Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/v_xrcu_njaocN3K-X9oPxCjEg6k.roa
File: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (raw, json)
Hash identifier: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=
Subject key identifier: BF:FC:6B:72:EF:E7:8D:AA:1C:37:72:BE:5F:DA:0F:C4:28:C4:83:A9
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019427B54FD9D6BF9074AE5D1A9270401241
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/v_xrcu_njaocN3K-X9oPxCjEg6k.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 193.35.248.0/24 maxlen: 24
193.35.249.0/24 maxlen: 24
193.35.250.0/24 maxlen: 24
193.35.252.0/24 maxlen: 24
193.35.253.0/24 maxlen: 24
193.35.254.0/24 maxlen: 24
193.35.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4f:d9:d6:bf:90:74:ae:5d:1a:92:70:40:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bffc6b72efe78daa1c3772be5fda0fc428c483a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:35:2d:56:be:b3:52:ac:b0:8a:cc:4d:78:
7a:c8:f6:22:d9:90:93:e3:89:cb:39:cc:e1:76:71:
08:ac:5a:7b:c5:bc:57:e2:76:84:15:c1:7b:6d:bf:
d3:de:bf:75:92:45:6a:41:e6:98:33:88:12:1b:34:
fa:36:2f:eb:38:03:ea:14:8b:69:ab:3b:97:ab:aa:
ef:ef:e3:a4:f1:d7:1a:53:2e:bf:01:c3:6d:76:1d:
9c:c8:84:61:5d:88:7f:e3:95:9a:95:5a:b7:07:ff:
d4:0d:59:62:f2:a7:03:17:bc:1f:e2:e8:8b:be:7c:
89:44:52:0a:36:a9:d4:3c:bc:cd:f9:ae:07:32:52:
a8:5d:0a:7f:3b:a3:cd:7e:b0:13:95:df:cd:a1:27:
3e:ed:4c:ff:9a:b7:c1:d9:bd:05:08:d1:2a:6a:52:
6e:a4:c3:b1:0f:d5:f4:a5:67:9e:e5:71:2f:60:66:
69:4e:a1:58:ca:20:9f:b0:72:e1:de:f6:71:69:2c:
bd:94:2b:b0:fd:19:82:8a:d1:fc:fc:18:6c:d0:3a:
37:ae:86:b5:96:d5:bb:a1:fa:78:40:e3:17:84:e8:
2a:c6:bf:cb:27:01:da:52:5b:ab:ce:fe:46:ae:96:
1d:2a:f7:83:14:f3:3c:d2:0b:ff:b1:b9:c7:39:90:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:6B:72:EF:E7:8D:AA:1C:37:72:BE:5F:DA:0F:C4:28:C4:83:A9
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/v_xrcu_njaocN3K-X9oPxCjEg6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.248.0-193.35.250.255
193.35.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:e9:37:6a:ad:88:e2:65:f3:10:1c:ad:00:b4:f8:97:90:7d:
c0:95:26:0e:4d:b3:c9:01:03:70:a4:84:5c:25:c8:83:2e:8f:
e2:c1:e8:02:b0:78:99:07:c9:47:17:8a:1c:3f:13:54:f3:12:
89:34:04:5b:1e:85:16:b0:01:60:37:dc:22:c7:63:ce:5b:01:
52:c3:56:24:b9:32:ce:78:0a:b9:b4:6c:bf:88:71:cf:7f:7a:
30:65:17:6e:dd:92:20:79:cb:75:b8:5a:16:cf:b3:06:19:37:
86:76:43:78:87:65:0d:7f:80:48:db:36:59:80:08:7a:12:6e:
8b:25:94:56:c8:66:ff:d0:07:d0:ac:a6:9b:74:3e:10:c8:ff:
b2:80:65:01:2a:8e:16:2f:db:e5:14:58:51:ac:c8:1a:c1:a1:
6c:2b:af:ae:2c:5f:de:50:db:11:8c:33:3c:e7:33:c7:41:4c:
5c:69:3f:7b:17:36:c5:64:31:e0:2b:72:91:88:a0:b6:9c:01:
d2:43:6d:b2:71:0b:75:34:95:6f:89:6c:60:6f:66:5e:6b:f8:
1e:70:1d:47:c6:4d:b8:b0:ec:2d:84:dd:6e:dc:ee:10:f9:4e:
f6:54:0c:6d:d7:28:e3:65:1e:dd:e3:7a:2d:c2:7b:a1:38:44:
d4:dc:0d:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:42 2025 by rpki-client