Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/dP1XMz72bEIizOJx_8e3gubbo08.roa
File: dP1XMz72bEIizOJx_8e3gubbo08.roa (raw, json)
Hash identifier: 34zsks6roiR3rEQ6SRISFcNl3J9bQeeIWhcKnK78jO8=
Subject key identifier: 74:FD:57:33:3E:F6:6C:42:22:CC:E2:71:FF:C7:B7:82:E6:DB:A3:4F
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 01942745C880059D4CC142F8CDFF682E4FFF
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/dP1XMz72bEIizOJx_8e3gubbo08.roa
Signing time: Thu 02 Jan 2025 13:47:52 +0000
ROA not before: Thu 02 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44465
IP address blocks: 92.43.170.0/23 maxlen: 23
92.43.170.0/24 maxlen: 24
92.43.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:c8:80:05:9d:4c:c1:42:f8:cd:ff:68:2e:4f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Jan 2 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74fd57333ef66c4222cce271ffc7b782e6dba34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:17:57:a1:bd:60:af:87:7d:5f:5f:87:85:
e8:85:e8:65:f0:3c:91:28:cc:c0:1f:21:eb:07:aa:
cf:fd:d0:91:f8:a6:40:e7:35:79:b0:d6:8d:81:db:
02:22:98:d4:78:cc:1a:47:8f:27:e3:0d:26:22:ba:
73:09:03:54:9e:d1:41:ee:80:8b:88:8a:83:69:17:
85:a5:25:0c:dc:ff:dc:7d:31:d7:e1:6d:fc:d8:1a:
b1:6c:b0:be:59:37:6c:d1:49:b5:18:bc:2b:cd:c5:
71:60:5a:00:43:be:04:93:03:1c:3e:8b:e9:78:3b:
d3:7f:5e:c1:46:4d:a1:c6:6f:de:e4:6f:cd:14:ea:
08:2f:ee:68:d2:f1:d4:68:1d:26:ff:0b:6e:0b:14:
23:50:f1:e8:eb:66:06:86:e9:52:63:a6:5a:23:5d:
25:26:b6:3d:df:67:54:12:0e:52:94:52:fc:c2:b2:
e5:f8:bf:1f:89:2f:20:8c:db:7d:fb:c6:8c:a8:72:
6e:c7:2c:7c:99:6b:25:bd:92:14:2d:a1:c6:9e:c9:
93:1c:5e:30:f9:3e:0b:7c:60:84:8f:4c:a4:61:ec:
6a:62:1f:be:3d:fc:20:04:72:e4:f3:48:d1:bf:bc:
a3:9b:1b:e3:0b:27:fd:3e:a1:73:f9:7b:e4:68:12:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FD:57:33:3E:F6:6C:42:22:CC:E2:71:FF:C7:B7:82:E6:DB:A3:4F
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/dP1XMz72bEIizOJx_8e3gubbo08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.170.0-92.43.172.255
Signature Algorithm: sha256WithRSAEncryption
32:18:a1:82:b7:32:12:5d:9e:4b:c3:09:7b:30:06:54:1e:be:
05:ce:f6:0d:45:77:13:91:07:32:16:0d:67:62:b1:5f:ef:8b:
22:47:fc:f8:05:d1:5a:78:92:82:93:24:c4:fe:ef:0c:3b:7b:
48:36:24:b0:2b:5f:4a:c1:a7:07:1e:63:7e:6f:ad:91:dd:55:
a8:15:8a:bf:91:48:d1:2f:6c:8c:df:8e:ed:0b:b3:6b:82:31:
a7:95:05:4f:f6:92:ff:77:b2:e4:fd:49:05:17:be:19:91:5c:
2a:50:0f:35:dc:4b:b6:bc:2a:e3:78:d7:0a:82:69:37:b4:d4:
80:12:41:3f:eb:f8:43:a8:22:56:12:f1:91:f2:d8:41:1d:7b:
da:27:aa:70:de:b9:1d:be:9c:23:e6:4f:97:dd:8c:b4:38:08:
4e:ad:71:1f:20:c3:8f:59:f6:aa:00:27:a7:57:aa:9d:41:34:
a8:0d:c1:a9:35:31:21:f0:ed:a3:b5:a7:4f:82:1a:15:28:6c:
18:28:f2:ac:65:60:1e:3a:51:02:18:18:83:2d:5c:62:76:1e:
64:4a:2d:f7:d3:f5:ff:e0:b3:46:62:ab:f5:1e:00:92:ea:06:
35:0a:fa:69:ff:dc:fc:b8:ec:c1:9d:5e:17:16:4f:e7:80:e6:
76:c8:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:30 2025 by rpki-client