Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/U0kXOYQlCT4siDrxC7rmBYTDjYg.roa
File: U0kXOYQlCT4siDrxC7rmBYTDjYg.roa (raw, json)
Hash identifier: /xFFXqatUzxXHWrxa+teKUB4rwy5tb/b0xZ64HTl1uY=
Subject key identifier: 53:49:17:39:84:25:09:3E:2C:88:3A:F1:0B:BA:E6:05:84:C3:8D:88
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019600FC80187884A92CEBED5F064547B1C4
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/U0kXOYQlCT4siDrxC7rmBYTDjYg.roa
Signing time: Fri 04 Apr 2025 13:27:49 +0000
ROA not before: Fri 04 Apr 2025 13:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.62.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:fc:80:18:78:84:a9:2c:eb:ed:5f:06:45:47:b1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Apr 4 13:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=534917398425093e2c883af10bbae60584c38d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:e0:bf:22:a9:a2:83:bf:c5:69:81:93:43:
df:8a:5c:01:82:0b:b0:f6:8d:b1:e1:19:09:af:38:
f3:97:d3:7b:16:11:32:ad:bf:2d:31:fe:bf:1f:a7:
30:0e:e2:fc:81:ad:18:9a:b9:36:70:7a:23:0f:23:
17:8c:73:e0:2b:bc:b3:f3:09:31:fc:59:dc:32:ec:
41:60:5f:fe:78:a4:82:4e:bd:b4:de:fb:a4:1c:8f:
80:fe:17:a5:f7:f9:9d:2a:31:5e:d9:80:52:52:92:
9a:cd:23:ee:12:4a:ea:47:82:71:53:3e:c9:90:36:
bd:87:de:1b:44:bc:39:06:cd:a5:98:09:4f:83:21:
98:a3:43:dc:7d:da:7c:75:41:a8:5a:c8:b5:ca:e0:
58:cf:94:eb:eb:3a:70:94:3b:92:fc:79:4d:1d:fe:
4b:a4:21:6a:1f:05:f7:bd:98:10:85:7f:14:9e:f9:
2e:09:a4:9e:0e:db:7e:b5:b2:9b:26:cd:15:6a:0a:
1e:45:28:1e:c7:6f:a6:d8:e4:f7:4b:4d:e6:0c:0a:
07:e7:4c:76:cc:f1:f2:bc:ff:71:a2:f4:80:8b:c4:
d9:f9:48:8e:7e:da:30:f4:4e:4c:45:0e:42:96:2f:
8c:b9:3c:74:40:34:d4:ce:30:41:3d:6a:75:83:9a:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:17:39:84:25:09:3E:2C:88:3A:F1:0B:BA:E6:05:84:C3:8D:88
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/U0kXOYQlCT4siDrxC7rmBYTDjYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d3:67:7a:41:b5:22:23:4b:d5:18:83:39:98:d2:b2:27:c7:
70:cc:1c:d8:0c:5d:8f:03:07:b8:0f:a6:34:31:28:4a:f7:19:
a6:98:72:cd:70:e7:b4:d0:63:2e:81:80:bd:65:fa:0b:b6:9a:
ef:82:b9:7d:21:6b:2b:ea:d4:08:15:b5:cb:98:17:6b:c2:72:
fb:90:d0:a6:b3:e9:ac:50:bb:21:eb:1f:a3:88:75:82:17:9e:
c6:13:bd:ad:96:e2:95:64:16:18:63:5f:a3:ad:2d:da:9b:bb:
ae:50:a6:6e:5c:6b:ce:4a:52:34:8c:df:52:d8:5c:eb:3c:d3:
0c:44:a6:9e:f0:c4:64:15:3c:79:7f:c7:78:f8:a4:84:12:f4:
08:8f:41:5f:ed:ff:96:61:08:d5:b8:3c:2d:b4:b0:48:da:15:
ec:82:43:0e:95:a7:34:a8:56:eb:1a:13:69:8d:a3:2c:f7:93:
06:15:f9:d5:f1:70:07:cd:69:dc:a9:df:3c:24:cb:e3:b9:73:
8b:b9:e4:b5:32:1b:55:27:dc:bc:c3:60:7a:e4:ce:25:7e:9d:
ff:88:3f:68:76:8d:96:99:95:6d:57:16:5f:5c:0e:a1:ea:f2:
2e:12:e0:0b:ed:f1:3d:38:8a:9e:d0:ff:8c:8d:3c:da:df:34:
a9:a4:14:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net