Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/xkuriOxhH9L4osrYS3niaHQqN-k.roa
File: xkuriOxhH9L4osrYS3niaHQqN-k.roa (raw, json)
Hash identifier: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=
Subject key identifier: C6:4B:AB:88:EC:61:1F:D2:F8:A2:CA:D8:4B:79:E2:68:74:2A:37:E9
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 019426D963F40B1EDBF0617414891936CB02
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/xkuriOxhH9L4osrYS3niaHQqN-k.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34235
IP address blocks: 194.8.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:63:f4:0b:1e:db:f0:61:74:14:89:19:36:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c64bab88ec611fd2f8a2cad84b79e268742a37e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:4f:3d:3f:5c:f3:c3:c6:5d:fd:d4:d0:23:
ff:40:8d:cc:58:f6:e8:8d:3b:01:f0:25:61:c0:f4:
2b:fd:a2:6b:0b:bf:c6:df:19:66:5c:fa:39:0c:eb:
24:38:6f:f1:be:29:2d:fe:80:89:d1:c1:5e:bd:4e:
93:09:70:6b:4c:90:a4:18:ae:4a:48:47:e9:15:64:
b1:fe:4b:39:d2:d8:08:3e:2e:87:55:c8:dd:1a:44:
39:4f:f0:96:1b:8a:18:84:ed:e4:fe:83:92:dc:7c:
1e:c0:9a:01:59:da:cc:23:26:6f:88:c4:d0:06:6d:
79:5e:2f:88:8f:7e:0c:83:e8:07:b9:4d:ef:65:22:
af:8f:f0:80:a0:0d:f3:dd:59:41:2a:47:d1:29:4e:
35:d1:2b:be:2d:af:0f:ad:d5:5d:6f:8e:85:84:d9:
28:08:d3:6c:b6:b4:f9:8e:1f:21:74:5d:03:c7:48:
71:40:da:b0:f7:b3:f1:04:17:87:2b:1a:a1:0c:02:
a5:a5:c3:3f:1f:37:57:9b:cb:ce:79:8a:53:4d:bc:
ba:74:1d:c0:a1:25:11:4e:45:89:c9:fb:c1:3e:95:
ad:d7:04:4a:a6:3e:54:09:e2:c0:de:28:2d:86:35:
53:18:64:df:be:b9:0c:a8:53:e6:65:df:8b:aa:b0:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:AB:88:EC:61:1F:D2:F8:A2:CA:D8:4B:79:E2:68:74:2A:37:E9
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/xkuriOxhH9L4osrYS3niaHQqN-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.75.0/24
Signature Algorithm: sha256WithRSAEncryption
99:50:c6:bd:2d:31:b5:af:0e:e8:a8:63:5f:b0:47:cb:24:d8:
5a:bd:f1:0c:70:af:7b:d1:b2:cc:be:93:41:1e:ac:cf:36:12:
a5:94:2b:f6:a4:b6:d8:8c:bb:67:40:43:bf:97:98:96:a5:74:
68:43:11:f8:ea:41:b6:e0:a6:89:bb:29:4d:ad:1c:e6:50:4f:
5f:9d:1c:97:22:33:c3:9a:c1:56:3b:9b:ce:04:71:8a:8d:c5:
3c:6f:ab:1b:20:2b:64:10:ab:4d:ae:c1:1a:a0:aa:29:b3:06:
ab:67:b8:8d:aa:f5:97:9d:93:c4:18:cb:ca:cf:8b:2d:34:df:
15:44:30:74:78:3d:f5:66:47:a2:43:4e:48:b6:19:e3:50:cf:
cd:60:83:13:3a:58:fd:a3:90:ed:86:b3:c5:e7:39:cf:db:7d:
2b:51:c8:06:91:42:f1:f2:2f:68:58:5d:59:28:ea:39:f8:47:
a2:d1:b2:f7:53:50:37:8f:91:50:d1:c6:a8:a5:97:63:be:5d:
6c:86:8c:b8:b2:38:bf:b2:1b:13:f0:1b:07:de:72:cb:f4:b3:
18:47:be:c0:f2:8e:ee:ca:ba:2d:c3:9d:99:12:bd:74:c2:ef:
48:65:98:1e:85:73:99:f9:d4:23:a7:c1:c4:2e:4f:b3:4e:83:
e7:10:d4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:45 2025 by rpki-client