Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/DxAtj3XYEDwrU8BaCT6CiYsSNUY.roa
File: DxAtj3XYEDwrU8BaCT6CiYsSNUY.roa (raw, json)
Hash identifier: o+UtBmeKh8l5SKFt9b0HSR3AMNSQx+XcOJc2HrXv0/c=
Subject key identifier: 0F:10:2D:8F:75:D8:10:3C:2B:53:C0:5A:09:3E:82:89:8B:12:35:46
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019537D15FBADD9EC00F58FB3507957C7A12
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/DxAtj3XYEDwrU8BaCT6CiYsSNUY.roa
Signing time: Mon 24 Feb 2025 11:57:03 +0000
ROA not before: Mon 24 Feb 2025 11:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211804
IP address blocks: 193.35.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:d1:5f:ba:dd:9e:c0:0f:58:fb:35:07:95:7c:7a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 24 11:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f102d8f75d8103c2b53c05a093e82898b123546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:79:01:07:4b:7e:bb:2b:53:97:a2:6a:f0:
72:b0:16:d4:84:2c:db:57:5e:4e:f7:5c:20:64:d7:
7b:12:1a:96:5b:2a:10:60:02:5a:59:61:82:9d:28:
4a:57:1d:fd:48:d0:64:ea:6c:6d:59:ac:00:d0:ac:
02:8a:88:5a:03:82:e2:9e:0f:6e:f3:e6:99:61:3d:
cb:c7:ff:7e:b7:04:da:b6:61:91:b1:7b:00:83:b4:
f3:0a:cc:28:b6:87:ef:5d:be:34:56:d6:50:ff:bb:
dc:08:d9:66:21:00:c5:ef:27:66:cc:3a:cb:41:02:
3e:4e:c2:7b:ed:8d:a9:c6:52:cb:f4:6c:e4:17:66:
ea:7c:83:eb:9f:03:37:6c:38:ec:6a:df:82:9a:68:
bc:44:2c:5d:b2:df:70:0b:47:61:16:27:d8:29:a6:
79:e2:61:b0:8b:b6:52:9b:8b:0f:c7:57:a2:2f:7d:
15:fb:1e:93:a8:69:7c:27:ae:3a:43:75:b8:b9:94:
c3:11:f4:f6:1b:fa:0f:5b:04:43:95:91:81:97:0f:
44:0e:6b:ee:d8:19:7e:47:f2:42:66:1a:d6:38:3f:
8e:3e:22:4c:53:28:82:3d:d8:43:21:92:97:78:ed:
d0:cb:ad:56:c6:66:d3:1d:ed:13:a2:9c:cc:ad:69:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:10:2D:8F:75:D8:10:3C:2B:53:C0:5A:09:3E:82:89:8B:12:35:46
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/DxAtj3XYEDwrU8BaCT6CiYsSNUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b6:ea:b8:63:d9:bd:ca:9c:c3:2d:a9:c6:be:56:ef:0a:a3:
ce:2b:6e:d3:09:a8:5d:41:1d:c4:6f:47:1b:46:d0:d3:a6:97:
74:e3:e4:8c:d5:ac:37:26:ce:17:9c:96:ed:a6:aa:1a:ff:1a:
0d:ec:36:de:b5:f9:44:e1:a9:07:b2:16:92:75:90:31:e0:2e:
fd:2b:72:66:b3:b0:f9:53:33:9a:09:c1:85:68:dc:10:68:c3:
89:dc:cf:98:18:eb:83:e0:a6:cc:d5:23:2b:bb:2c:0d:bd:60:
56:a3:ee:d8:23:a4:aa:ac:4c:fd:02:e4:b5:b4:87:73:0a:7f:
dc:81:2d:ee:59:cf:63:3d:59:a1:ae:c0:66:c1:09:5e:52:50:
43:db:bf:ff:a1:90:6b:82:e6:71:f2:6f:b5:32:31:ba:4e:38:
52:50:e7:7c:2a:3a:b4:35:d1:9d:32:60:17:08:eb:05:ce:ce:
b2:b5:23:2f:90:ea:8c:e6:5a:1c:9b:34:61:04:17:81:d8:76:
8e:ac:0b:b1:69:0a:04:81:80:8b:c2:da:55:12:fa:25:8e:2b:
a4:d3:de:8e:3b:43:62:61:dc:89:63:35:a1:d7:c5:49:fa:a1:
bb:02:68:d8:be:07:5c:2b:43:37:97:af:39:f7:5d:97:e4:83:
91:7e:f9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:10 2025 by rpki-client