Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XZEhQSppLNAFoq1TJQpe4-ZE6g4.roa
File: XZEhQSppLNAFoq1TJQpe4-ZE6g4.roa (raw, json)
Hash identifier: FveQCZY60q5DaODwqixTIUl8g/SMBrsqcQw4mb/jgwQ=
Subject key identifier: 5D:91:21:41:2A:69:2C:D0:05:A2:AD:53:25:0A:5E:E3:E6:44:EA:0E
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 0195AF570357BF3A157D1329EE8738EEE5CE
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XZEhQSppLNAFoq1TJQpe4-ZE6g4.roa
Signing time: Wed 19 Mar 2025 16:57:50 +0000
ROA not before: Wed 19 Mar 2025 16:57:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57370
IP address blocks: 193.5.224.0/20 maxlen: 24
193.247.166.0/23 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:57:03:57:bf:3a:15:7d:13:29:ee:87:38:ee:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Mar 19 16:57:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d9121412a692cd005a2ad53250a5ee3e644ea0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:bb:e2:b0:fb:bf:32:73:4a:46:bf:90:9c:
cb:c9:1c:b7:05:ec:e5:71:83:fe:ea:0d:52:39:f7:
99:5f:71:14:7e:1d:f6:c4:6f:84:09:da:d2:d4:fa:
5e:fc:ac:23:8e:73:5c:42:af:b1:21:5c:09:32:4f:
c9:23:27:d8:42:80:ad:6f:5a:11:c3:2d:3d:83:12:
e6:d6:57:3f:14:4c:3f:b5:2a:d6:76:6b:3f:ea:8b:
11:8e:a5:72:2d:0d:f8:4c:40:6d:57:5b:5a:fb:6d:
f9:fd:77:ed:8d:17:9a:e0:ac:3d:a4:e0:3f:bf:2b:
4b:c3:27:c4:ba:05:14:bf:26:fb:48:93:ee:57:f2:
48:cc:47:f2:74:6d:6e:1b:b1:0a:9d:a6:7f:16:15:
00:e3:91:d8:63:f6:a4:10:f8:41:49:65:64:e4:8e:
b0:b5:2b:9f:f0:ac:00:58:0b:d5:88:59:e9:f7:70:
08:7a:f2:5a:87:44:5c:66:44:74:1e:00:61:8f:87:
3b:87:69:5a:02:0a:c5:c0:99:35:cb:89:e2:cf:73:
65:16:4d:a0:2b:32:32:dd:64:e2:e2:f1:dd:05:4d:
c0:ce:f0:96:88:15:c0:39:db:fd:08:69:3f:cf:a6:
26:4c:e0:a7:3f:fd:78:b6:e3:0c:65:fd:83:2e:f3:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:91:21:41:2A:69:2C:D0:05:A2:AD:53:25:0A:5E:E3:E6:44:EA:0E
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XZEhQSppLNAFoq1TJQpe4-ZE6g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.224.0/20
193.247.166.0/23
Signature Algorithm: sha256WithRSAEncryption
13:14:a1:54:9e:b7:51:4d:6f:c3:f1:d5:e6:98:41:be:c0:54:
53:ed:19:30:8c:fc:93:20:91:66:0b:36:dc:c2:93:0b:5e:d0:
fa:82:37:08:b2:31:77:3c:14:ee:35:ce:c9:63:f7:62:cd:f8:
00:84:c3:88:44:b4:41:2b:cb:a9:49:42:ba:be:a9:bb:e4:77:
f7:66:8a:44:a7:d9:ea:7f:49:4d:6e:f9:e3:e0:c3:41:9e:b3:
29:9a:07:62:16:8b:50:0b:9e:93:d1:04:da:fb:c0:b1:34:c4:
5f:2c:96:e8:b9:17:2a:67:e5:14:b6:f1:51:ec:ec:de:84:ff:
00:f8:1f:93:42:6a:93:13:8d:6a:29:04:80:40:7d:e9:40:4d:
a2:a4:2a:24:cc:ca:31:bd:6c:6e:21:b9:9e:5b:86:5e:a5:af:
a8:c4:fc:42:53:91:da:44:cd:e0:4a:3e:f7:6a:7d:74:98:1e:
fa:c7:ed:ee:30:32:f4:13:d6:7e:fd:7f:50:65:44:7c:b3:c5:
71:c1:26:2d:38:cf:cb:f9:4d:31:1a:03:2e:b4:de:a3:e4:84:
a7:85:69:9f:02:49:ae:41:36:9a:1b:b5:a3:22:6b:c7:51:26:
d1:42:87:02:a9:72:fa:1e:ad:cc:4e:39:5e:9e:b8:71:7c:ff:
14:5a:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:46:04 2025 by rpki-client