Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/XmInGKZQVpi4yiOnRct1YYYqWiE.roa
File: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (raw, json)
Hash identifier: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=
Subject key identifier: 5E:62:27:18:A6:50:56:98:B8:CA:23:A7:45:CB:75:61:86:2A:5A:21
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 01942143FF6FD92AEF929689BC2758F96368
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/XmInGKZQVpi4yiOnRct1YYYqWiE.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.160.155.0/24 maxlen: 24
2a0c:9e40:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ff:6f:d9:2a:ef:92:96:89:bc:27:58:f9:63:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e622718a6505698b8ca23a745cb7561862a5a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:87:b1:38:6a:a0:4d:0f:8c:c8:2b:eb:01:
f6:58:67:8c:a4:94:22:52:2a:e0:f2:52:62:05:e2:
31:39:f9:ab:f8:56:47:91:0d:02:36:c4:bf:f1:c6:
a4:94:ea:64:cc:68:1f:1c:01:9b:64:30:41:7c:53:
af:94:7f:76:a5:73:e9:21:ff:dd:42:d6:1a:59:c4:
f5:bf:43:2a:a1:3b:0b:03:80:70:18:19:18:7d:60:
74:0c:2c:f4:6b:28:9e:70:c8:f8:de:51:ee:f0:01:
e8:8f:2f:c0:0d:73:5b:da:55:66:70:03:a9:bc:d0:
21:77:30:c0:2c:cc:7f:c5:ac:79:ad:0a:5f:51:2b:
8c:9b:b2:d5:c0:2c:54:57:b4:3c:41:b6:26:6d:b2:
20:90:54:00:39:50:09:d2:08:a2:bf:59:6b:59:97:
65:eb:d7:fb:f4:00:34:24:60:c4:66:20:bb:e3:46:
45:cb:2e:b2:31:d7:fc:fc:d3:a5:cb:2c:9b:aa:88:
56:45:8d:3d:02:a0:21:46:82:ec:d2:5e:ab:98:1e:
9a:2f:5b:ca:47:a2:44:f4:74:47:99:92:33:3b:4a:
c4:89:ed:8f:26:63:57:f7:25:32:15:24:ed:11:34:
15:75:b4:93:c0:a5:d7:9f:74:35:9f:1c:00:f1:c6:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:62:27:18:A6:50:56:98:B8:CA:23:A7:45:CB:75:61:86:2A:5A:21
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/XmInGKZQVpi4yiOnRct1YYYqWiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.155.0/24
IPv6:
2a0c:9e40:3::/48
Signature Algorithm: sha256WithRSAEncryption
1a:e7:b8:c2:8d:2e:76:aa:84:a4:cf:23:d2:3a:29:00:e6:1a:
65:9c:f6:bf:a6:80:00:06:10:79:76:50:f3:bd:e0:35:d4:1f:
4c:92:ec:63:48:3c:19:c3:78:e8:38:dc:19:a0:ed:60:39:bf:
ae:06:4c:31:2d:7b:af:58:83:21:2c:9b:78:c6:93:9b:ed:2b:
2f:39:36:9f:c8:9e:8d:7f:ce:4e:06:d0:97:ce:70:77:6d:fe:
7b:63:11:fd:c0:a4:ac:1d:91:ee:cf:23:0f:f7:e2:26:21:8a:
f5:48:45:ff:b9:b5:64:35:6e:ee:49:1a:45:20:77:ad:3e:aa:
82:6a:74:a5:ff:3b:d5:f1:0f:76:0e:2c:91:f1:81:75:11:e1:
f9:61:ed:22:8b:bf:9a:e2:7d:00:a5:89:51:d4:4a:e2:f0:aa:
63:c8:3b:60:5e:c1:1a:c6:23:26:30:3e:77:be:fa:e6:c9:39:
2a:cb:6f:3f:77:85:cc:60:e4:b0:93:53:30:d4:0a:22:0e:c7:
3c:41:9a:12:28:80:a7:34:f1:54:f6:7c:de:9e:33:a8:1a:f1:
4e:03:3d:78:38:51:d6:45:72:d2:79:5e:b5:c3:65:2a:5d:fe:
93:ba:03:96:2c:f5:25:6a:ee:ea:c7:c7:6e:af:1d:8b:6a:9c:
51:bd:7f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:24 2025 by rpki-client