Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/oM2_1vxW5KXHIZUo5E4NeiFOKRk.roa
File: oM2_1vxW5KXHIZUo5E4NeiFOKRk.roa (raw, json)
Hash identifier: 6wC0BLdOIVj6MoZRJyhiSRtzQx5+0Q0jLZIW67cJMBg=
Subject key identifier: A0:CD:BF:D6:FC:56:E4:A5:C7:21:95:28:E4:4E:0D:7A:21:4E:29:19
Certificate issuer: /CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Certificate serial: 05108C74
Authority key identifier: CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/oM2_1vxW5KXHIZUo5E4NeiFOKRk.roa
Signing time: Mon 07 Mar 2022 16:26:10 +0000
ROA not before: Mon 07 Mar 2022 16:26:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 92.119.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84970612 (0x5108c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Validity
Not Before: Mar 7 16:26:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0cdbfd6fc56e4a5c7219528e44e0d7a214e2919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:8a:78:4a:53:1f:21:c0:39:2d:d7:31:db:
02:9d:77:0e:d4:f5:65:b8:20:65:10:7e:9a:45:fa:
1b:da:b0:23:5f:13:24:4d:4c:30:58:d1:c5:63:36:
af:47:b6:26:c4:36:9a:d2:13:c8:aa:09:39:16:5c:
48:65:58:d5:24:46:df:68:c0:f4:3e:d7:9e:ac:ef:
72:4b:f2:5c:27:a4:7e:e4:57:41:62:88:85:ed:a1:
9c:0b:44:e9:87:6f:97:9e:c1:cd:80:92:cc:fb:ed:
56:c5:06:f0:22:6d:e6:0b:84:74:d0:24:e7:e5:e8:
84:6d:55:ec:0a:1f:0c:8d:7e:74:b7:25:44:08:73:
de:f2:76:87:4e:c2:a2:51:2d:b1:63:a9:e5:b7:15:
33:09:c2:f0:cc:0c:5e:7a:d2:b1:a5:55:49:84:23:
18:e1:9c:5d:eb:79:4d:47:95:65:73:fd:c0:cf:ea:
55:eb:44:d7:81:a7:e1:c0:52:9c:f8:7c:e8:04:d2:
db:ee:45:27:0f:65:eb:63:92:fe:c3:ca:34:89:e0:
8f:37:ac:a7:8b:6c:9b:5d:bb:e4:e8:15:59:56:29:
3c:dd:95:e8:c7:c6:99:9b:f1:9e:21:bf:05:bf:66:
04:3e:25:b0:d0:be:ce:c4:ce:3d:1b:cd:f5:67:94:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CD:BF:D6:FC:56:E4:A5:C7:21:95:28:E4:4E:0D:7A:21:4E:29:19
X509v3 Authority Key Identifier:
keyid:CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/oM2_1vxW5KXHIZUo5E4NeiFOKRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/za7RPzCm3J1NJ3DTIyNtH9IEU5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:22:f2:22:ef:d0:c1:fc:d7:d0:fb:7d:7f:10:f0:f9:7e:64:
29:f1:72:51:d6:26:2d:78:23:f3:bd:4c:fd:9d:7c:43:f7:9d:
32:75:b1:0b:da:ff:f5:28:b8:8b:8d:9f:96:2e:83:d0:81:68:
e6:51:98:da:3f:ec:5e:3e:15:d0:e0:53:12:3e:b8:75:8b:1e:
a0:4b:2f:da:aa:02:28:5a:1b:d9:ff:c5:1a:a7:3d:d8:c3:7a:
08:67:d5:7b:ef:ea:fc:1c:40:01:ee:c5:fa:6a:cc:3a:d9:96:
35:ac:f3:bb:0a:d0:50:bc:d3:c0:69:e1:df:0c:99:ca:39:74:
66:53:b8:b8:62:89:cc:4d:c9:01:1e:18:fa:ed:49:4b:0a:1e:
74:75:fe:76:f5:bd:ac:13:6c:07:70:e5:f2:d9:cf:a9:05:f5:
1b:91:1b:d9:02:cc:a1:77:61:fc:f6:fb:91:1a:1a:b2:e5:81:
9d:db:a0:a8:6f:2c:f6:f8:3c:e7:6e:83:80:af:c3:b3:d5:3b:
cc:16:72:93:45:bd:d0:63:6b:ad:34:18:0e:e5:0d:68:1d:c5:
3a:3b:3c:82:ba:f8:62:83:27:98:82:82:5a:1d:a3:d6:11:82:
e5:e3:b8:a9:b6:e0:bc:30:67:d1:d3:05:fb:c5:af:f0:35:94:
8c:da:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:25:16 2025 by rpki-client