Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xpabcv-GmRMy8iRuVXS-j8ziNUQ.roa
File: xpabcv-GmRMy8iRuVXS-j8ziNUQ.roa (raw, json)
Hash identifier: Vul/MsxE0fps9Z3VfIZva1MCFE6yVaKD5TbQVGLGryI=
Subject key identifier: C6:96:9B:72:FF:86:99:13:32:F2:24:6E:55:74:BE:8F:CC:E2:35:44
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BED7117458F15837D22E5441463FB
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xpabcv-GmRMy8iRuVXS-j8ziNUQ.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202133
IP address blocks: 193.192.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ed:71:17:45:8f:15:83:7d:22:e5:44:14:63:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6969b72ff86991332f2246e5574be8fcce23544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:b3:be:21:04:e6:33:45:dc:42:f3:ab:92:
69:6b:fd:3b:cc:83:7c:6f:f5:5b:6a:d9:93:46:0e:
f2:02:23:11:f2:79:20:d6:57:99:75:f5:79:25:34:
b4:68:e9:58:10:df:b6:ff:71:d5:9a:7e:e0:1a:51:
62:8a:f3:60:8d:af:a9:fe:c1:1f:b2:27:d1:35:4f:
bd:9b:97:39:02:35:55:65:4f:5c:a8:6c:49:25:c0:
42:26:4a:f8:24:1c:ec:41:92:ef:ee:ff:6b:bb:a2:
b9:30:31:c8:2a:1a:75:b8:60:be:5f:3f:ef:94:1c:
03:0e:78:1c:5f:46:2b:f3:1c:07:83:07:34:f0:79:
bc:46:67:57:9c:73:10:05:cf:eb:b6:e8:da:8e:cf:
ff:d7:34:74:54:aa:fc:1e:c1:71:aa:f1:1b:4d:11:
a9:0e:c5:9b:0f:b4:4a:72:ad:40:ab:16:c2:78:90:
76:1a:54:20:7d:1c:ac:79:eb:10:06:7d:7f:3c:36:
1e:f6:08:47:be:eb:97:eb:95:dc:c8:b0:19:df:83:
11:b9:9e:0f:37:ff:2e:72:d4:3a:59:1d:16:3b:8b:
2e:1e:e7:1a:12:b3:89:64:0c:6c:4b:a4:ed:ca:ea:
e0:90:15:2e:23:dd:f4:b5:f0:3a:33:ff:2f:8e:9c:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:9B:72:FF:86:99:13:32:F2:24:6E:55:74:BE:8F:CC:E2:35:44
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xpabcv-GmRMy8iRuVXS-j8ziNUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.171.0/24
Signature Algorithm: sha256WithRSAEncryption
04:23:2b:51:21:95:ca:6b:67:19:ac:bd:17:9c:a8:3b:31:1b:
64:e2:62:fc:91:51:2a:4e:df:6b:c0:c9:a0:2b:b8:0b:b3:07:
2b:59:0a:d4:c3:72:75:59:ae:cd:a2:0c:7f:fe:a8:84:cc:43:
4e:a4:90:d6:a6:69:51:1b:e5:92:6f:28:70:53:ce:ed:ae:13:
76:0d:a3:98:d2:e7:69:6e:bf:25:f3:9f:43:23:57:8e:fd:c2:
42:33:0c:4b:ab:3e:7a:1e:cd:e4:c6:db:91:4b:4c:cd:19:25:
1a:22:18:78:21:f7:32:bd:fd:e0:ea:3a:20:e6:7b:e9:bc:b2:
6d:ee:50:a1:9a:51:f3:cd:b7:70:17:d4:0e:a9:a5:15:c6:fd:
9f:61:ba:3c:52:82:07:3f:56:31:1d:70:3a:d8:4a:fb:13:62:
b5:e2:52:2b:74:e4:ad:b7:48:53:15:40:71:be:af:9f:ab:88:
ee:b7:7b:a9:7c:45:2a:c0:ab:5a:06:41:00:c3:33:21:7b:c5:
73:0a:52:d7:31:35:49:b9:30:67:c0:4c:77:a3:d5:f3:34:23:
b3:b0:b5:03:5e:d0:c1:dd:f0:99:f7:b0:54:18:1d:44:90:59:
1e:77:cc:c0:cf:e7:cd:68:81:79:bf:e9:a4:7e:f3:6b:75:40:
7e:d4:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:55 2025 by rpki-client