Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Dj0kET5462zlk1CnkGjxshKIi0w.roa
File: Dj0kET5462zlk1CnkGjxshKIi0w.roa (raw, json)
Hash identifier: 9YMNEO0myTX5sl0PPRnWTItF9Ybgkfp59o0yX4nCfs0=
Subject key identifier: 0E:3D:24:11:3E:78:EB:6C:E5:93:50:A7:90:68:F1:B2:12:88:8B:4C
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01946EBFBAA7DA4A2741B4DCB59E74B3B8C9
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Dj0kET5462zlk1CnkGjxshKIi0w.roa
Signing time: Thu 16 Jan 2025 10:54:06 +0000
ROA not before: Thu 16 Jan 2025 10:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.53.160.0/20 maxlen: 24
92.53.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:bf:ba:a7:da:4a:27:41:b4:dc:b5:9e:74:b3:b8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 16 10:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e3d24113e78eb6ce59350a79068f1b212888b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:64:bf:38:ee:cc:11:ff:49:5d:9f:62:84:
ea:58:f5:d3:66:bb:f0:be:e9:98:6e:35:34:c0:ff:
b1:49:68:3e:9e:ae:7b:c3:13:ea:b4:e2:fd:f7:c7:
d8:c4:40:89:82:77:d5:59:a2:4f:ab:1c:f5:aa:2f:
79:aa:fa:6b:47:7b:1c:31:07:13:01:4d:97:51:6b:
7f:d5:84:b5:82:14:81:7f:5c:4b:f4:97:b5:13:30:
48:00:5e:31:5e:c1:ea:e5:cb:a5:83:8c:66:bd:f2:
30:a2:b2:9f:0c:09:92:f8:cd:c9:76:14:60:54:8f:
5c:88:27:08:fc:d4:d4:4f:24:8c:e9:a2:2e:13:70:
22:9c:3e:33:38:6a:0b:ce:ff:e9:be:6d:41:55:fc:
1a:02:9d:e7:70:4a:2c:2f:42:ca:bc:e1:9c:6c:22:
b0:ce:b9:fc:37:34:37:c7:f3:9d:da:ce:c4:27:22:
8a:ae:4f:41:be:ff:29:93:16:0a:a0:05:49:eb:62:
d9:52:6f:49:40:5d:0c:54:07:cd:b9:e0:92:18:6b:
45:04:fe:c4:a3:5c:7c:03:38:be:3f:f3:19:c8:25:
c1:1b:8e:9e:c4:2b:99:75:08:8f:3d:c3:52:36:3d:
10:4f:70:0c:38:1f:9e:f2:f2:70:c7:4a:fe:77:5c:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:24:11:3E:78:EB:6C:E5:93:50:A7:90:68:F1:B2:12:88:8B:4C
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Dj0kET5462zlk1CnkGjxshKIi0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/20
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
12:e6:8d:2b:58:34:74:61:06:d4:c2:9d:b2:58:e0:a2:e3:b8:
f6:51:78:a0:3e:f4:ba:fb:48:dc:31:5c:b8:53:ee:e0:b5:54:
c6:ce:09:46:db:4b:1f:a3:34:e7:a9:6c:b0:97:62:b1:39:fd:
fb:fc:69:ce:7b:f8:17:80:86:83:ed:64:8f:d4:5e:7d:a6:dd:
55:5e:4d:6b:e9:59:d2:1a:5c:b7:27:02:23:f0:46:34:c2:5c:
b7:e2:96:70:8f:c1:a2:c5:c9:3e:0c:42:54:ca:11:c0:b7:dd:
30:57:99:be:4e:a2:7b:74:c3:3f:5c:b1:a0:cd:2c:b0:d5:15:
d2:cd:60:2a:f7:0a:42:0a:83:a2:3b:ad:fe:b6:d4:18:92:b6:
7f:4e:37:71:f1:fb:6c:58:04:e9:2b:eb:41:cf:72:41:1f:35:
7c:1a:49:3c:b0:36:a1:57:b4:d6:51:0b:e5:57:8a:29:80:d7:
f5:36:9e:b6:ed:82:91:08:8a:1f:67:8b:51:18:65:84:51:26:
89:75:64:37:ef:f7:20:37:be:fe:86:c2:28:5d:58:7b:9c:c3:
e3:ad:2e:46:59:e3:03:57:6b:66:d2:a6:5c:8d:84:75:1e:59:
ec:33:4f:55:82:7d:57:22:6c:ed:fd:84:bb:ba:b6:b0:df:60:
3a:eb:c7:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRuv7qn2konQbTctZ50s7jJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjUwMTE2MTA1NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTNkMjQxMTNlNzhlYjZjZTU5MzUwYTc5MDY4ZjFiMjEyODg4YjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8NkvzjuzBH/SV2fYoTqWPXTZrvw
vumYbjU0wP+xSWg+nq57wxPqtOL998fYxECJgnfVWaJPqxz1qi95qvprR3scMQcT
AU2XUWt/1YS1ghSBf1xL9Je1EzBIAF4xXsHq5culg4xmvfIworKfDAmS+M3JdhRg
VI9ciCcI/NTUTySM6aIuE3AinD4zOGoLzv/pvm1BVfwaAp3ncEosL0LKvOGcbCKw
zrn8NzQ3x/Od2s7EJyKKrk9Bvv8pkxYKoAVJ62LZUm9JQF0MVAfNueCSGGtFBP7E
o1x8Azi+P/MZyCXBG46exCuZdQiPPcNSNj0QT3AMOB+e8vJwx0r+d1xuewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA49JBE+eOts5ZNQp5Bo8bISiItMMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvRGowa0VUNTQ2MnpsazFDbmtHanhzaEtJaTB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXDWgAwQC
XDW4MA0GCSqGSIb3DQEBCwUAA4IBAQAS5o0rWDR0YQbUwp2yWOCi47j2UXigPvS6
+0jcMVy4U+7gtVTGzglG20sfozTnqWywl2KxOf37/GnOe/gXgIaD7WSP1F59pt1V
Xk1r6VnSGly3JwIj8EY0wly34pZwj8Gixck+DEJUyhHAt90wV5m+TqJ7dMM/XLGg
zSyw1RXSzWAq9wpCCoOiO63+ttQYkrZ/Tjdx8ftsWATpK+tBz3JBHzV8Gkk8sDah
V7TWUQvlV4opgNf1Np627YKRCIofZ4tRGGWEUSaJdWQ37/cgN77+hsIoXVh7nMPj
rS5GWeMDV2tm0qZcjYR1HlnsM09Vgn1XImzt/YS7uraw32A668es
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:09:11 2025 by rpki-client