Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/xswOfeFYQB8__QySjxBuBlaYjZE.roa
File: xswOfeFYQB8__QySjxBuBlaYjZE.roa (raw, json)
Hash identifier: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=
Subject key identifier: C6:CC:0E:7D:E1:58:40:1F:3F:FD:0C:92:8F:10:6E:06:56:98:8D:91
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 0194221FF47BD44EE3105718B2D15CCEB8A1
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/xswOfeFYQB8__QySjxBuBlaYjZE.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 193.53.128.0/19 maxlen: 19
193.53.128.0/24 maxlen: 24
193.53.137.0/24 maxlen: 24
193.53.139.0/24 maxlen: 24
193.53.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f4:7b:d4:4e:e3:10:57:18:b2:d1:5c:ce:b8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6cc0e7de158401f3ffd0c928f106e0656988d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:c2:3a:6d:b7:14:bc:5a:c9:99:11:e9:ae:
15:17:df:a1:b0:02:03:7d:81:cc:7a:97:f6:9d:3c:
d8:f5:e2:bd:cb:ba:37:a9:fe:20:68:f3:d0:7a:08:
02:c7:8d:61:83:be:82:56:11:18:78:4a:e2:07:58:
68:f5:d6:ae:da:b0:6e:8a:34:67:e8:3f:77:07:33:
77:92:cb:79:75:8a:59:cc:f4:28:15:31:39:b7:4b:
51:21:81:ad:29:cf:85:1e:89:14:d4:c1:ec:9f:f5:
7f:ea:54:cd:2d:1f:2c:bf:6b:1e:65:25:30:3b:4d:
76:d5:f7:d1:1f:53:17:b5:84:07:85:98:50:82:08:
a3:48:3a:7e:4f:3e:05:96:12:c4:9f:c8:4c:8c:1a:
b5:57:c9:e8:b6:34:8c:51:22:67:6e:11:f0:24:06:
18:17:24:34:f4:f5:cf:24:27:50:1e:d3:24:47:57:
ed:da:93:c3:33:7c:97:e1:34:2d:b5:c3:a7:55:93:
20:dd:1e:36:f1:68:2e:5f:9c:7e:5b:66:d5:c7:05:
fd:37:fb:92:64:6d:6c:22:00:44:b8:e3:16:e5:26:
34:0d:48:3c:a9:04:e5:76:2e:1f:95:fe:31:a9:86:
98:73:2a:de:76:7f:1b:7f:1a:dc:cd:19:a8:6c:88:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CC:0E:7D:E1:58:40:1F:3F:FD:0C:92:8F:10:6E:06:56:98:8D:91
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/xswOfeFYQB8__QySjxBuBlaYjZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.128.0/19
Signature Algorithm: sha256WithRSAEncryption
63:29:ed:2f:69:34:f7:85:e1:40:a6:ea:0b:b1:73:00:a2:ba:
36:bb:03:29:2a:71:85:66:e4:ea:d7:21:4a:10:6e:0e:72:f0:
61:dd:bd:65:68:76:48:d4:a0:07:96:73:22:85:b7:a7:be:bf:
e0:e5:4f:c7:46:b8:8c:9a:28:6e:ea:c5:37:89:ee:02:0b:37:
bc:0c:41:8d:a5:7b:b4:74:8d:c9:f3:de:f0:88:99:a9:db:68:
58:93:30:a4:49:0c:ec:64:21:42:a3:8a:d5:89:69:3b:bb:3f:
14:03:e5:4f:70:66:dc:78:cb:eb:94:31:86:fb:71:0c:ae:bd:
20:55:95:ea:3c:b9:1e:f1:7f:46:1d:9e:99:0c:32:7b:77:76:
ab:10:27:c1:09:63:b2:23:12:94:3b:e0:1c:1f:3d:0c:fd:50:
1a:08:ad:46:6f:af:30:83:56:4d:3d:22:7f:51:6f:09:95:b8:
ca:f5:c5:12:31:2c:0d:61:00:4a:70:a8:d9:bb:3c:ea:a9:93:
73:b2:92:4c:e6:e6:89:20:a6:62:12:91:e9:5e:7a:5d:b3:7a:
fc:26:89:ce:95:dd:ee:e8:84:20:3b:b2:50:86:05:12:3f:02:
4e:75:d0:1c:d4:3f:03:11:04:2a:8e:6b:a0:28:bc:77:bf:26:
b0:92:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:33:26 2025 by rpki-client