Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/xZbULjfnAk8L_LBsHBsSa0sHk2s.roa
File: xZbULjfnAk8L_LBsHBsSa0sHk2s.roa (raw, json)
Hash identifier: /W15R9ReZiVaxD6IDkffS05iBsyFxdp8eJbbjg2FETg=
Subject key identifier: C5:96:D4:2E:37:E7:02:4F:0B:FC:B0:6C:1C:1B:12:6B:4B:07:93:6B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0195C8AE6F4AD7D2A69C42691587E2026568
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/xZbULjfnAk8L_LBsHBsSa0sHk2s.roa
Signing time: Mon 24 Mar 2025 15:03:49 +0000
ROA not before: Mon 24 Mar 2025 15:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 193.233.100.0/24 maxlen: 24
193.233.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:ae:6f:4a:d7:d2:a6:9c:42:69:15:87:e2:02:65:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 24 15:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c596d42e37e7024f0bfcb06c1c1b126b4b07936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2d:ef:1b:e0:c6:6e:4d:b4:a4:75:d2:76:ae:
ae:b7:31:d5:4a:58:77:9c:54:9a:fe:9c:06:f9:30:
63:7b:0a:9a:e4:dc:da:44:9a:1c:43:82:e5:a5:cd:
17:dc:3d:d8:61:59:fb:7f:fb:dd:7a:4e:e2:15:b1:
2f:92:f9:75:5c:0d:51:53:f2:da:70:be:e2:15:98:
5e:a1:6e:e7:02:ef:11:c7:23:f2:7f:e2:d5:29:42:
19:6e:4f:4f:55:37:ee:09:f1:a0:3c:11:3c:ce:67:
ac:f9:ac:8d:ca:05:c5:e1:9b:4e:ea:74:82:9a:c2:
08:91:59:de:0d:32:66:dc:f5:9e:72:75:e3:ec:3d:
f5:52:1c:99:44:23:9f:9f:12:ca:0b:48:bc:7a:99:
49:93:53:01:89:a2:f0:4d:15:28:31:4a:c7:ca:35:
4e:f9:48:7b:08:ec:ed:86:5b:c7:5f:6f:49:95:dc:
12:68:f7:e3:81:c9:26:33:40:0d:ba:45:71:ac:d0:
d2:80:b4:6a:e3:a3:96:f1:74:ed:71:17:46:8f:f3:
59:13:c3:8c:b0:c5:48:c7:d2:f1:7c:06:57:a7:3f:
11:f3:f6:c1:10:3d:f7:78:ab:bb:0a:86:98:38:d1:
a5:c6:51:36:1a:86:1b:1f:6d:8c:99:47:8b:3f:88:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:D4:2E:37:E7:02:4F:0B:FC:B0:6C:1C:1B:12:6B:4B:07:93:6B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/xZbULjfnAk8L_LBsHBsSa0sHk2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.100.0/23
Signature Algorithm: sha256WithRSAEncryption
76:9e:50:9e:67:e0:75:d8:c3:42:76:21:c0:2f:a5:27:1f:5f:
28:3b:dc:62:e2:23:2d:c4:32:00:59:3f:3d:19:a3:a8:7e:25:
36:78:f7:53:66:8f:f4:ef:f4:ef:41:19:17:bf:ea:dd:bb:36:
04:f0:d5:fb:95:d4:12:c6:14:55:ec:4e:ea:9e:eb:25:4b:ef:
54:27:1f:54:dd:73:41:27:87:a6:bd:c1:a3:bb:cf:59:cb:19:
e3:e8:9e:ce:35:01:c1:89:14:87:9f:73:48:9f:16:fb:c0:6e:
13:1c:d8:9c:03:12:90:be:fc:00:d5:4a:f3:25:19:32:1f:1e:
17:a4:de:93:33:58:31:19:16:fb:8d:6f:ac:62:1c:e1:f9:15:
5b:e3:3e:a2:15:e1:d8:a9:a6:9c:bb:5a:bf:86:f7:a8:a9:80:
f1:a8:18:7d:5d:35:03:cc:23:3d:aa:6a:d4:96:eb:df:1f:1c:
4c:ae:46:70:ad:9b:25:dc:3d:bb:31:d5:bf:02:9d:fb:fe:5b:
aa:7d:a2:93:4c:31:d4:ac:34:86:d4:fd:ee:0c:cb:a9:81:82:
06:49:db:0d:43:c4:85:71:09:c8:88:65:e4:e4:e6:37:ab:4c:
51:1f:37:cb:e8:39:83:45:9c:76:f2:29:ef:92:16:37:e7:3c:
ac:20:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:06:11 2025 by rpki-client