Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/xeUxZS9aCSIWOX1lHFl55HYqnd8.roa
File: xeUxZS9aCSIWOX1lHFl55HYqnd8.roa (raw, json)
Hash identifier: cyNOJ3VxqUaWEQjQSp2QsQLf6OmsniH/2f81vr3lerA=
Subject key identifier: C5:E5:31:65:2F:5A:09:22:16:39:7D:65:1C:59:79:E4:76:2A:9D:DF
Certificate issuer: /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial: 0804CF2E
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/xeUxZS9aCSIWOX1lHFl55HYqnd8.roa
Signing time: Sat 01 Jan 2022 03:55:31 +0000
ROA not before: Sat 01 Jan 2022 03:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 193.111.76.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134532910 (0x804cf2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Validity
Not Before: Jan 1 03:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5e531652f5a092216397d651c5979e4762a9ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:22:a3:2a:72:4d:46:e8:4f:47:76:06:29:
42:c6:f7:2c:e8:21:4c:77:3f:4c:77:e5:75:6d:6a:
3f:9d:60:ac:8c:60:f0:18:0c:f3:b0:31:f4:ca:e8:
79:ee:01:6d:9e:ad:80:49:c5:74:b4:7d:bd:76:e5:
15:4f:54:f7:2c:50:88:ee:dd:4d:dc:be:3f:e5:92:
c2:8f:9d:6f:f2:03:38:05:ee:f2:3d:5c:ef:37:71:
25:d5:06:03:cd:55:a9:54:fb:cd:14:25:45:c9:ce:
92:e2:22:f0:69:99:16:9b:ed:6c:7d:ff:13:05:c7:
a5:f2:82:6e:15:27:08:86:88:95:91:ed:ab:ce:e7:
0d:35:1e:66:fc:d8:c2:6f:de:f1:9f:6e:18:29:b4:
50:6c:37:44:6c:bd:6d:60:3c:4c:3e:0c:75:95:d9:
b4:2e:a8:b0:04:63:1c:fa:5a:d2:e4:46:0e:97:b6:
6b:76:bc:b8:d1:7d:30:c8:8d:0c:b6:0f:70:dd:7f:
9d:89:7f:02:e7:9d:25:fe:e5:8b:bc:e6:c4:e1:62:
0e:82:86:0c:3e:fb:86:88:8c:2e:05:bb:51:39:d8:
f0:f8:df:c6:aa:7e:99:50:cb:46:86:14:f3:ad:da:
81:df:e8:54:d1:4a:b9:ec:b4:25:f7:44:4e:bd:aa:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:31:65:2F:5A:09:22:16:39:7D:65:1C:59:79:E4:76:2A:9D:DF
X509v3 Authority Key Identifier:
keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/xeUxZS9aCSIWOX1lHFl55HYqnd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.5.0/24
193.17.7.0/24
193.111.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:8c:4a:ad:02:1f:bf:84:75:d4:25:7d:ac:63:aa:81:fa:cd:
12:83:c1:99:a3:50:a1:ea:12:2a:54:a5:ce:a2:77:03:7f:57:
8f:69:ce:1a:85:20:b1:8f:40:df:29:5d:82:c7:ec:65:64:44:
d8:cc:b9:2a:6b:41:29:57:1f:33:0a:aa:de:6e:ba:4f:28:8b:
ea:cf:ff:bf:08:08:3a:a8:82:fa:23:3e:e0:d7:e2:dc:aa:04:
5b:0b:91:3a:bf:ea:95:3e:c4:87:9d:6c:b8:bc:df:07:41:30:
98:20:3b:34:7f:e7:c2:78:8a:19:ce:2e:0d:8a:28:a9:5a:3d:
47:86:bd:7e:15:8b:59:c1:43:7e:6c:7d:bc:b3:45:43:4c:13:
af:04:1c:bb:52:90:80:65:0c:03:33:1f:28:32:bb:8a:c7:ac:
6e:d2:82:31:dc:4a:7c:99:dd:f5:ab:5f:b0:47:bb:68:db:11:
29:88:2f:be:88:71:11:ae:33:1e:3d:66:22:4a:7f:45:b1:c3:
ef:01:c6:72:23:27:6c:dc:d5:06:db:c7:8b:b4:39:9f:8a:91:
a9:20:d9:ba:05:ae:37:41:59:cd:cf:f0:a9:ee:03:ca:d2:b2:
5f:72:d3:a2:53:31:2b:58:4b:a7:a8:89:c2:18:46:12:91:9e:
cc:ea:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:22 2025 by rpki-client