Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XvWRD8TnLUOy4X7mp_10EmgsoiU.roa
File: XvWRD8TnLUOy4X7mp_10EmgsoiU.roa (raw, json)
Hash identifier: I0n+tjPCI/053zF7lxbq+2rWkTDyB6RyfKDd1KsKgpk=
Subject key identifier: 5E:F5:91:0F:C4:E7:2D:43:B2:E1:7E:E6:A7:FD:74:12:68:2C:A2:25
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50E9FBEB
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XvWRD8TnLUOy4X7mp_10EmgsoiU.roa
Signing time: Sat 01 Jan 2022 16:02:00 +0000
ROA not before: Sat 01 Jan 2022 16:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207539
IP address blocks: 193.5.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357511659 (0x50e9fbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ef5910fc4e72d43b2e17ee6a7fd7412682ca225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:55:57:e1:71:d5:34:95:d7:16:a0:cf:6b:
12:1d:63:55:94:d6:e5:d9:4b:22:89:b5:8d:60:92:
35:b1:ae:1a:0e:ce:47:2f:e1:6f:da:26:72:4a:92:
dd:cc:84:ba:34:9f:c2:57:22:4b:15:56:a5:a2:51:
03:f4:c2:84:0a:6a:fc:a3:ac:5c:c4:93:ea:97:a2:
05:94:b7:43:69:58:6d:fa:01:08:b8:2e:19:d0:da:
61:c1:da:59:7e:85:ae:be:2e:81:ac:e6:7e:a0:46:
47:5e:e5:0b:1f:cd:4f:ba:e4:94:69:58:f6:48:93:
83:1c:01:2a:37:2b:03:9d:dc:1a:77:16:69:51:6b:
c3:70:8a:06:c7:42:c7:27:2a:8b:e0:71:c5:fb:f2:
8b:f6:19:3b:3f:a9:f1:81:c8:17:dd:dc:5d:27:e3:
92:80:f0:ed:0e:75:2c:c5:e3:ad:a3:4a:f7:53:19:
18:69:aa:d1:d2:2c:3a:3d:dc:5e:6b:2b:7d:ef:b7:
5b:82:69:6a:d2:68:c6:33:dc:ac:62:9a:a4:22:e7:
d6:ae:8d:4d:ab:a5:e3:d6:1f:32:50:6a:60:99:80:
91:21:70:fe:8e:dc:fd:ad:a2:b9:15:7b:53:78:c9:
29:9f:3f:cc:74:7b:42:d9:91:aa:a4:48:ca:28:93:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:91:0F:C4:E7:2D:43:B2:E1:7E:E6:A7:FD:74:12:68:2C:A2:25
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/XvWRD8TnLUOy4X7mp_10EmgsoiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.63.0/24
Signature Algorithm: sha256WithRSAEncryption
48:70:39:50:20:e9:19:81:7e:e2:56:8c:4b:a9:35:94:b9:55:
9b:da:3f:72:41:3a:3d:42:cb:95:96:fb:99:b0:bb:1e:45:75:
bc:06:b2:4e:b6:1e:6a:91:e0:7a:73:49:08:b5:13:be:27:5a:
16:91:8b:09:66:b6:c5:f9:13:59:f5:53:12:54:84:4e:ac:4f:
58:3f:1e:e9:e8:c3:1a:d5:69:b0:0c:9e:8f:2e:d8:cd:44:87:
ae:be:7f:9d:51:ef:d0:2f:84:fd:7b:be:6b:e5:de:4f:59:ce:
22:07:e2:cc:99:be:10:cf:38:dd:ee:1e:9c:f1:ec:c1:2d:dc:
02:2a:df:83:3b:b9:a5:01:f4:38:74:1a:da:91:97:f8:7d:6f:
f5:43:58:55:cc:f7:2a:db:bd:e9:74:d7:7a:6f:f5:ba:31:30:
2f:22:f8:7f:b1:48:10:12:0c:73:84:bc:18:e1:48:24:eb:6d:
92:3a:60:25:10:d6:29:71:e9:44:c1:ce:89:02:be:13:c5:38:
fe:e8:87:77:b9:44:b0:91:75:17:bc:f8:36:5b:fa:c6:59:f5:
35:14:4c:67:4f:05:31:3b:fc:ac:de:71:43:32:41:ca:c3:49:
0c:60:f8:62:75:9c:e9:e6:2c:24:d5:a1:ca:13:10:b2:a2:d0:
f5:38:44:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:00 2025 by rpki-client