Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/xk57NMD7hAx5NjNNvtBpMWNGREE.roa
File: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (raw, json)
Hash identifier: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=
Subject key identifier: C6:4E:7B:34:C0:FB:84:0C:79:36:33:4D:BE:D0:69:31:63:46:44:41
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 019420687383FFC3A153333CE9675C976486
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/xk57NMD7hAx5NjNNvtBpMWNGREE.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210377
IP address blocks: 93.93.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:73:83:ff:c3:a1:53:33:3c:e9:67:5c:97:64:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c64e7b34c0fb840c7936334dbed0693163464441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:45:ae:58:dc:01:d0:96:eb:eb:74:c9:f7:
a4:b2:47:d0:14:47:ff:64:5a:d0:63:d5:f1:b1:51:
b7:11:9b:00:c4:62:c8:1f:d7:79:05:6a:5c:ca:5d:
40:ff:12:50:ac:69:c8:87:65:ca:46:07:ea:d4:a8:
94:08:18:89:1c:fb:f2:9a:d7:77:da:61:02:cd:00:
99:70:88:f2:d7:b7:d6:48:75:be:ef:92:61:d1:32:
a6:ba:9c:41:49:41:db:13:0d:b4:1e:a9:12:95:37:
ae:96:17:1e:ca:31:0e:cb:08:26:bd:69:5b:a2:57:
81:18:d8:8c:ce:3e:1f:fc:6a:f1:2d:e9:0d:eb:78:
4c:03:a6:99:23:a8:6f:5d:7a:bd:a9:03:99:3b:73:
83:2f:6d:d8:4c:ce:01:4d:5f:cf:80:b2:31:84:08:
3f:82:43:af:d0:84:b6:6c:19:ab:e9:6e:c6:12:57:
49:a2:3c:f4:56:e7:1d:79:07:8f:a2:de:9b:3f:4f:
7d:1c:15:db:8f:04:0d:d2:7a:ae:4e:bf:3d:5e:fa:
73:a8:84:b8:ba:9a:26:4d:35:f1:f7:70:51:25:af:
77:00:f4:ca:99:37:01:f8:ca:68:58:8a:72:3f:67:
15:15:83:e0:a6:7f:7a:fc:29:6d:38:45:55:b3:4e:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:7B:34:C0:FB:84:0C:79:36:33:4D:BE:D0:69:31:63:46:44:41
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/xk57NMD7hAx5NjNNvtBpMWNGREE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:6b:20:76:4a:9d:b9:77:fc:26:fc:ac:fd:6e:0d:f3:55:97:
79:3d:79:dd:b2:df:a0:17:65:b4:e6:65:fe:73:2b:e3:1c:2d:
f6:32:3f:c3:50:ee:e6:e9:17:53:79:a4:20:a8:71:a0:39:57:
be:8e:fa:7f:f9:7c:2b:b0:73:aa:2c:23:3e:57:f8:7c:2c:aa:
43:51:9f:b2:04:e7:4a:33:c9:2e:7e:6d:af:cf:ad:d9:28:b0:
48:2e:9f:b4:ee:0c:65:c4:8a:91:77:6b:d8:5b:e0:b9:64:ad:
b3:53:e3:a2:3a:6b:98:cb:0a:05:15:3c:70:e8:21:da:aa:c5:
46:34:13:25:c6:24:b0:01:8c:06:e8:1e:03:7c:c0:fa:32:a9:
53:71:b4:1b:ab:d5:26:ad:79:67:06:40:8c:f3:b9:8b:9a:cb:
03:8b:e7:43:2b:b6:84:2d:85:03:83:7f:a3:20:cc:1a:a3:90:
a0:bf:09:12:74:79:99:c5:76:d5:ed:e4:62:77:e6:a9:1d:60:
1c:33:3a:3b:18:7c:c2:ca:9f:04:49:0c:ad:13:58:0c:9a:71:
d7:f3:a8:eb:15:bf:d6:2d:7e:b7:ca:e4:4a:eb:20:74:e5:08:
e8:ba:ba:bd:79:bc:a6:e2:35:87:38:be:56:6b:25:19:88:ee:
d9:97:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:25:51 2025 by rpki-client