Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xwYYbuqdxLeABQhAcQgMb-yi8ko.roa
File: xwYYbuqdxLeABQhAcQgMb-yi8ko.roa (raw, json)
Hash identifier: Ek4fQYWGgmja5Zt7o8QUgay6Ii2VYVTROI6hxJtYtMk=
Subject key identifier: C7:06:18:6E:EA:9D:C4:B7:80:05:08:40:71:08:0C:6F:EC:A2:F2:4A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0194ED9FCD9880C5FAAAE2490C8FF3975121
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xwYYbuqdxLeABQhAcQgMb-yi8ko.roa
Signing time: Mon 10 Feb 2025 02:11:00 +0000
ROA not before: Mon 10 Feb 2025 02:11:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45650
IP address blocks: 188.253.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ed:9f:cd:98:80:c5:fa:aa:e2:49:0c:8f:f3:97:51:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 10 02:11:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c706186eea9dc4b78005084071080c6feca2f24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:56:9a:1b:c3:f3:5f:78:a7:cc:9f:e0:cc:
61:3e:1c:c8:02:08:31:e4:59:50:d3:5e:92:1d:fd:
0a:94:7c:99:02:e1:cc:7f:96:7e:92:89:7f:8a:70:
e7:a0:a9:f3:17:b7:15:b3:13:ff:a8:e2:c5:76:26:
b8:c7:ef:89:36:08:24:3d:94:02:ef:ea:8b:6c:83:
65:40:45:b3:0f:7c:9d:15:f9:bd:c1:3b:c7:58:21:
a7:19:3a:48:0a:8b:02:22:c3:4f:41:ce:fb:ed:93:
22:e4:72:d4:97:7e:a4:59:da:07:e2:f4:a4:11:f9:
1c:73:01:2b:aa:bf:28:a6:34:5a:41:71:36:31:da:
16:21:a7:78:66:8d:2f:4b:3c:d0:28:1f:92:79:cf:
9f:e8:a7:cb:a6:96:a9:f8:d1:0a:d0:93:1a:94:bb:
23:5f:d1:a7:4b:b3:2a:91:5f:ef:0b:d3:5c:e3:0a:
71:61:48:0e:25:38:9e:47:d8:8e:a8:1a:f1:65:3c:
6d:36:e3:23:15:79:96:ca:04:42:86:4b:80:44:4c:
f2:74:61:39:9d:54:07:48:ec:72:4e:f7:b1:57:ac:
da:cf:da:c3:61:3f:6c:ca:19:19:c1:e7:8f:cd:1e:
a4:1e:20:32:c4:f0:60:f9:c0:cf:d0:ba:1e:19:51:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:06:18:6E:EA:9D:C4:B7:80:05:08:40:71:08:0C:6F:EC:A2:F2:4A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/xwYYbuqdxLeABQhAcQgMb-yi8ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:91:ca:40:24:0f:a2:cc:33:89:e9:a2:f3:b5:7b:d5:59:0d:
29:0d:de:65:f9:e9:01:23:52:5d:f1:c6:c9:e7:a1:e4:91:62:
b8:33:d9:c5:06:ba:7f:09:b9:5b:6d:4c:4c:12:9c:f1:8b:b5:
4e:ac:11:f9:62:66:ea:b9:ea:76:5f:e8:c3:31:20:58:01:67:
75:af:1b:c4:11:7c:5b:77:f3:7f:55:68:72:2d:9c:2c:a0:e7:
0c:57:37:bc:60:d8:46:e2:a8:85:0b:db:41:55:da:bc:c1:f8:
b3:42:f3:37:b4:40:71:eb:60:f7:ac:74:e4:23:1b:8a:fb:f2:
aa:2c:b1:0f:ec:1d:85:10:56:88:e5:2f:0d:f7:cc:d9:90:76:
b8:ec:82:2a:76:f2:2b:9c:c6:18:38:31:09:87:e5:1e:09:7a:
76:30:fe:28:d0:44:c1:a5:36:71:35:18:a6:a5:6f:41:15:fc:
be:16:aa:3b:4e:42:55:ea:aa:a6:6b:51:56:b6:a9:49:c2:ef:
34:95:f0:ea:b9:f0:ef:17:95:20:0a:ba:6f:7d:7a:37:07:fd:
f9:e1:b6:c9:30:58:3d:60:a5:7c:7d:55:96:28:0e:e7:f5:dd:
94:d3:8e:2a:52:0f:c7:e1:65:65:77:c3:9e:b0:9a:28:e6:f5:
5c:56:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:37:41 2025 by rpki-client