Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/GUuYC7cVlHvArBzfO7tfpAP5D60.roa
File: GUuYC7cVlHvArBzfO7tfpAP5D60.roa (raw, json)
Hash identifier: MBqPwcxZe15O5TCcnQP4rabYZ863Bmk75b+fN9uibnE=
Subject key identifier: 19:4B:98:0B:B7:15:94:7B:C0:AC:1C:DF:3B:BB:5F:A4:03:F9:0F:AD
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194D21EE31CA972C009E41BCEB7C6B90FE4
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/GUuYC7cVlHvArBzfO7tfpAP5D60.roa
Signing time: Tue 04 Feb 2025 18:00:27 +0000
ROA not before: Tue 04 Feb 2025 18:00:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 92.62.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d2:1e:e3:1c:a9:72:c0:09:e4:1b:ce:b7:c6:b9:0f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 4 18:00:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=194b980bb715947bc0ac1cdf3bbb5fa403f90fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:85:d8:05:7f:eb:64:f6:02:e2:a8:4b:0e:
d3:1a:b3:4c:02:ca:21:43:44:d8:3c:10:93:fa:be:
ba:d3:d1:7e:9d:68:5b:8c:7a:96:71:3b:6b:92:19:
57:06:56:8e:e7:60:93:d9:09:84:59:b8:5c:ba:ab:
80:1f:7b:bd:f3:5a:81:02:83:6c:25:cc:73:0d:aa:
98:d1:68:80:ce:f6:7c:d5:c4:0e:a3:97:4f:df:0d:
30:c9:66:44:0a:35:19:72:40:81:9c:70:ff:42:ae:
66:28:0a:cf:30:4f:b0:b3:3a:be:b6:15:89:88:d9:
1c:2d:08:70:b3:4e:1a:1b:64:03:32:e0:6c:63:7a:
b6:5f:cc:f6:09:47:1d:db:f2:fd:95:3b:e2:a5:f9:
94:ad:41:1b:a8:5e:64:a0:af:be:64:da:ec:0b:bb:
6c:c5:b1:d1:3a:98:ce:82:a0:c4:91:a5:1d:4b:36:
a5:7a:b7:2f:88:72:05:ca:69:3d:c3:33:12:5d:54:
26:16:5c:fa:7f:7f:09:35:05:f6:6d:e5:8b:e0:0c:
f4:9c:d5:2f:c1:8e:ab:9d:b8:10:9f:c7:62:82:ad:
21:34:e9:28:1d:f7:47:60:c2:d3:87:ba:0e:a9:cf:
0e:7a:4e:6b:44:f4:42:8e:31:43:0d:e1:aa:7d:e8:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4B:98:0B:B7:15:94:7B:C0:AC:1C:DF:3B:BB:5F:A4:03:F9:0F:AD
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/GUuYC7cVlHvArBzfO7tfpAP5D60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.254.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8a:77:bc:f3:26:68:ab:66:16:58:ad:e4:ab:13:6c:dd:46:
f2:23:61:50:fb:ef:25:4b:e6:36:a9:92:13:bc:b6:fa:1a:94:
5c:3a:c5:a3:e9:1e:26:d0:2b:ca:4f:c6:18:c2:91:db:67:f7:
4e:ee:7d:20:e6:65:d8:9c:9c:35:bc:99:ad:86:c3:c5:91:c5:
c3:c4:33:19:a4:2c:75:fe:1e:18:6f:9a:57:cc:22:d6:af:af:
51:fd:71:16:fc:0c:70:37:e2:04:20:08:71:c3:61:4f:41:94:
da:b9:09:24:cb:e2:b7:e0:d9:9e:d4:53:5b:a6:b1:3e:84:24:
2a:17:3a:2e:4f:66:0f:72:cb:f7:1b:90:56:31:15:d6:1b:6a:
a5:bf:ba:14:15:d5:c6:ae:d4:2b:93:b9:d8:fa:f9:e6:41:d2:
58:57:00:01:18:94:e8:9e:a5:78:b9:a5:1e:33:85:08:24:75:
27:d9:d2:83:bf:22:4c:de:da:b1:5f:7b:ba:7e:38:aa:68:b5:
db:1e:10:2c:1a:5f:0d:93:27:08:27:02:53:a9:d5:38:63:68:
e7:c8:01:94:85:12:10:d4:1f:9b:73:fa:d1:c9:fd:9e:72:e0:
78:3a:12:f8:c1:63:48:c4:e2:ff:53:03:60:cd:04:e7:27:07:
9c:4f:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net