Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/XBbgxMWarScTRKmllHFT97XXA6g.roa
File: XBbgxMWarScTRKmllHFT97XXA6g.roa (raw, json)
Hash identifier: jGOM1HteaFXcobI8xDtyTKSvDpxR3K91ns4yuEsO774=
Subject key identifier: 5C:16:E0:C4:C5:9A:AD:27:13:44:A9:A5:94:71:53:F7:B5:D7:03:A8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019362195EE0C0DDCEA66C4135A2CB9DC6C5
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/XBbgxMWarScTRKmllHFT97XXA6g.roa
Signing time: Mon 25 Nov 2024 06:54:10 +0000
ROA not before: Mon 25 Nov 2024 06:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214209
IP address blocks: 213.176.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:19:5e:e0:c0:dd:ce:a6:6c:41:35:a2:cb:9d:c6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 25 06:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c16e0c4c59aad271344a9a5947153f7b5d703a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:6f:28:c8:8a:b6:ba:4b:5d:a9:2b:66:62:
6b:be:3c:f6:23:7f:c8:e3:eb:f0:ae:30:51:0d:30:
56:0d:f3:d7:b0:c6:79:0e:e8:5e:c5:be:99:66:39:
69:82:6c:20:3e:bd:1e:60:01:3b:78:d1:82:01:24:
9a:ca:37:5f:67:b2:d0:59:4e:5a:48:59:0c:07:56:
16:c3:7c:1a:ba:bb:e0:e6:53:2e:c0:a4:61:8f:15:
86:ce:d4:0a:e5:5d:4e:aa:9f:24:63:a1:1b:7f:64:
ca:34:c0:66:fd:0a:77:d7:49:e1:47:34:19:55:b8:
e2:3a:35:cd:3d:34:76:84:3d:d7:a7:63:9f:ae:b6:
9e:3c:b7:66:36:7f:a3:49:69:59:d2:d8:07:c6:de:
3c:8c:24:08:85:85:7b:9c:eb:a5:02:73:6f:36:e3:
18:e5:6c:07:3d:98:09:7e:0c:6e:d6:a8:d8:6c:d4:
2f:15:56:aa:ed:96:87:24:a6:7f:93:d7:8e:44:21:
d4:7e:38:38:ba:8b:6e:71:a9:24:80:91:1e:65:53:
b5:86:87:25:c5:1e:c9:cf:1a:01:a1:0a:85:e6:69:
ed:d0:f6:db:f0:b6:5b:9a:82:7d:4d:dc:dc:52:41:
f0:c7:cf:33:b0:f3:c0:f6:1c:c0:05:28:34:a8:10:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:E0:C4:C5:9A:AD:27:13:44:A9:A5:94:71:53:F7:B5:D7:03:A8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/XBbgxMWarScTRKmllHFT97XXA6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:dd:6f:d5:ba:84:94:61:9f:13:c3:18:a4:ac:a8:1d:3c:2c:
4a:f6:05:3c:a8:83:a3:22:e9:bc:c5:88:70:61:51:30:23:27:
5e:b1:f5:78:76:1c:cb:a4:4a:0a:fb:f0:d1:51:fc:ae:d7:a8:
4f:49:9c:f9:5c:50:46:02:e1:f2:27:47:ec:e5:ad:1f:b4:ae:
4a:b6:72:0a:db:f6:90:44:d9:31:4e:bd:67:bc:5c:7d:a9:73:
5c:60:05:4c:f2:7a:23:97:2d:73:85:28:b3:33:51:9d:15:97:
53:9a:66:bd:87:5c:99:10:03:75:b6:2f:2a:30:a1:b7:3d:74:
15:f8:88:dd:91:1f:98:fb:0e:7e:6b:df:41:73:65:2f:9f:29:
a1:12:d6:c5:cf:ee:49:f3:b2:ae:ca:1d:46:d4:de:01:6c:85:
ad:a5:a2:87:89:60:96:e5:89:b9:54:6d:22:84:15:62:37:02:
08:71:e4:2d:03:4f:f4:21:d0:e2:e2:fb:10:84:9f:c2:36:ae:
74:9d:8f:b4:b1:8c:89:aa:0a:53:c4:bf:eb:41:59:16:08:14:
6b:fd:59:24:2e:30:e4:11:77:ea:cb:1b:97:75:e7:09:16:37:
4e:6c:1b:b3:eb:70:78:73:b4:c9:ab:d5:3c:9b:28:48:13:08:
cf:b4:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:30 2025 by rpki-client