Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa
File: Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa (raw, json)
Hash identifier: D3bg8s9LSpHww0XiOamb2fTNkB0scUvbSEDIBYdOll4=
Subject key identifier: 1B:16:BC:65:37:A1:BA:C4:3F:FF:32:4A:13:E1:08:0C:F5:31:ED:FD
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 01942143F1B5F441707C4BE92FB19C0CFF77
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52221
IP address blocks: 188.92.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f1:b5:f4:41:70:7c:4b:e9:2f:b1:9c:0c:ff:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b16bc6537a1bac43fff324a13e1080cf531edfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:1e:fb:d4:19:78:ce:03:b1:05:24:e9:aa:
14:e4:1d:ee:e0:df:f5:93:61:dc:14:c6:c7:af:7e:
9d:7e:cb:f9:3b:69:68:77:f2:33:ac:b0:5a:74:b0:
bb:60:dc:d0:3a:49:74:77:0d:25:75:a4:61:89:ef:
28:81:40:f6:3d:0f:10:0c:d3:6e:13:99:96:29:5b:
3a:a3:73:2c:aa:99:ea:9d:11:16:5f:3c:84:33:80:
9e:61:00:9c:5e:ef:ed:31:a3:3a:2a:d7:f0:dd:d9:
4a:4e:b6:21:47:18:af:13:5e:33:ed:ac:d4:73:4d:
cd:6b:0f:6c:86:4f:63:9c:2b:7d:6a:20:51:04:23:
6c:27:64:64:85:64:13:3c:34:31:e5:f0:ef:8d:a7:
c2:54:95:a4:82:b6:bc:c7:d1:5b:03:f2:12:23:bf:
ef:b0:a4:35:5f:9a:0a:c4:87:f8:26:f6:21:e8:90:
3e:38:a0:1d:ae:80:41:63:73:51:ab:19:37:79:8a:
eb:44:91:26:46:5c:3c:e4:54:6e:b2:03:b3:2f:d1:
8b:42:cf:00:2f:48:9f:54:01:63:e1:36:f2:57:b6:
42:6f:73:7b:79:36:5e:ff:4a:d6:83:08:f4:ab:ab:
fa:59:19:27:64:0b:cb:c0:8e:cd:dd:d6:4c:df:48:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:BC:65:37:A1:BA:C4:3F:FF:32:4A:13:E1:08:0C:F5:31:ED:FD
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.26.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e6:67:0d:75:e7:59:5f:a7:6e:64:c9:27:0f:bc:39:3e:d2:
59:53:b7:b5:59:52:d0:d4:e9:79:7c:58:fe:a6:b6:90:62:cb:
15:34:d6:5c:41:d4:cd:af:56:f6:e9:fd:7e:24:8a:18:55:5a:
5a:9f:7c:5a:b5:7e:8e:da:6e:c8:ed:e5:d2:96:87:d1:49:97:
60:5d:bf:f0:f5:64:f3:cb:36:c6:52:06:96:4b:4a:bf:84:64:
a9:5b:9c:fc:59:21:b9:b8:a8:5a:48:7d:80:cd:09:e4:f8:cb:
2c:57:4b:e7:f6:59:5f:c4:97:57:5e:0e:eb:67:8c:44:31:11:
da:dc:1f:9f:53:5a:f2:60:e0:bf:21:d3:8c:f8:31:54:75:e7:
f1:7c:c7:e0:de:08:6a:11:dd:f1:f5:da:b3:7b:eb:37:23:ec:
eb:93:4e:95:2d:8b:1c:a7:0c:91:9d:4c:63:41:3b:1c:3f:d5:
3d:b6:02:a1:d7:28:bd:ce:f3:a2:38:1c:be:64:8a:7c:96:3a:
00:b8:97:17:29:3f:1d:6d:02:4c:bf:0b:f5:2c:be:34:05:03:
73:7d:b8:69:2b:b4:f5:8c:7a:cf:52:6c:24:c4:56:64:4e:a1:
e3:7e:4c:bb:fa:3e:f6:6e:1b:df:de:62:db:32:15:45:d6:b9:
86:08:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net