Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa
File: XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa (raw, json)
Hash identifier: lSmShr06n6oTDTvfvIY+6+zA1Q+CWsMk4yBsQNB5LQo=
Subject key identifier: 5C:4C:18:6B:A0:8D:BE:42:C9:0B:92:C0:50:69:55:E6:C5:3E:43:B1
Certificate issuer: /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial: 019424B2896A5401175A5B6116A7134E7963
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa
Signing time: Thu 02 Jan 2025 01:47:47 +0000
ROA not before: Thu 02 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15550
IP address blocks: 193.25.224.0/20 maxlen: 24
2001:678:9fc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:89:6a:54:01:17:5a:5b:61:16:a7:13:4e:79:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Validity
Not Before: Jan 2 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c4c186ba08dbe42c90b92c0506955e6c53e43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:68:40:15:68:98:9b:a8:69:0e:da:e0:ee:
34:8f:a0:c8:42:cc:d5:31:ed:df:06:71:2b:05:d2:
ab:d8:96:3e:ac:72:84:2d:c6:e2:37:f3:48:a6:9c:
35:81:c4:3b:fa:dd:6e:9e:fd:ee:2b:ac:a6:88:e8:
b9:b5:72:f0:29:85:85:cf:6e:79:bf:74:d7:ac:db:
5f:fe:38:a1:8d:cc:e8:f9:b3:33:cd:c9:8d:b2:9a:
33:4f:36:f2:5c:59:82:b0:85:6f:8a:64:ea:b8:f5:
1b:67:e5:a6:b6:44:59:61:2c:c2:d6:ee:b8:da:df:
f6:24:0a:f0:90:cc:68:ba:3d:78:b6:09:f6:64:d2:
96:d1:d1:4d:2f:6f:a3:09:3b:02:5b:d2:9f:ed:6f:
59:fb:cf:62:02:83:79:aa:a6:80:60:10:22:ff:4a:
35:c5:a1:31:ee:5e:9d:bc:61:d0:e6:30:3a:81:18:
de:3f:d7:e1:d2:52:d2:c3:a0:d7:14:48:eb:c0:01:
fa:59:7a:28:08:60:3f:4a:68:32:3d:48:ef:f8:0a:
3a:4a:a7:cc:a4:2a:79:89:6c:39:3b:a5:be:b2:6f:
6f:e1:9f:16:e9:5e:0b:20:95:ff:de:11:4a:4f:bd:
76:dc:6b:22:71:cc:a6:d5:a8:e3:70:bc:da:36:d3:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:18:6B:A0:8D:BE:42:C9:0B:92:C0:50:69:55:E6:C5:3E:43:B1
X509v3 Authority Key Identifier:
keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.224.0/20
IPv6:
2001:678:9fc::/48
Signature Algorithm: sha256WithRSAEncryption
b0:8c:ac:53:dc:4f:33:21:91:4b:61:6e:17:5a:c1:40:e8:c3:
48:27:24:46:24:52:56:99:ed:94:53:2b:01:57:31:b8:93:bb:
25:db:4f:bb:a4:34:17:ea:3e:60:5a:9b:df:75:ad:66:48:72:
77:89:00:22:34:77:52:82:12:3c:d4:ba:74:1f:3a:a2:15:73:
cd:ee:41:1f:f5:ec:f2:bb:f5:ac:10:68:7b:a6:70:17:f3:15:
a4:ed:c5:dd:4b:e2:f8:20:f9:86:6b:44:7c:c1:ec:3c:b6:41:
83:bf:c1:3b:b8:78:c6:08:3a:6c:ee:d2:41:37:cf:88:e6:20:
14:52:f8:76:43:6d:f5:03:1d:a2:24:f6:6a:1f:c2:a5:ba:ea:
6d:9a:f6:84:ae:2b:73:85:91:2b:28:85:dd:00:6b:17:a4:06:
56:15:20:cb:af:0b:5b:c0:0d:c8:05:fb:db:5a:98:54:bf:02:
96:0c:1b:5c:f2:cb:23:f1:15:00:18:3c:c5:14:e8:f2:a5:4c:
cd:9e:87:f1:f3:5a:b6:0a:06:10:40:ba:0e:ef:72:d4:72:ff:
c8:6c:8e:44:3c:61:66:45:55:47:44:15:6d:bc:09:ff:c7:77:
91:6d:0b:53:59:68:ef:38:8a:c5:12:54:d4:81:17:c0:92:97:
c4:8a:68:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:28 2025 by rpki-client