Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa
File: TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa (raw, json)
Hash identifier: a1F6oMMLvEFRIYoQInrH9FMRLmJcoCgIJF0JoxM2u7Q=
Subject key identifier: 4E:BB:51:D0:EC:2A:E5:79:31:F9:B8:89:0B:C1:23:FC:88:4A:D4:08
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 019424B2CE96F44CE3AD447472173A149718
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa
Signing time: Thu 02 Jan 2025 01:48:05 +0000
ROA not before: Thu 02 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35677
IP address blocks: 185.92.76.0/22 maxlen: 22
2a03:8ae0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ce:96:f4:4c:e3:ad:44:74:72:17:3a:14:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: Jan 2 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ebb51d0ec2ae57931f9b8890bc123fc884ad408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:01:b9:73:ec:79:b8:5b:31:d8:96:09:1d:
06:95:34:83:29:6a:31:ff:dd:d4:18:a3:d7:ae:f2:
72:81:d4:56:76:51:2a:81:bc:fa:f4:e7:6a:f0:2d:
bf:0d:9b:65:db:79:3f:3a:7d:ec:36:6d:ee:12:5b:
f1:bb:ca:ff:bc:f1:03:3f:4f:1a:02:4c:35:38:ff:
0f:32:57:dd:29:1e:44:fc:b0:56:7a:99:ed:9c:c6:
79:b6:cb:5a:4d:9c:9c:e9:24:ea:8b:2d:c0:49:2f:
1b:af:ed:d5:5b:5d:48:bb:9d:04:09:c2:cf:4e:0f:
0d:89:ee:37:00:1d:72:be:48:b8:85:74:47:88:a0:
99:8f:fb:b1:cd:dd:6c:4a:bc:1a:fa:36:f3:77:93:
c4:5e:e1:66:d9:2e:4a:df:96:c7:0c:ae:9a:a8:f0:
d5:5b:ae:de:99:aa:d4:e7:7f:24:09:13:a4:5d:c7:
e4:24:7d:68:77:6e:03:3f:68:64:fc:25:f4:d9:f9:
45:dd:fb:17:91:d3:c3:ae:e0:3e:24:68:44:fa:88:
b4:08:42:0e:8d:b2:b2:1d:58:af:f7:53:96:82:88:
32:e5:dd:ae:48:ca:47:9f:65:e5:f1:f7:95:e1:91:
a5:f4:ac:68:31:92:60:93:96:79:6d:93:e2:9a:cd:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:51:D0:EC:2A:E5:79:31:F9:B8:89:0B:C1:23:FC:88:4A:D4:08
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.76.0/22
IPv6:
2a03:8ae0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:96:b1:8b:d4:b1:0c:c2:32:50:b8:a7:47:b3:cc:4e:a9:99:
85:86:9e:79:99:d8:49:4f:70:8d:b8:46:63:d7:73:91:7a:a7:
a9:46:20:91:dd:d5:0a:74:ae:41:b4:00:18:3c:a0:ae:49:a2:
4d:27:3c:32:b9:fc:76:a5:d1:2c:65:df:5d:02:49:ca:46:34:
2a:d1:04:40:38:34:f1:49:c9:0c:82:63:71:3d:11:83:f2:ce:
e2:d7:0c:92:e9:44:03:b2:8c:fb:a4:e7:04:2b:dd:f2:ce:87:
3a:98:e5:68:b6:62:10:7e:a5:cb:ec:b7:85:1d:55:48:9f:70:
56:46:87:08:fe:d4:7e:28:f9:06:a0:dd:db:36:54:e1:83:61:
5f:7d:0f:3e:7d:1e:4a:b0:0c:45:ff:39:47:c4:97:91:c5:93:
df:1e:3b:d5:11:36:bf:9f:43:e5:69:ca:6e:08:0b:12:50:da:
72:cb:34:bf:b4:1d:3e:c3:bb:9d:32:40:3a:cd:1c:1c:01:94:
82:c4:1c:1b:78:85:a4:33:f1:d4:9d:3a:d8:83:a4:2a:31:31:
5d:d0:19:2c:48:71:f2:c6:7a:77:8f:ae:ef:88:52:97:5a:25:
7f:07:34:80:f6:34:46:0b:b7:21:c4:a9:f7:77:e4:3f:f8:fd:
35:20:97:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:11 2025 by rpki-client