:c0:23:7a:1b:d1:
6b:7c:02:b4:94:6b:87:bb:04:4c:1f:9d:6b:ad:9b:
a8:99:5b:5a:1a:cf:87:0e:1f:96:c3:b4:47:8e:f7:
22:5f:77:d9:c2:54:8d:d1:13:30:f3:f6:3c:f2:8f:
36:28:2d:c3:7c:a8:6f:36:b1:4e:32:1d:64:b3:e9:
74:dd:2b:cb:62:b1:dc:71:ea:b0:92:07:70:c2:31:
88:0d:7b:b6:4f:6e:90:98:bd:83:46:94:54:96:51:
6f:ee:d1:0a:08:b7:12:a2:ff:f1:2a:34:7a:a1:fe:
ac:13:ca:5c:70:85:9b:46:fd:d2:08:87:3c:9e:d5:
9a:77:83:c4:25:b1:80:af:87:b7:71:ed:25:83:de:
fd:f7:f9:b4:d6:f3:a9:8a:ab:ae:9c:52:21:fc:73:
41:96:9b:df:69:be:cb:12:16:e6:44:67:6e:fc:a9:
42:e1:80:7b:43:9d:de:18:38:c6:7f:9a:34:bd:83:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:81:D9:6F:FE:4C:73:AE:00:F3:BC:70:44:E6:F9:5A:82:8F:4D:A4
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/rIHZb_5Mc64A87xwROb5WoKPTaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.210.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:80:c2:af:7b:ab:11:ba:6b:76:c8:67:18:fc:0c:5b:e6:33:
60:7b:d0:df:b8:47:84:d1:e9:54:23:8e:fa:cd:f5:fd:3d:c5:
00:96:7e:89:7f:ad:68:37:7b:41:c5:11:4c:b4:29:c6:f7:1c:
c9:a3:a5:cc:e7:9e:c9:69:4c:da:eb:e9:32:c6:e4:bd:14:e7:
49:8b:2f:07:31:9c:2b:b1:63:80:a5:b4:08:fe:bf:7e:98:61:
d0:4d:bb:9f:3a:fe:54:01:3f:84:a9:61:be:9a:56:15:4a:31:
8e:f4:e6:fb:96:e2:a4:24:ed:52:fc:59:93:fc:09:0b:9c:e7:
c6:e5:ca:10:c6:ac:b0:7e:79:be:a9:6c:78:a2:62:9f:c1:9f:
99:5a:bf:ac:d0:20:ad:e8:93:39:e2:c2:54:4f:a0:0e:b2:aa:
8d:fc:2b:d3:06:a2:78:49:b7:59:9c:7d:fa:4b:b7:c1:52:66:
bd:41:6c:9f:4a:2f:63:0c:25:4b:8d:df:94:de:9c:13:39:ec:
a2:51:59:89:2f:57:14:73:5e:c6:6c:74:16:e1:90:1a:cb:ab:
a9:95:b0:d8:a6:d8:35:20:d5:9d:62:54:52:00:9c:d2:2b:83:
53:70:76:c8:4f:28:16:d1:34:28:e8:3c:5f:77:dd:6c:07:8c:
49:38:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:44 2025 by rpki-client