Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/OtzZOisV1bM6sc-GLNPwmdom2N8.roa
File: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (raw, json)
Hash identifier: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=
Subject key identifier: 3A:DC:D9:3A:2B:15:D5:B3:3A:B1:CF:86:2C:D3:F0:99:DA:26:D8:DF
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 01942067C835A75AF94A90B472EE5D91EFBD
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/OtzZOisV1bM6sc-GLNPwmdom2N8.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c8:35:a7:5a:f9:4a:90:b4:72:ee:5d:91:ef:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3adcd93a2b15d5b33ab1cf862cd3f099da26d8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:90:e5:18:96:3b:95:56:56:57:44:2a:e0:
d1:aa:7f:26:2a:c8:e3:85:23:ed:9f:f7:60:e5:03:
91:21:94:46:a7:cf:a8:5c:42:9f:00:b1:e0:b4:7f:
2d:20:43:a0:14:9d:2d:30:97:41:f2:70:76:62:4c:
6c:c8:18:92:75:ac:c0:12:61:7c:00:df:0a:b8:4b:
1e:7c:18:8d:7a:b3:97:7f:ca:64:29:73:f9:c2:4d:
e4:24:c5:1d:05:bf:34:18:24:a1:e4:10:f4:0f:11:
16:3a:56:8d:0b:1b:5c:7f:40:c1:64:6a:cd:51:74:
83:e8:86:6c:77:5f:db:95:70:77:f1:c6:02:97:de:
a7:4c:f2:91:05:75:ae:fd:35:31:24:29:ae:f6:29:
98:5d:31:f1:39:45:2f:d7:3e:99:b0:72:c0:4a:a6:
b4:1f:d1:88:15:12:b3:ae:2f:e3:5c:73:aa:df:b6:
9f:99:b2:19:03:25:a3:7e:0b:c6:1b:c4:d2:bf:94:
41:12:74:bc:2f:8d:da:e6:34:bd:ae:d9:5b:13:cb:
e9:50:76:5e:58:3a:15:84:f2:e9:96:93:b6:e1:be:
29:32:04:5f:4f:f0:25:6b:88:5a:84:0c:b1:4a:91:
22:a1:6b:9b:44:1a:56:7f:aa:26:03:70:47:81:cc:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:D9:3A:2B:15:D5:B3:3A:B1:CF:86:2C:D3:F0:99:DA:26:D8:DF
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/OtzZOisV1bM6sc-GLNPwmdom2N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8b:f5:62:6a:f9:0b:a6:a4:22:9c:4f:59:05:71:56:30:76:
92:14:fe:e5:ef:b6:f3:d8:21:73:41:20:ee:e7:95:ad:00:30:
56:50:19:86:89:fb:af:90:56:b5:6e:cc:e4:cf:f3:39:31:ec:
21:02:34:32:2d:54:01:17:ff:27:4a:fd:70:c7:d2:05:08:c1:
a0:01:26:99:e1:20:bc:e3:0e:ff:db:3c:cc:df:d3:b3:1a:8a:
a9:26:28:31:b4:89:a8:bf:bb:51:19:5f:d7:7a:6f:8d:c4:39:
fc:fb:1d:b8:40:14:0f:bc:a6:00:2e:36:0c:fa:4d:d8:67:1f:
4c:9d:d0:b1:84:64:8b:2f:be:b3:33:6f:d9:42:4f:53:7d:09:
65:c5:4d:4f:62:c6:9f:e1:bd:8d:38:47:71:fe:bb:8d:11:f3:
50:bd:90:b9:eb:fb:de:04:88:c8:5f:06:4d:86:90:6e:b8:51:
07:49:d4:ca:01:ae:99:b5:17:0b:23:6b:1c:22:9e:0a:46:bf:
f1:07:dd:25:80:49:c5:58:9f:1c:c0:92:99:99:ee:d2:a8:d1:
b8:30:6d:d7:bf:9d:a1:23:37:d6:4c:c2:db:34:07:36:6d:f3:
91:af:05:3f:b4:57:1b:2c:fb:a2:0a:27:9a:06:41:9f:44:9c:
90:cd:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net