Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/L47fpbavJjM8YwHHhvMkJOYd5vE.roa
File: L47fpbavJjM8YwHHhvMkJOYd5vE.roa (raw, json)
Hash identifier: IzwhrGUTddMft7RJzZ/2mXaFd/PY/Xp0a/SU/LUo1YY=
Subject key identifier: 2F:8E:DF:A5:B6:AF:26:33:3C:63:01:C7:86:F3:24:24:E6:1D:E6:F1
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 01942745C957A73F9FCBC74B56F65799BF33
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/L47fpbavJjM8YwHHhvMkJOYd5vE.roa
Signing time: Thu 02 Jan 2025 13:47:52 +0000
ROA not before: Thu 02 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48695
IP address blocks: 92.43.168.0/23 maxlen: 23
92.43.169.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
92.43.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:c9:57:a7:3f:9f:cb:c7:4b:56:f6:57:99:bf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Jan 2 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f8edfa5b6af26333c6301c786f32424e61de6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:e1:4c:ef:40:6f:05:1d:9f:be:59:fe:92:
dd:06:a1:cc:b7:56:42:f3:26:07:34:d6:b9:8e:9b:
e7:a0:8c:a8:b2:cf:9e:26:b3:be:8d:36:15:90:13:
10:44:9f:ca:15:09:e8:bf:da:06:26:76:d2:2f:17:
58:7d:cc:89:3d:c2:9c:f3:b4:7e:67:bd:64:65:f7:
de:10:63:df:ec:e4:95:77:ee:33:3f:a4:af:0a:cb:
7f:db:b7:15:3e:75:04:5c:81:8b:a2:fa:6e:52:ad:
0f:cb:a7:a4:58:ac:35:fa:6a:85:02:73:9a:68:51:
02:5a:96:b9:b5:c0:56:c6:14:63:32:e5:18:ac:ee:
ef:c8:e9:ba:2e:82:18:52:c4:1a:20:26:d8:4f:ae:
39:fd:60:4f:98:09:57:56:73:21:d9:47:24:8c:11:
97:58:db:09:4a:55:a7:49:69:ec:56:f8:bb:4c:c4:
17:6d:bb:07:0e:79:a4:17:77:b6:9a:a1:92:21:a3:
0c:36:8c:0b:c9:ce:88:eb:d0:ec:00:42:2c:08:c0:
bf:96:4d:d4:a0:fd:48:c2:88:d3:3c:04:c1:9a:19:
af:f9:75:78:c2:7c:15:e3:5e:f8:07:46:23:61:61:
b7:36:f0:83:5c:7b:20:2a:bf:01:bc:f9:74:af:96:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8E:DF:A5:B6:AF:26:33:3C:63:01:C7:86:F3:24:24:E6:1D:E6:F1
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/L47fpbavJjM8YwHHhvMkJOYd5vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.168.0/22
Signature Algorithm: sha256WithRSAEncryption
56:1b:9a:2d:bd:ea:05:f6:a5:20:eb:a5:b8:b2:45:26:19:f9:
00:41:41:0f:af:76:f9:8d:f4:77:15:02:64:aa:67:80:43:43:
17:6a:a9:34:4e:57:a9:b0:02:2d:c1:b9:65:ca:a2:20:87:f8:
77:4e:25:2e:e1:5a:ae:d0:f1:cb:0a:7b:d7:af:a7:db:70:7a:
5e:64:57:32:23:aa:2b:1e:77:1f:3f:2e:3c:73:5c:04:68:60:
76:d0:c9:75:04:2e:7e:fb:fa:e0:e5:4e:38:7b:a7:df:d0:1d:
27:be:2b:42:d8:92:4f:a1:52:3c:39:26:41:d0:f5:7d:d9:56:
58:81:c5:6f:1e:10:9e:bc:8f:37:0f:a6:2d:29:c8:86:16:b6:
38:2e:1c:af:2f:6d:d0:9b:ea:c7:36:6f:4b:3f:ee:28:4b:a4:
35:c2:39:1c:4f:89:c2:c6:ab:a7:fe:55:52:97:86:bd:85:ca:
bc:c0:c3:71:e0:45:6e:47:70:f0:ef:9a:5e:eb:d2:69:00:07:
ad:88:34:67:1f:fa:a3:b8:74:68:73:0d:5b:d3:0e:dc:aa:f8:
ea:a7:d6:e8:33:d8:00:d8:d0:f4:c2:42:82:23:a2:1d:d5:9a:
eb:35:f6:60:15:5f:63:3e:7d:f0:43:3f:10:9c:8e:29:fc:de:
e3:cb:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net