Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/xe-KS40JXwA4DSnnilL2aYekU18.roa
File: xe-KS40JXwA4DSnnilL2aYekU18.roa (raw, json)
Hash identifier: trUq9aYHMLBwRD59FTvYVzHcchsIZi2f2vJplQh7+rM=
Subject key identifier: C5:EF:8A:4B:8D:09:5F:00:38:0D:29:E7:8A:52:F6:69:87:A4:53:5F
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01942067F7BB597E193951D45052969CD0B2
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/xe-KS40JXwA4DSnnilL2aYekU18.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 92.42.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f7:bb:59:7e:19:39:51:d4:50:52:96:9c:d0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5ef8a4b8d095f00380d29e78a52f66987a4535f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:cc:5a:59:72:8d:c3:74:14:cf:05:76:f2:
fa:dd:5e:fe:7d:1b:5f:29:63:77:3e:14:d8:3e:0f:
d3:f5:b6:f0:e1:be:06:fe:83:7d:88:87:c5:c9:6b:
89:e9:da:6f:d2:36:ec:2d:a4:96:4e:5d:a4:2f:6d:
f8:b8:76:36:c3:23:4e:31:68:c8:24:39:51:72:2b:
56:1e:60:6f:ee:9a:4e:ad:c2:11:12:b1:70:81:3e:
65:56:07:52:a2:3e:69:91:a8:47:ab:1a:63:d6:1f:
14:be:33:44:da:cc:6c:d1:92:75:dc:f4:0b:a6:37:
36:12:34:9b:3e:13:7e:36:6b:8e:0b:ba:65:10:04:
14:a8:54:4d:1d:99:5c:ea:e3:24:0d:88:ab:8c:34:
3d:da:74:42:ea:a3:1d:01:fd:e3:94:9f:7c:46:3a:
1e:15:0e:26:a5:c8:f9:9a:b5:6d:71:0d:6b:71:28:
25:2f:42:6b:8f:39:e8:01:c2:96:ca:49:e3:ca:20:
ea:42:58:f2:da:48:9c:c8:3a:00:c5:de:3c:3e:dd:
00:ce:88:d7:7f:81:39:c8:bb:4a:c1:df:15:a9:bc:
59:ca:28:7e:b3:5b:7f:c2:28:0a:12:4b:f8:05:ab:
81:3b:82:c6:2e:3a:e7:25:b0:af:a9:38:4f:18:f4:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EF:8A:4B:8D:09:5F:00:38:0D:29:E7:8A:52:F6:69:87:A4:53:5F
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/xe-KS40JXwA4DSnnilL2aYekU18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.96.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b0:e4:3f:de:2c:30:28:fd:0c:d2:9d:fd:04:15:8f:64:5c:
0b:f8:a1:70:e6:7c:72:f1:36:5e:57:9e:d5:89:77:6c:be:ab:
c8:ce:09:ee:9b:20:97:c1:c3:13:1c:e5:e6:dd:5c:21:c5:ad:
10:0c:9f:cf:76:0f:b9:5a:7f:f8:e5:3e:e4:26:b9:a8:71:46:
0c:e3:76:ba:80:b0:7b:a9:21:22:7c:9a:65:c0:e7:21:01:9a:
8a:cf:b4:05:97:c0:61:4e:88:c1:aa:40:2d:5b:97:b3:df:b5:
8b:e1:0c:f3:22:1f:b0:ec:fd:da:21:f5:67:6e:fb:8c:a0:ff:
81:9e:73:d4:7d:6d:66:3a:bd:ee:c3:9a:5c:37:2f:d6:93:bc:
b7:18:64:a7:8c:d6:ac:1f:f8:d7:e5:13:63:a5:ee:60:b5:2c:
74:fb:84:92:94:6f:56:95:93:15:2f:73:86:ff:17:11:95:8e:
19:8d:c2:e5:cd:66:6e:d2:7f:86:cc:c0:08:f8:e1:e4:dd:8b:
ba:13:29:62:4b:2a:ea:b6:3b:8c:2b:7a:25:bf:3a:2d:00:b5:
2a:10:9d:a7:0f:53:33:c4:bf:b7:d0:b8:eb:3d:6b:c6:96:4a:
14:0e:21:fc:4c:de:a4:d1:ba:ad:30:6c:c7:e0:db:dd:b4:d7:
3e:4c:00:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:21 2025 by rpki-client