Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xpX6hcRMPz87CNu8WZKKgI6VmHc.roa
File: xpX6hcRMPz87CNu8WZKKgI6VmHc.roa (raw, json)
Hash identifier: 2GtFRUTOon6G4VNM6WyrbperIlxaZ7rGbYCzZWHktHU=
Subject key identifier: C6:95:FA:85:C4:4C:3F:3F:3B:08:DB:BC:59:92:8A:80:8E:95:98:77
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0194206873609A1ECCAE0775BE86E6847475
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xpX6hcRMPz87CNu8WZKKgI6VmHc.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50868
IP address blocks: 89.23.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:73:60:9a:1e:cc:ae:07:75:be:86:e6:84:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c695fa85c44c3f3f3b08dbbc59928a808e959877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:c7:c4:94:a8:0b:8e:c7:3a:82:ee:ca:3a:
18:3b:7f:f0:aa:1b:55:65:70:5a:c8:ff:8e:93:3d:
8d:04:de:f3:ea:2a:1d:4b:d3:12:37:00:0f:c6:46:
a3:1d:d9:50:bc:7e:c4:cf:d5:62:66:25:ce:25:de:
9e:c3:46:b5:07:4c:9b:c6:cc:8a:e0:25:e5:90:d5:
09:cc:de:c3:28:90:ef:41:1d:af:fd:f5:ce:f6:aa:
11:db:14:82:68:59:09:e8:fd:df:81:56:51:c4:30:
36:d0:b5:9c:8e:c8:88:64:3a:55:ee:41:e0:f6:b7:
ea:18:51:d0:ba:5f:9d:36:0c:f6:70:82:b2:24:94:
a6:f0:0b:93:e7:bd:46:58:20:56:34:c6:6c:67:1f:
bf:8d:21:a7:06:42:87:29:c0:84:a2:dc:05:9b:4a:
3d:10:1c:de:57:77:ab:52:e4:08:8b:52:95:22:c9:
e7:56:ac:31:31:9c:06:19:77:a0:87:ac:00:52:b0:
2f:4f:1b:97:45:d2:10:06:58:ac:b9:b6:55:54:2a:
4f:97:0c:db:36:8a:ba:8b:9c:69:07:3e:96:12:68:
bd:b7:5d:e7:59:e9:4b:a3:33:f5:6d:04:1c:c4:3d:
31:4b:92:d5:ac:0f:45:7f:a2:5a:d5:a3:bf:d8:bc:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:FA:85:C4:4C:3F:3F:3B:08:DB:BC:59:92:8A:80:8E:95:98:77
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/xpX6hcRMPz87CNu8WZKKgI6VmHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ad:4d:aa:ed:30:14:1e:fc:98:03:59:1d:49:8b:9b:b8:19:
8c:30:27:3b:55:35:57:97:cf:62:66:27:41:cb:ad:58:86:82:
e4:5b:88:1e:e8:1c:0f:86:65:2e:e3:3e:a3:78:09:35:ea:9c:
63:b7:a0:4a:f5:e7:d4:8a:77:ab:ec:76:0a:81:a3:98:81:a5:
71:a9:82:44:e2:31:df:e4:10:45:b1:83:a8:94:97:86:fb:d9:
47:11:c1:be:71:b9:7c:77:71:94:1c:71:97:49:b0:31:f6:29:
c1:da:66:97:75:3e:80:87:fd:19:11:78:d4:df:94:3c:dd:ce:
b5:2c:20:d1:69:6c:c1:64:3b:b0:5f:7d:f1:67:28:d5:45:9e:
95:12:7b:fb:04:1c:c5:44:06:1c:b0:1a:2f:80:1c:08:21:59:
40:12:54:e2:b1:7d:e2:f2:83:cb:f2:d2:13:16:72:b7:56:23:
e5:88:ef:97:a9:48:56:bd:22:3c:5c:c8:25:fb:7c:19:7c:12:
32:d8:33:7b:94:97:45:dc:45:74:ba:b6:01:42:0d:0c:fe:7a:
56:b3:d5:76:95:c6:f5:df:fb:a7:73:69:e0:d6:85:c9:48:b8:
fb:c5:e7:c3:dd:d7:c7:1c:7c:e5:1c:10:6f:1d:42:ac:98:63:
a4:ea:84:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:44:24 2025 by rpki-client