Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lER_Fan6BZoV72vcwFNWAQ3dZis.roa
File: lER_Fan6BZoV72vcwFNWAQ3dZis.roa (raw, json)
Hash identifier: 4av73qzHGWCNUdG7/bYeVpw3i5LfNNmUwXQwLr923iQ=
Subject key identifier: 94:44:7F:15:A9:FA:05:9A:15:EF:6B:DC:C0:53:56:01:0D:DD:66:2B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D8504505EEA266872B7CFE7763D56D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lER_Fan6BZoV72vcwFNWAQ3dZis.roa
Signing time: Thu 02 Jan 2025 11:48:18 +0000
ROA not before: Thu 02 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 185.92.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:50:45:05:ee:a2:66:87:2b:7c:fe:77:63:d5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94447f15a9fa059a15ef6bdcc05356010ddd662b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6a:f7:41:45:5e:f7:08:dc:f9:a4:65:0b:3e:
db:b3:9b:7f:c4:7e:10:e6:49:ae:23:71:4d:ef:a0:
b6:63:94:96:ab:fd:80:eb:0d:db:d2:e2:ca:47:60:
d2:68:93:51:a7:c1:34:43:fa:71:bd:8c:e3:23:de:
3e:41:5d:3f:d6:3f:8d:48:d9:52:d5:16:9f:5e:e3:
fd:b9:0a:bc:1a:8f:04:3f:23:b3:03:f3:36:37:0f:
e8:68:a8:22:8b:2f:05:d5:4d:fc:3a:e5:5f:47:01:
08:fb:97:ab:73:46:27:47:24:18:30:d5:5d:22:64:
df:ee:f1:de:a1:20:07:b3:5d:32:3c:f7:bc:90:ea:
11:61:52:6b:ed:1c:41:01:a4:df:c0:e9:a9:ec:fc:
75:bb:6d:46:c0:7b:4a:b6:07:0a:f5:f2:ae:f2:b0:
33:e6:6d:0c:f0:8a:13:b6:80:8f:af:ce:13:8a:16:
3c:60:98:ae:36:4d:a8:ce:b3:4d:d5:a4:f2:6e:02:
13:ce:22:74:fd:90:bc:41:bf:c8:30:44:2b:f5:80:
8e:4b:b8:7c:1c:bd:5f:c0:b0:f5:1d:1d:29:cf:a6:
a0:2c:14:15:29:b2:51:45:ae:ef:c1:77:fb:80:52:
b9:6a:d5:bc:f5:6f:14:9d:8e:f3:11:43:d7:a5:e4:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:44:7F:15:A9:FA:05:9A:15:EF:6B:DC:C0:53:56:01:0D:DD:66:2B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lER_Fan6BZoV72vcwFNWAQ3dZis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:83:9e:1e:43:4a:2e:eb:21:11:a4:59:9c:3f:3d:3d:3e:26:
fd:f4:67:9e:32:06:07:bb:e2:ed:4b:93:72:35:51:6a:ad:0a:
c2:e1:1b:8c:29:9a:ef:76:38:3e:d7:49:6f:f8:74:c9:59:7a:
50:43:47:54:58:c7:23:34:10:c9:14:4e:76:32:99:d1:ed:f1:
ea:10:fe:93:c5:0e:1f:38:52:df:8a:39:a8:02:21:13:f2:8e:
6c:93:fd:c6:79:51:9c:a5:4e:93:fd:d4:cf:06:b4:4a:4b:71:
ad:16:c6:52:a5:49:44:b8:4f:0d:2a:4a:63:07:71:b7:5d:19:
9e:cf:a8:71:86:7e:98:e0:ff:8c:0e:ac:d3:53:6d:d7:cb:e0:
5d:3e:d9:8d:21:c2:d2:b6:1e:b3:5c:79:8e:3b:c7:70:15:fa:
92:9b:1e:63:bb:38:58:89:ac:c2:a5:f8:07:93:73:1d:61:d1:
5a:7e:f6:98:2a:98:c0:60:7d:fb:01:51:68:1a:5c:66:8e:a4:
c5:6f:48:df:86:db:95:21:51:da:aa:72:8a:35:95:12:1e:c8:
74:a2:7a:23:37:30:27:2e:2b:a7:cf:e8:7a:e7:b5:66:37:9b:
18:99:de:92:6a:71:73:61:12:c5:a7:08:1b:f3:5e:49:cf:63:
9f:3c:71:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2FBFBe6iZocrfP53Y9VtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwMTAyMTE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDQ0N2YxNWE5ZmEwNTlhMTVlZjZiZGNjMDUzNTYwMTBkZGQ2NjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mr3QUVe9wjc+aRlCz7bs5t/xH4Q
5kmuI3FN76C2Y5SWq/2A6w3b0uLKR2DSaJNRp8E0Q/pxvYzjI94+QV0/1j+NSNlS
1RafXuP9uQq8Go8EPyOzA/M2Nw/oaKgiiy8F1U38OuVfRwEI+5erc0YnRyQYMNVd
ImTf7vHeoSAHs10yPPe8kOoRYVJr7RxBAaTfwOmp7Px1u21GwHtKtgcK9fKu8rAz
5m0M8IoTtoCPr84TihY8YJiuNk2ozrNN1aTybgITziJ0/ZC8Qb/IMEQr9YCOS7h8
HL1fwLD1HR0pz6agLBQVKbJRRa7vwXf7gFK5atW89W8UnY7zEUPXpeTBmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJREfxWp+gWaFe9r3MBTVgEN3WYrMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvbEVSX0ZhbjZCWm9WNzJ2Y3dGTldBUTNkWmlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVwsMA0G
CSqGSIb3DQEBCwUAA4IBAQAqg54eQ0ou6yERpFmcPz09Pib99GeeMgYHu+LtS5Ny
NVFqrQrC4RuMKZrvdjg+10lv+HTJWXpQQ0dUWMcjNBDJFE52MpnR7fHqEP6TxQ4f
OFLfijmoAiET8o5sk/3GeVGcpU6T/dTPBrRKS3GtFsZSpUlEuE8NKkpjB3G3XRme
z6hxhn6Y4P+MDqzTU23Xy+BdPtmNIcLSth6zXHmOO8dwFfqSmx5juzhYiazCpfgH
k3MdYdFafvaYKpjAYH37AVFoGlxmjqTFb0jfhtuVIVHaqnKKNZUSHsh0onojNzAn
Liunz+h657VmN5sYmd6SanFzYRLFpwgb815Jz2OfPHFT
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:44 2025 by rpki-client