Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/XBaLBgo5USmdlF-l0aEKQxl9py0.roa
File: XBaLBgo5USmdlF-l0aEKQxl9py0.roa (raw, json)
Hash identifier: hEaUXhlfbKByTyvw8lFuKxSyS5YkuHXmWhmYOu4395Q=
Subject key identifier: 5C:16:8B:06:0A:39:51:29:9D:94:5F:A5:D1:A1:0A:43:19:7D:A7:2D
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB5262A3B0CBAA86A6321056AC288
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/XBaLBgo5USmdlF-l0aEKQxl9py0.roa
Signing time: Thu 02 Jan 2025 07:48:25 +0000
ROA not before: Thu 02 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201908
IP address blocks: 212.91.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b5:26:2a:3b:0c:ba:a8:6a:63:21:05:6a:c2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c168b060a3951299d945fa5d1a10a43197da72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:78:2c:61:69:6b:12:67:9e:11:fd:f7:24:
16:8c:09:a3:54:db:72:cc:1e:fd:86:2e:e6:76:85:
e9:11:d2:91:a5:c0:81:fe:0c:c3:b9:d2:50:d9:a9:
90:8e:15:4f:d5:99:b4:d8:84:d6:50:86:97:89:8a:
3e:ff:45:e6:1b:9c:8f:61:d2:53:7e:b2:2d:c4:f9:
ce:60:62:51:df:51:93:87:cb:c5:78:14:bb:4b:3e:
ed:85:87:b2:9a:58:85:dd:e1:66:20:5c:9d:08:5e:
aa:30:b9:97:de:44:25:23:25:f2:cd:c3:26:28:5e:
2c:1c:1d:c2:bd:e2:42:0b:bb:ff:07:2c:e5:5b:51:
bf:42:65:9c:ed:1e:d2:98:c4:d7:aa:75:3b:42:d1:
fb:20:0f:08:17:cb:62:4a:77:8e:cd:9d:2a:ef:cc:
d7:81:64:4c:9f:75:8c:13:50:f4:41:76:75:aa:b6:
e6:7f:21:ae:75:32:5d:0d:ae:68:fe:0d:01:34:86:
2d:c0:49:75:aa:a9:2b:b2:19:67:51:a9:90:a7:2c:
e3:ca:ef:d8:51:67:3a:1c:dc:59:13:b7:fd:57:04:
9c:7d:19:cc:e0:85:70:b5:9e:7e:f1:42:16:6c:3c:
23:3a:5a:5c:8d:cd:ce:56:1e:39:a4:6f:39:56:9a:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:8B:06:0A:39:51:29:9D:94:5F:A5:D1:A1:0A:43:19:7D:A7:2D
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/XBaLBgo5USmdlF-l0aEKQxl9py0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.30.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:b3:77:13:86:8e:d2:47:89:46:59:af:69:0d:f1:fd:74:28:
4d:09:10:1d:33:54:03:37:24:8a:89:3f:64:99:bc:78:86:3b:
ff:9c:aa:16:06:1a:87:9e:52:37:5a:e2:8d:87:2a:55:aa:36:
8f:63:98:fa:0d:27:6a:38:02:9f:ca:7b:90:74:23:02:d4:5f:
99:92:a7:00:15:d2:d8:57:ad:d7:df:3c:4b:14:6f:72:e6:eb:
1f:b9:62:a4:90:33:d1:e3:1e:0f:17:86:47:f3:e1:4e:d7:a8:
c0:de:64:de:6a:2a:50:19:d4:7b:2f:bb:5d:15:6e:22:ff:68:
fb:d0:f2:14:13:d3:01:b9:68:e6:91:91:a2:bd:fb:88:9d:b7:
a2:00:cd:13:2a:fb:12:5e:a3:04:79:4a:1e:1e:8d:93:ee:ec:
fe:ba:de:f8:d8:1f:30:0a:c5:1e:ec:24:fb:21:0d:22:91:2c:
78:63:4f:c3:db:20:27:57:3f:2a:0b:42:ca:8b:07:fa:6f:69:
93:9d:8a:be:2a:2f:42:8d:a4:ea:e3:c5:41:c2:7f:e5:2e:39:
2c:9a:31:33:32:f9:ff:fb:5c:af:27:1d:cc:6b:a6:a1:d2:24:
9c:ae:56:03:dd:72:99:a0:13:8d:e3:12:04:6b:c7:c8:be:9c:
d1:ca:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:26 2025 by rpki-client