Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/zys3X2MKT9uf7eO5GWpW3s91BZg.roa
File: zys3X2MKT9uf7eO5GWpW3s91BZg.roa (raw, json)
Hash identifier: OL6iQHPHj+cEOBdNlLg9T9lcRKeNhXgwtS9FbcNT6yQ=
Subject key identifier: CF:2B:37:5F:63:0A:4F:DB:9F:ED:E3:B9:19:6A:56:DE:CF:75:05:98
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 0196115CB2634F05A5AB7CC973C4DC84D974
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/zys3X2MKT9uf7eO5GWpW3s91BZg.roa
Signing time: Mon 07 Apr 2025 17:46:49 +0000
ROA not before: Mon 07 Apr 2025 17:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203735
IP address blocks: 92.119.62.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:5c:b2:63:4f:05:a5:ab:7c:c9:73:c4:dc:84:d9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Apr 7 17:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf2b375f630a4fdb9fede3b9196a56decf750598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:e0:53:9a:5a:48:13:e1:a1:e4:03:ac:36:
4a:b3:82:8e:dd:0e:a4:e9:ba:bd:7e:e3:bc:dc:05:
81:5d:03:13:d5:69:f1:32:9f:5a:12:e3:e4:4b:d8:
c3:e2:5c:94:f8:35:d0:61:ac:82:86:77:a3:4e:45:
c8:b4:c9:3b:74:c4:9d:9c:c7:b2:ea:7a:ef:91:1c:
cf:a1:4c:d3:ba:46:36:0c:0b:29:f3:b9:71:4e:ff:
ab:60:52:fd:68:bc:d5:dc:ed:d8:a0:25:84:15:56:
5a:c9:de:b9:d6:5c:59:8e:3f:55:90:20:d9:a4:b2:
9a:7c:3c:f8:9c:87:f4:ea:7a:1f:f3:e2:c8:76:7c:
b4:64:14:fa:62:fc:c3:e3:4b:a5:16:02:90:c5:f4:
a0:1e:71:ca:92:83:4d:70:9d:7e:a0:28:fb:84:4a:
b0:55:f1:7a:b4:ba:8a:ce:11:3d:ba:e6:0d:86:7e:
f8:40:03:7f:7c:27:f2:bc:3e:70:56:d0:10:5e:70:
87:13:72:c6:a0:3f:06:3d:c6:8d:fb:ac:16:c1:c3:
65:06:a7:e8:2d:76:7a:3c:7f:df:48:25:05:cc:7b:
35:0e:3d:ab:be:9a:4d:cc:cf:a0:10:5f:05:ef:6b:
e9:88:75:00:a9:86:66:b3:0a:ad:bf:61:18:ad:bb:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2B:37:5F:63:0A:4F:DB:9F:ED:E3:B9:19:6A:56:DE:CF:75:05:98
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/zys3X2MKT9uf7eO5GWpW3s91BZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.62.0/23
Signature Algorithm: sha256WithRSAEncryption
02:10:57:87:fc:48:20:36:15:8b:60:95:1c:6f:62:72:b5:9a:
2c:39:77:2e:90:a5:85:a8:37:b6:1c:3c:2a:b7:5f:18:6e:85:
ba:f8:e5:33:2e:8e:84:be:f4:0b:ab:4a:21:d4:c6:b2:8e:99:
2f:dc:09:3e:2c:01:97:cc:8a:a3:70:50:08:4a:61:37:47:9e:
0f:69:bb:f5:5a:d1:8c:61:88:3e:b9:2e:c3:e1:93:83:ab:f9:
55:ea:a0:05:b8:3d:19:7b:a3:34:9d:96:6b:49:97:1c:12:50:
e0:17:ee:cb:4f:ca:db:38:61:a0:92:f9:5a:0b:08:d8:e3:86:
84:12:1d:a5:29:f3:cb:0e:5c:9d:03:5c:20:7c:03:e7:52:d0:
4f:bb:b9:01:75:e8:3d:d5:43:28:4c:d7:2f:e4:ef:44:00:f7:
28:b6:92:b2:5c:47:59:a1:27:61:80:6e:2d:bc:85:7b:4d:be:
fd:59:d3:3e:8d:9a:37:59:9e:47:e2:28:27:65:33:7f:fc:27:
12:96:10:1d:97:e7:e8:5c:9d:0b:d3:98:18:74:e1:1e:06:1e:
19:77:ea:c4:f5:79:ab:24:c5:07:10:ba:5f:18:19:2a:81:c3:
5c:50:30:96:37:40:92:83:a5:f3:51:39:07:c8:bd:04:c6:0c:
3c:c1:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net