Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XKgNxhFM1Wa9zYeefr41nP53ktw.roa
File: XKgNxhFM1Wa9zYeefr41nP53ktw.roa (raw, json)
Hash identifier: B5KjHnd1UjCwhD3MnuRt/VmAanvm9TEW9m2XpeXMT1w=
Subject key identifier: 5C:A8:0D:C6:11:4C:D5:66:BD:CD:87:9E:7E:BE:35:9C:FE:77:92:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019584EA1307C99C41912CABB2E4B4911CC9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XKgNxhFM1Wa9zYeefr41nP53ktw.roa
Signing time: Tue 11 Mar 2025 11:14:47 +0000
ROA not before: Tue 11 Mar 2025 11:14:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202291
IP address blocks: 194.113.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:ea:13:07:c9:9c:41:91:2c:ab:b2:e4:b4:91:1c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 11 11:14:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ca80dc6114cd566bdcd879e7ebe359cfe7792dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:b4:5b:69:0b:cb:82:b1:92:f3:ef:76:53:
2d:c8:28:b9:3e:b5:79:d5:a5:8b:24:a6:e8:69:61:
39:ea:6c:69:eb:8a:24:d6:6c:22:00:b0:79:d0:4d:
9e:74:86:e4:7d:a3:8b:7e:0f:75:0c:e5:d5:c7:72:
c6:2d:d0:c0:30:14:d1:9f:83:d9:51:01:15:31:41:
60:99:1c:af:21:11:20:0e:13:62:7e:f1:e2:1d:43:
51:65:41:c6:b7:19:bd:2f:78:48:ae:bb:ea:2d:7c:
12:a8:a8:92:c3:f6:f5:76:15:eb:18:fe:35:4d:f5:
2a:a7:00:6d:e2:50:91:52:c2:0b:d3:40:48:cc:3b:
c3:03:9b:1a:c2:68:eb:de:1f:e0:59:79:15:68:07:
e3:35:c6:35:24:2a:14:bf:49:2e:bd:e5:7e:11:7b:
0d:1b:75:2a:4e:22:45:f0:14:de:ee:2e:ad:85:ae:
a4:a8:8c:05:af:a1:0a:2e:7c:16:92:38:ca:71:91:
88:ea:2d:c8:57:4f:d5:9d:04:b3:84:2b:ea:03:42:
2c:8c:18:83:6b:31:c0:b3:9f:5c:cc:b9:7f:bb:ca:
79:98:5c:f9:4b:8b:59:65:77:40:44:22:a4:7a:e3:
5d:74:cb:13:dd:13:8a:1b:9f:17:c6:39:9d:e9:35:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A8:0D:C6:11:4C:D5:66:BD:CD:87:9E:7E:BE:35:9C:FE:77:92:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XKgNxhFM1Wa9zYeefr41nP53ktw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:26:b7:69:3b:3a:c9:fa:80:9a:e4:15:4a:2e:d0:2c:fd:55:
5e:57:47:5c:b0:3f:2d:7c:92:1c:55:0e:e4:42:78:fe:10:eb:
76:c4:2b:84:22:7b:e8:49:3b:ec:7f:08:09:db:8a:9b:93:91:
50:ad:51:ac:15:c3:bb:f2:a6:18:19:0f:7e:d4:35:38:e6:a3:
af:b6:38:19:8e:0d:db:6e:d6:ac:97:e0:f5:6f:65:f8:e3:c9:
a0:e2:3a:2e:99:d9:a8:c7:6c:2f:50:fe:18:b3:19:9c:28:c8:
50:81:85:78:79:8b:b5:e1:44:c7:a9:e1:1e:25:87:37:2f:91:
ae:1d:0d:8f:09:18:12:74:5f:02:07:a8:6c:b9:c4:36:bb:7f:
23:f0:e5:36:43:03:74:35:10:b6:e2:fa:3a:60:82:74:bd:c8:
46:5a:01:f0:c7:7f:25:5f:02:ec:6d:7f:17:f6:f8:95:3d:16:
a4:9f:2f:23:86:c9:87:f8:85:28:14:6d:1c:37:6b:58:21:50:
13:a2:93:0c:43:7a:9b:ed:a2:4d:83:ee:6e:c9:5c:65:f2:10:
bf:99:2e:3c:68:61:d9:d2:7c:bd:a2:ba:7a:c6:db:eb:2b:7f:
c8:24:3a:ba:2b:6e:dd:94:e8:05:df:e7:2c:2c:ab:3d:ed:61:
59:63:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:39 2025 by rpki-client