Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/XGxdWNZPiFptk-3w7OILGgkhItU.roa
File: XGxdWNZPiFptk-3w7OILGgkhItU.roa (raw, json)
Hash identifier: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=
Subject key identifier: 5C:6C:5D:58:D6:4F:88:5A:6D:93:ED:F0:EC:E2:0B:1A:09:21:22:D5
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 019427B5755C2ECF00EE30EB703AE68C382C
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/XGxdWNZPiFptk-3w7OILGgkhItU.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204686
IP address blocks: 185.196.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:75:5c:2e:cf:00:ee:30:eb:70:3a:e6:8c:38:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c6c5d58d64f885a6d93edf0ece20b1a092122d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:dd:cf:6b:a4:f3:ca:d1:36:d1:96:6d:82:
43:f0:4d:94:e3:27:86:86:d2:c5:f9:c6:35:04:ab:
b7:b9:c8:6a:9a:51:e0:2e:a9:a5:d2:db:57:6a:dd:
15:0c:af:ab:bd:e6:ba:bd:44:47:1c:ee:e4:af:13:
d6:61:58:d3:06:ee:71:8d:c0:ac:67:bd:ca:cc:c5:
1a:f4:aa:fe:80:71:e7:2b:3d:26:79:b2:ac:00:e0:
67:bd:03:00:14:79:57:70:ef:44:be:f5:20:19:ef:
29:ec:c9:55:69:26:7a:32:02:36:7a:cc:31:03:7d:
c8:bf:6a:6e:cc:e1:89:1a:d2:87:32:cc:32:22:18:
48:2d:b1:ee:68:e6:de:67:ab:d1:8c:bc:59:7a:10:
b5:63:0f:5b:7b:40:b0:d1:5e:ff:07:81:0a:95:b0:
a7:2f:87:18:e5:82:00:67:f9:a6:f1:28:1b:c0:12:
a4:69:35:a5:dd:33:67:e9:ba:16:0b:5b:97:80:d0:
59:e4:98:c3:34:3b:4b:04:5e:6d:e8:4d:b1:c4:f1:
66:73:64:c5:a2:8e:ff:d7:8b:ea:9d:d0:c7:bf:85:
3f:4a:65:82:8d:42:73:e4:9e:ee:a2:b2:51:66:44:
3a:c1:99:6a:24:5a:43:7e:2f:a4:61:1d:83:eb:0a:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:5D:58:D6:4F:88:5A:6D:93:ED:F0:EC:E2:0B:1A:09:21:22:D5
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/XGxdWNZPiFptk-3w7OILGgkhItU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.150.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e8:d5:ac:38:4c:02:f8:a1:8e:cf:c7:1c:70:29:66:99:9a:
e6:8c:24:e8:74:9c:30:7e:d7:d2:20:bd:06:ab:9a:71:f1:b4:
7d:24:c8:ac:5f:d0:7c:a3:64:ad:a4:81:75:05:bd:23:e1:7b:
d8:b7:10:5d:3f:27:69:cf:59:3e:53:c3:e2:a7:9c:56:c1:64:
03:20:c7:e9:73:52:c2:d7:a1:1e:da:60:b2:cd:69:21:af:e4:
92:df:38:5d:83:b4:85:16:69:b5:e6:2d:f1:dd:f3:60:b2:49:
3c:a7:66:42:9d:da:51:fa:5b:cd:63:66:75:f5:2d:e4:60:6c:
8b:b7:3e:bf:4a:f2:68:8b:34:9c:27:8e:f2:8f:ee:ef:45:99:
c4:e5:0b:9b:1f:5d:c0:1c:03:60:09:92:5d:4a:5f:a8:95:8d:
e2:71:07:42:9b:4f:df:42:12:1d:21:69:3d:8b:e2:46:50:4c:
14:95:00:29:2f:d4:78:9e:47:4f:9e:4d:da:93:71:98:ec:8c:
0f:65:63:c4:80:e7:62:29:0c:f9:d0:c8:79:95:31:76:56:3f:
82:e3:c6:9a:fd:78:93:fd:e4:50:d1:f8:ba:9a:2f:6b:c9:c4:
b1:a4:0a:ad:58:64:51:fa:bf:ca:a5:4b:a6:ab:7d:e7:28:69:
2f:57:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:26 2025 by rpki-client