Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/XjMajGyPm-MIp-J2DNxOgRzvWfw.roa
File: XjMajGyPm-MIp-J2DNxOgRzvWfw.roa (raw, json)
Hash identifier: gub0XZM8jTp+LQ6+n9LmVxTutfIUJCyzvEI/9cXnUgQ=
Subject key identifier: 5E:33:1A:8C:6C:8F:9B:E3:08:A7:E2:76:0C:DC:4E:81:1C:EF:59:FC
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FEEB6CF0E72EF53C9E1365F6A1E99
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/XjMajGyPm-MIp-J2DNxOgRzvWfw.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 207.244.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ee:b6:cf:0e:72:ef:53:c9:e1:36:5f:6a:1e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e331a8c6c8f9be308a7e2760cdc4e811cef59fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:74:67:8d:22:4c:5e:eb:ca:27:4a:c1:f7:90:
44:1e:8a:2b:3b:cf:83:ad:8e:1d:c9:68:9f:1b:ad:
33:a6:d1:7b:4c:7e:e5:52:05:9c:9e:ca:40:d2:4c:
f8:4b:33:95:c7:1c:ef:9b:66:a3:ae:d4:c7:55:f2:
7a:e3:b4:b8:ff:3e:db:79:18:7c:eb:e2:c9:08:4a:
b6:7f:24:dc:c7:e3:19:19:8c:93:37:9d:60:83:c2:
20:09:a4:21:61:e8:e3:2e:bb:4d:94:77:20:14:6d:
9f:4c:f2:4c:3b:1d:38:bc:97:55:bc:d6:d7:19:03:
23:c9:bf:62:15:cc:7c:79:11:2a:34:1a:79:61:ea:
7d:ca:bc:b5:24:bb:1f:2e:ba:67:e8:59:1a:64:04:
81:31:57:d9:21:c1:de:8e:48:b4:f0:9d:fc:b0:49:
6f:b5:24:d9:d3:d0:80:7f:b4:2b:d7:0f:27:50:9d:
b5:a3:d6:8d:41:74:86:70:67:09:dd:62:9e:e6:64:
41:82:06:c1:09:d6:e1:d7:53:79:89:53:93:9a:51:
03:59:25:45:b9:15:fe:7e:a9:e1:43:80:65:76:78:
e3:64:69:02:64:ac:d2:d2:51:9a:0d:3e:33:ee:9e:
fc:32:5e:5d:11:8e:c9:55:9a:cb:80:8e:47:65:1f:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:33:1A:8C:6C:8F:9B:E3:08:A7:E2:76:0C:DC:4E:81:1C:EF:59:FC
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/XjMajGyPm-MIp-J2DNxOgRzvWfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b9:c0:8c:d9:09:09:d7:40:76:5d:88:a0:70:ce:ac:94:73:
01:8e:64:0e:b9:8f:f0:d4:96:66:3d:cb:de:42:cf:9f:0d:68:
a0:b2:68:90:1a:71:32:c6:4f:2c:99:8f:6c:69:a9:86:41:27:
28:f3:6e:cb:1d:a7:42:f7:54:d0:3a:1c:d8:cf:e4:77:38:23:
d1:7d:24:15:84:f0:e5:33:74:e4:b1:80:66:2b:70:a4:fd:93:
50:1f:48:cf:18:c5:2f:f2:4a:37:d8:c9:ba:de:c4:12:c3:a2:
7d:bc:a8:6c:3c:d1:ae:c9:52:57:23:50:c3:51:63:2c:74:b4:
87:e8:0e:63:3d:db:28:de:b0:b2:1d:d9:74:c6:ca:c4:61:10:
70:c3:6c:00:ef:9a:d0:cc:a3:34:6f:f0:a7:64:cf:2a:d6:ee:
6c:f0:7a:6d:e7:bc:0c:42:46:d1:b0:d1:6d:bc:cb:b5:d8:44:
ea:f8:ba:78:16:2e:40:5e:9c:6a:23:10:be:dc:0a:44:72:2c:
ea:58:b2:f3:11:56:eb:4d:07:c1:63:cc:11:2e:96:64:ab:1c:
97:cc:11:8c:62:5a:07:f6:e4:83:00:7b:1a:99:85:f7:7d:6f:
ec:b7:5e:ae:72:84:b8:fd:ab:1d:4b:0d:58:29:e6:bd:a1:d8:
e0:7e:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:35 2025 by rpki-client