Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/X5JIC9unyCIdpKZJwQlA4lYc9cY.roa
File: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (raw, json)
Hash identifier: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=
Subject key identifier: 5F:92:48:0B:DB:A7:C8:22:1D:A4:A6:49:C1:09:40:E2:56:1C:F5:C6
Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial: 01942067C506C61598220DA2348626AFF4F7
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/X5JIC9unyCIdpKZJwQlA4lYc9cY.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59810
IP address blocks: 193.134.148.0/24 maxlen: 24
193.134.149.0/24 maxlen: 24
193.134.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c5:06:c6:15:98:22:0d:a2:34:86:26:af:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f92480bdba7c8221da4a649c10940e2561cf5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:31:9a:8a:5e:ac:ba:9f:34:2a:2d:f1:1f:
7f:9c:f9:2b:b1:4a:fc:4c:fc:bb:03:9c:58:e3:08:
07:e1:06:4a:75:01:56:60:d0:a0:20:0b:c1:08:f3:
5b:a3:58:aa:b6:d2:ea:93:b2:16:a1:b6:85:7d:29:
21:ad:31:44:af:d2:43:a0:7d:3b:26:a1:b3:59:85:
5f:2b:8d:02:42:f5:b2:ea:49:cd:53:a0:2a:d2:0a:
c1:02:e5:bf:61:9e:8b:3c:4a:32:3e:6b:1c:ea:c8:
f1:5a:7d:a3:a7:e0:d4:0d:74:19:40:24:09:a3:b7:
8c:51:f1:38:ed:a0:ea:39:7a:91:28:f2:de:e7:d4:
78:1f:2f:93:23:20:04:d0:1e:2c:7d:f3:99:29:c5:
ad:f3:3c:c3:9e:85:5c:79:33:b2:de:88:8e:69:62:
6d:80:81:ba:e4:a5:30:5f:2d:9f:35:b4:9d:29:0d:
fc:39:8a:00:91:61:aa:8b:2d:8d:45:ac:a2:b8:bf:
d3:71:3c:c5:fd:20:50:a8:f5:df:84:68:f1:06:19:
62:2f:2a:24:5e:bd:53:a2:ee:f6:a8:cf:59:d2:5b:
28:0b:dd:b2:64:15:52:fd:e8:68:8b:bd:99:54:f6:
fb:a5:bd:ad:19:1b:83:0d:84:45:de:40:16:93:ea:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:48:0B:DB:A7:C8:22:1D:A4:A6:49:C1:09:40:E2:56:1C:F5:C6
X509v3 Authority Key Identifier:
keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/X5JIC9unyCIdpKZJwQlA4lYc9cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.148.0-193.134.150.255
Signature Algorithm: sha256WithRSAEncryption
0c:cf:0d:c6:d0:12:75:44:c0:76:b0:40:87:dd:5d:a3:84:45:
bc:62:c4:f2:02:0a:45:6a:7b:1c:fa:b1:b2:8d:22:31:7c:e9:
75:01:46:47:b9:63:32:be:80:4a:31:70:0c:99:07:c6:99:a5:
4b:cd:da:39:ba:e4:5b:9d:d6:d0:aa:93:fa:70:52:82:85:cf:
01:39:f0:c7:12:43:36:6b:33:95:ae:a1:97:2c:cd:f8:a4:28:
45:eb:89:57:be:fc:bf:06:9f:b5:02:83:6c:f3:56:f2:4c:96:
4a:13:ef:c1:e6:4b:1c:d3:4c:29:08:05:16:90:dc:af:4b:2a:
1f:1c:d8:fb:a9:37:db:7c:a8:26:59:ff:ad:ef:cc:7c:a3:31:
f7:72:3d:be:62:c3:cd:bd:c2:25:2c:05:df:d9:fe:b4:31:9e:
ce:27:f6:b5:ca:b7:54:7a:f3:5d:32:45:cb:c5:01:20:ce:fd:
13:28:31:f4:c3:ef:75:67:34:81:80:de:de:54:e8:01:27:9a:
fe:36:74:a3:a1:b2:18:5f:0a:72:4e:d5:26:92:71:51:fd:62:
9c:bd:8e:b7:3b:e5:d0:45:be:1a:e9:49:d2:44:6f:e4:cb:b7:
3c:58:bf:7b:e1:fb:ea:93:a7:f4:1c:e1:15:41:f2:5c:ad:7c:
86:1b:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:23:29 2025 by rpki-client