Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/xPpUATuo6x_TiHKNsUsVBjITr-M.roa
File: xPpUATuo6x_TiHKNsUsVBjITr-M.roa (raw, json)
Hash identifier: vLUDpktK5pmwheuV6OBMHn9og5dmgKr8YGeA0/fTLzk=
Subject key identifier: C4:FA:54:01:3B:A8:EB:1F:D3:88:72:8D:B1:4B:15:06:32:13:AF:E3
Certificate issuer: /CN=be8c0a74f47312df298a46095e47525d515854a1
Certificate serial: 018444037BD660D574BDCDD1E7E43FCA9125
Authority key identifier: BE:8C:0A:74:F4:73:12:DF:29:8A:46:09:5E:47:52:5D:51:58:54:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vowKdPRzEt8pikYJXkdSXVFYVKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/xPpUATuo6x_TiHKNsUsVBjITr-M.roa
Signing time: Fri 04 Nov 2022 18:59:49 +0000
ROA not before: Fri 04 Nov 2022 18:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12963
IP address blocks: 94.232.211.0/24 maxlen: 24
91.197.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:44:03:7b:d6:60:d5:74:bd:cd:d1:e7:e4:3f:ca:91:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8c0a74f47312df298a46095e47525d515854a1
Validity
Not Before: Nov 4 18:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4fa54013ba8eb1fd388728db14b15063213afe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:d5:c7:f6:9b:b8:7e:41:fc:4d:24:b4:81:
d4:20:72:73:c5:af:b6:14:e2:ea:20:2c:77:72:cb:
a3:c1:e5:04:c1:8f:ef:83:65:32:3b:93:a5:fe:cd:
b3:17:a7:7e:ea:73:9e:ca:69:75:de:2b:d6:87:c1:
36:74:45:ab:5b:43:af:2a:41:9d:0d:85:c0:bb:76:
8b:8f:64:d8:a4:af:85:e2:23:52:0c:d1:c1:b5:fa:
c2:70:3e:a6:01:d4:fa:f2:fd:4c:af:c7:2b:a3:6d:
b4:3f:7a:c3:a5:75:7d:b9:07:f7:fc:d7:b8:d9:ef:
13:1a:10:cc:31:75:79:bf:5f:d0:08:59:4c:f6:e3:
8f:f6:cc:d5:9e:c9:39:49:b2:64:f0:ff:d7:52:25:
1f:c3:df:62:29:72:68:8e:d9:0e:d7:a9:47:39:15:
f5:2f:c6:0d:ba:4f:bf:e1:95:1e:40:8e:a4:bc:e5:
6b:19:a4:3b:77:3a:e5:c7:c1:b4:10:1a:a1:7c:16:
34:38:ad:57:22:3a:03:0f:5a:d2:26:d7:cc:06:eb:
80:28:1c:4a:07:ac:db:49:17:5c:0d:52:50:10:c2:
c8:a8:a2:28:24:c6:a9:1e:3b:44:3d:ff:49:1a:bf:
a7:17:42:c4:30:4e:01:cf:99:68:ac:6b:c2:d5:2f:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:54:01:3B:A8:EB:1F:D3:88:72:8D:B1:4B:15:06:32:13:AF:E3
X509v3 Authority Key Identifier:
keyid:BE:8C:0A:74:F4:73:12:DF:29:8A:46:09:5E:47:52:5D:51:58:54:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vowKdPRzEt8pikYJXkdSXVFYVKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/xPpUATuo6x_TiHKNsUsVBjITr-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.171.0/24
94.232.211.0/24
Signature Algorithm: sha256WithRSAEncryption
79:67:d9:69:96:9d:a3:8c:02:21:52:52:01:13:31:3b:d3:c5:
03:a8:ab:ea:7f:02:c3:f4:e3:1a:22:64:aa:3a:21:07:f0:c4:
77:34:e6:2b:f0:ea:2e:47:28:13:c7:12:06:de:7d:9e:d9:64:
eb:7b:b0:ff:8a:8c:6a:66:1b:0e:dc:f8:a1:7a:2e:78:7e:02:
31:71:1c:c0:df:1e:89:8f:15:f2:a5:6a:1d:ac:23:94:bc:25:
51:31:87:7f:f7:59:eb:03:f2:40:f3:ce:29:b3:84:3d:32:41:
b7:82:e7:f2:5c:e3:cd:d4:c6:e7:f1:cd:21:1f:ff:a6:c3:18:
35:87:72:1f:f2:69:28:1b:4a:05:da:7c:ca:0d:2c:40:03:18:
93:e9:22:df:59:4e:ab:63:70:32:71:ce:d5:20:4d:8f:c8:c1:
9b:7f:8c:af:b5:d3:56:ab:43:4a:a7:9d:57:4a:93:10:a5:24:
b8:20:7e:f0:4e:58:fb:71:1e:f1:75:29:6f:cc:11:e5:59:3c:
71:65:2e:ae:fc:86:b1:d6:b7:b0:9e:76:26:69:45:be:f8:d8:
cd:3c:1c:53:42:48:f1:a5:8f:43:ae:8c:4a:e6:f2:fd:b3:8d:
cc:b1:71:f7:7d:d8:f2:d7:63:53:17:9d:b7:ac:5d:b2:42:c5:
04:1f:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:47 2025 by rpki-client