Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/5kBRIytnJyvZSwOvYDew9C5v8g8.roa
File: 5kBRIytnJyvZSwOvYDew9C5v8g8.roa (raw, json)
Hash identifier: vyD1EDIJkExeSnXzO8jxWYNY6MqP1zOjQuUSZZBKDjo=
Subject key identifier: E6:40:51:23:2B:67:27:2B:D9:4B:03:AF:60:37:B0:F4:2E:6F:F2:0F
Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial: 01941F8C142443F1AD55550F0486F2E13DEC
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/5kBRIytnJyvZSwOvYDew9C5v8g8.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198236
IP address blocks: 92.243.69.0/24 maxlen: 24
2a10:f6c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:14:24:43:f1:ad:55:55:0f:04:86:f2:e1:3d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e64051232b67272bd94b03af6037b0f42e6ff20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:86:56:25:5e:30:ec:3f:94:b4:da:c3:1f:fb:
bb:a4:78:6f:2a:fe:ad:01:1f:70:b0:63:fe:93:a2:
a8:3e:2c:63:5e:93:17:51:a3:17:25:e2:28:a9:33:
2a:3f:e8:e5:54:8f:c5:6c:6b:11:53:ac:91:2b:e1:
09:de:ae:ab:9a:97:4a:20:c5:fa:67:98:2a:ed:e5:
8b:dd:0d:bd:a8:14:14:3c:68:de:b8:0c:d0:cb:7e:
84:cc:aa:9a:af:5a:79:27:5a:a0:3a:77:d9:0a:f8:
7b:9b:0d:0b:a3:32:ea:4c:c3:96:16:f1:03:33:e1:
c2:b5:94:5c:96:d4:3a:e7:88:6d:de:60:1e:0e:87:
7a:6f:f5:59:b2:23:fe:7b:06:00:a6:1c:c3:a6:fa:
b2:6a:3d:b5:3b:7b:c4:86:74:dc:2e:a4:fb:03:3f:
6c:f2:41:1a:af:0f:09:08:4b:29:c8:33:06:9e:9a:
97:1f:1f:91:92:c7:1e:f0:02:0e:42:40:89:6e:07:
74:0e:07:c7:10:c2:d2:31:cd:5a:88:27:01:7a:da:
cf:aa:63:7a:3a:4e:78:e2:8d:01:67:40:79:df:09:
71:e7:91:a8:d4:18:dd:b6:e7:99:85:fc:d1:c9:db:
cc:50:61:b6:e8:13:64:ba:b2:e0:a5:20:b1:dc:00:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:40:51:23:2B:67:27:2B:D9:4B:03:AF:60:37:B0:F4:2E:6F:F2:0F
X509v3 Authority Key Identifier:
keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/5kBRIytnJyvZSwOvYDew9C5v8g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.69.0/24
IPv6:
2a10:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:b2:89:bd:12:c7:09:46:2a:9f:aa:a0:75:71:ea:65:57:4e:
24:db:88:2a:27:eb:58:7e:9b:e9:30:b7:67:34:a1:d1:a9:af:
8c:76:cc:36:93:5e:63:4f:be:fc:64:d1:d7:dc:1c:ca:de:66:
8d:cf:cb:1c:91:88:fa:b2:dd:fd:d9:d9:e4:86:3f:b4:77:42:
22:ee:b4:ca:5a:b0:17:0a:ca:03:55:0d:f2:f1:13:ed:6d:79:
c1:8d:c1:ce:a6:67:91:66:1a:9c:b3:f6:3b:d4:46:27:90:5b:
1b:48:95:2f:77:8b:83:7c:11:a6:58:50:46:32:28:7a:d3:21:
8b:68:ca:2a:36:00:2b:b9:56:f3:03:6d:31:9b:48:bb:29:d2:
3e:54:1d:28:10:4b:0d:03:3d:fb:d9:12:84:2c:ba:c2:d7:50:
7f:a4:73:c0:44:72:9a:ef:35:54:0c:b8:c7:2d:58:a0:65:b0:
71:a4:6d:b0:88:03:81:66:51:fb:74:ab:56:e7:c2:1d:8a:d1:
36:e7:c3:59:03:95:4c:e3:15:e8:89:4a:7b:b8:d9:79:80:d1:
70:7b:e5:ff:d8:db:97:39:df:76:ad:e1:62:b9:ad:5f:d3:57:
b9:87:cd:60:2d:20:6f:80:d0:36:10:45:02:bc:9b:ec:78:1a:
c2:7c:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:32 2025 by rpki-client