Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/xqAfntM8EO1_30qa_gcEdVQoM7Q.roa
File: xqAfntM8EO1_30qa_gcEdVQoM7Q.roa (raw, json)
Hash identifier: 7euX35O1FDD/Q1odn5nV4beD52kMDqSTd112vOts20E=
Subject key identifier: C6:A0:1F:9E:D3:3C:10:ED:7F:DF:4A:9A:FE:07:04:75:54:28:33:B4
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019464F42D9618512864F7C07C35FA850740
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/xqAfntM8EO1_30qa_gcEdVQoM7Q.roa
Signing time: Tue 14 Jan 2025 13:15:11 +0000
ROA not before: Tue 14 Jan 2025 13:15:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201826
IP address blocks: 5.42.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:f4:2d:96:18:51:28:64:f7:c0:7c:35:fa:85:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 14 13:15:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6a01f9ed33c10ed7fdf4a9afe070475542833b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:91:8f:41:f8:3d:ca:5b:f3:81:09:f1:ce:
65:1b:57:49:c5:b6:a9:b2:19:62:13:1a:78:ba:83:
35:9e:00:02:aa:54:69:9d:fe:7e:d3:22:c0:2b:d8:
a3:5e:9e:a0:06:0b:c2:c2:0c:c7:e4:5a:ab:aa:d5:
63:d1:86:52:90:d0:78:d4:3a:a2:18:b9:a6:dc:2b:
f5:9f:d0:08:bd:dc:26:1b:57:b8:e0:fd:36:1c:67:
7a:b4:86:63:f5:de:9e:75:47:e1:6a:ae:fa:2b:f7:
c2:f5:62:b2:80:71:e7:aa:e9:34:49:90:1a:32:1c:
11:09:6f:66:99:5d:3c:28:ae:70:74:ed:4a:86:38:
af:7d:f0:77:64:71:d5:7d:48:61:4c:14:48:d5:6a:
09:31:62:c0:fa:7c:09:ec:fd:0e:ed:eb:d3:ba:94:
26:df:58:b9:51:a9:0e:9b:2d:8e:be:13:42:ed:d1:
5c:1c:39:01:b5:d7:f1:ea:7b:a1:19:28:57:61:96:
6b:99:38:d5:70:5a:48:b0:09:dd:26:b7:60:34:8d:
e6:11:f7:7b:8a:aa:fe:25:dc:02:ed:ef:dd:16:96:
37:ef:a3:ef:6b:2d:da:64:05:8e:34:0a:7d:11:51:
2f:cd:ed:96:00:b2:c5:b5:48:1f:0f:a5:f4:9a:ae:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:1F:9E:D3:3C:10:ED:7F:DF:4A:9A:FE:07:04:75:54:28:33:B4
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/xqAfntM8EO1_30qa_gcEdVQoM7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.88.0/24
Signature Algorithm: sha256WithRSAEncryption
21:31:3b:ea:fe:58:9e:bd:96:7f:0d:be:45:dd:70:ca:1d:56:
aa:1f:93:73:05:ae:b3:78:ac:ed:93:ca:6d:d9:04:3b:b5:1a:
96:53:c6:15:c9:3a:f8:4b:ad:8e:e9:c1:cf:f3:da:3d:6b:7a:
d7:a4:0f:00:bf:5c:c7:1e:37:5a:ff:78:37:0e:d1:d4:77:89:
12:3c:e9:ab:54:35:da:83:e2:1b:10:e2:cc:93:d1:e4:27:23:
b5:88:da:41:7f:df:05:57:ef:0a:76:0b:9c:dc:b8:a1:60:93:
43:75:c8:42:3f:13:3d:61:a6:15:84:cf:d1:8a:06:04:79:b4:
e9:c9:a4:39:14:4b:13:2a:24:0d:29:d7:45:f6:45:a7:fc:89:
71:db:aa:28:d0:f2:9f:e9:d5:b1:17:3c:72:82:a3:e3:7b:28:
a6:1d:49:aa:30:f5:5b:5d:56:aa:e8:f6:f1:2f:c6:7b:d3:70:
a9:e3:f4:52:17:94:2b:af:8c:06:17:39:8e:78:a9:54:75:d2:
f8:c7:b3:88:0c:13:9f:9c:e9:80:46:2f:70:99:1c:34:c6:55:
5e:b5:c8:82:d8:c1:1a:4c:a1:67:33:6a:92:fb:db:0a:f6:06:
c2:98:87:58:0d:3f:90:f8:11:96:80:60:e1:ad:52:5d:8c:76:
ef:3b:b5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:28 2025 by rpki-client