Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/R0DnTDuSmKHFFhYrmPW4f8mdJQg.roa
File: R0DnTDuSmKHFFhYrmPW4f8mdJQg.roa (raw, json)
Hash identifier: NxwNNzwOomd+TbnH++VkSehTcE6mlJa2AmrqE8J3kh0=
Subject key identifier: 47:40:E7:4C:3B:92:98:A1:C5:16:16:2B:98:F5:B8:7F:C9:9D:25:08
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369CD8E2CEFE1E75AA100ABA6EED02F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/R0DnTDuSmKHFFhYrmPW4f8mdJQg.roa
Signing time: Wed 01 Jan 2025 19:48:43 +0000
ROA not before: Wed 01 Jan 2025 19:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 92.51.236.0/24 maxlen: 24
92.51.237.0/24 maxlen: 24
103.125.76.0/24 maxlen: 24
192.140.222.0/24 maxlen: 24
192.140.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:cd:8e:2c:ef:e1:e7:5a:a1:00:ab:a6:ee:d0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4740e74c3b9298a1c516162b98f5b87fc99d2508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:a7:82:3e:1c:c0:86:5b:ef:7d:a8:7d:d2:
57:22:b8:74:7f:8e:04:3b:94:c8:24:ed:80:4d:2c:
a7:51:cf:1b:73:42:b3:11:fe:02:1a:53:2b:20:4f:
4f:d7:e2:d2:b4:db:9f:aa:ab:74:00:e2:5a:19:00:
d8:74:7b:67:3c:6e:e0:e4:fb:23:30:42:33:ba:15:
4a:4e:16:e4:79:8e:99:75:f0:93:e1:94:12:19:61:
83:fe:16:f1:86:cc:19:7c:d2:6b:e6:86:28:35:3d:
e2:84:f5:29:00:b5:c8:40:47:5b:ae:82:75:a9:f9:
7c:5d:06:89:70:7f:1d:8c:48:8c:cb:fd:81:87:6c:
48:74:4c:3c:06:43:48:0b:57:71:89:b7:8a:be:ba:
7f:69:c4:94:17:f5:47:6b:ab:a7:72:cd:5a:30:4b:
e6:2f:b9:67:45:f3:3f:aa:f2:fc:e8:4b:f8:ee:8b:
38:2b:4e:6d:1a:28:cc:b4:52:af:e1:39:49:6a:2b:
41:ff:38:73:7c:e8:e3:2c:0d:ca:23:7e:fa:fa:96:
a6:16:b6:cc:ac:2e:cc:0e:b4:86:95:8a:ca:8e:00:
7d:9b:7b:a3:f6:ba:6b:a2:f6:35:ea:2e:64:8c:9b:
ea:ca:35:6a:f1:f8:41:a6:f3:8b:41:23:3f:0a:ba:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:E7:4C:3B:92:98:A1:C5:16:16:2B:98:F5:B8:7F:C9:9D:25:08
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/R0DnTDuSmKHFFhYrmPW4f8mdJQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.236.0/23
103.125.76.0/24
192.140.222.0/23
Signature Algorithm: sha256WithRSAEncryption
27:0c:0c:8f:e5:5d:70:78:9f:a2:7b:1c:b4:79:11:d1:08:fa:
c1:a3:88:a5:2a:8f:f9:0e:a9:bb:c2:fc:8e:cc:7d:21:79:af:
a3:99:de:a0:28:3a:33:9b:5f:02:0f:e6:22:cf:0e:b5:b5:40:
9b:ee:5b:d4:2b:ec:25:db:fd:ce:da:97:f0:8b:13:d6:43:31:
b4:a9:49:35:3b:63:44:22:42:00:b7:97:fc:c2:85:74:18:0e:
62:fa:68:b4:88:c4:46:8a:9d:60:b7:79:35:27:8f:2f:83:8c:
3f:68:6a:70:df:fc:8b:1c:4f:0f:aa:1d:1f:ab:e6:14:db:32:
35:b6:9a:1a:59:1a:15:7a:f4:37:28:31:f9:d9:3e:64:65:f5:
f4:06:1a:42:df:f1:f3:da:36:52:c8:65:02:25:6e:bd:70:ee:
e4:96:08:73:4a:b4:19:13:d3:b1:ba:84:f3:d8:a8:4c:4d:cc:
57:b2:d3:9b:7b:cf:b3:7a:49:a7:63:3a:eb:c6:d9:f4:ab:c6:
49:3d:fc:a7:f6:bd:ce:b3:20:73:9a:e2:e8:9d:ef:c6:26:b3:
c0:2b:05:2c:1d:74:0f:d6:69:7b:5f:cc:57:0a:c1:b8:06:9b:
3a:4b:c1:93:a9:2e:29:4c:34:f4:18:b3:80:6c:85:d1:6f:43:
fa:9b:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:27 2025 by rpki-client on console.sobornost.net