Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/Xvq5E9FjSgetaXURRKNVucLHpJA.roa
File: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (raw, json)
Hash identifier: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=
Subject key identifier: 5E:FA:B9:13:D1:63:4A:07:AD:69:75:11:44:A3:55:B9:C2:C7:A4:90
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 019422FBC6D6C4EDD01649954FE0CF984F1E
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/Xvq5E9FjSgetaXURRKNVucLHpJA.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47147
IP address blocks: 185.93.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c6:d6:c4:ed:d0:16:49:95:4f:e0:cf:98:4f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5efab913d1634a07ad69751144a355b9c2c7a490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:51:b4:30:93:83:f7:2e:4a:5e:48:19:53:
4f:1d:0d:34:32:9e:0a:ba:48:95:ce:89:72:f9:78:
3a:8c:17:f9:40:c3:d2:93:c2:d9:8d:fd:9e:b8:f7:
a5:a5:74:89:e5:48:9d:c7:74:2e:df:32:33:ec:75:
80:0d:24:31:df:72:ba:3f:81:c1:77:54:f0:40:75:
68:e3:54:24:66:a7:a9:e6:5d:2e:f8:cf:b4:79:ca:
0e:87:2d:9c:1a:99:82:3d:6e:41:c6:1a:9b:10:a6:
b8:27:73:ba:2c:7b:8b:ca:6f:86:69:a5:71:43:3c:
c2:40:2e:5d:ba:05:9d:1a:00:29:4c:08:08:a6:02:
e5:fb:91:c1:40:c9:2e:80:dd:b4:e6:a2:57:35:77:
37:a5:67:d6:dd:a3:97:11:b4:df:63:81:ce:7e:eb:
40:6c:fd:04:f2:74:c3:70:21:cc:ab:e9:71:f0:9f:
b7:69:59:ea:73:06:64:6f:b0:67:c1:d8:b5:16:7a:
ce:95:f9:d0:65:4d:0d:9f:02:33:77:b0:38:07:15:
cd:38:39:1e:9f:c2:cd:15:7c:96:75:a5:56:ea:86:
96:09:f5:d4:6a:e5:45:e6:38:4e:0c:30:e5:18:b9:
31:c0:28:76:e6:ac:87:fc:91:11:8d:1a:63:fc:60:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FA:B9:13:D1:63:4A:07:AD:69:75:11:44:A3:55:B9:C2:C7:A4:90
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/Xvq5E9FjSgetaXURRKNVucLHpJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.213.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:4b:9b:92:04:12:a9:32:e9:27:2e:c9:c6:9b:c1:54:a5:c5:
9a:d5:72:8c:0f:8f:9b:0d:24:be:13:8f:30:b8:4c:1e:0b:0e:
e8:0c:ab:44:7c:97:d1:10:ea:b7:88:33:59:ca:7f:ba:86:0f:
6b:fb:41:e2:1c:38:80:5a:d3:ed:19:0a:1c:03:c8:21:36:f6:
0f:c2:e4:dc:2e:b8:ee:43:a0:f3:e7:11:59:47:f7:1d:6b:a8:
0f:4d:e8:6f:70:c0:c1:3c:2e:5d:ae:2c:cb:aa:69:61:fb:8b:
50:08:dc:ea:00:39:8b:4c:5d:3f:52:41:ed:82:7a:96:04:99:
ce:93:cb:27:f1:13:88:94:fa:6e:37:0e:d5:94:82:bd:1b:48:
7b:37:4b:b8:35:a8:49:f8:15:6e:03:2c:f9:43:80:71:ed:be:
b3:95:0b:11:ec:77:69:1e:e2:79:36:0f:e4:8f:85:bf:e4:e0:
6c:96:aa:27:0b:b2:08:cf:bc:bf:f4:e9:be:44:83:1d:cf:cd:
51:5a:0e:01:e8:91:05:cb:c4:4c:67:82:6f:50:6e:37:ca:b8:
43:c1:8a:d2:15:fc:ed:8c:29:d9:8c:31:ee:aa:85:6f:c1:a7:
bf:77:91:9d:28:bd:cb:3a:d2:45:27:d8:b6:79:d8:bb:bf:2c:
d3:f1:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:21 2025 by rpki-client