Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/Xhw1dry6Z_5LIMg4bZm6qnyoTg4.roa
File: Xhw1dry6Z_5LIMg4bZm6qnyoTg4.roa (raw, json)
Hash identifier: RGiZEpbVYGic0xWGo1RR5aBMVHC/8irkj6ge6fClXUs=
Subject key identifier: 5E:1C:35:76:BC:BA:67:FE:4B:20:C8:38:6D:99:BA:AA:7C:A8:4E:0E
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 01856ED4BC801CDA5D975E3FCA218EDC6BDE
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/Xhw1dry6Z_5LIMg4bZm6qnyoTg4.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 193.31.127.0/24 maxlen: 24
193.56.20.0/24 maxlen: 24
194.99.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bc:80:1c:da:5d:97:5e:3f:ca:21:8e:dc:6b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e1c3576bcba67fe4b20c8386d99baaa7ca84e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:ae:c0:cb:db:2e:1a:eb:28:4f:f1:35:68:
a9:cc:8a:66:2b:3a:19:60:5c:1c:10:b1:3b:43:12:
af:62:0e:5b:c3:b4:3d:14:ed:cb:22:c6:72:dc:88:
4b:d7:4e:ce:7e:7d:e9:87:ba:9d:bf:8c:2c:2f:78:
94:01:58:9d:6d:8c:1e:cf:f4:40:7b:60:4c:25:3c:
b3:c0:6a:12:79:ea:16:7b:ae:42:51:f4:23:20:09:
9a:9b:1d:d7:07:6c:0c:86:63:5d:91:30:60:d7:0a:
fd:21:03:49:6a:2d:71:dd:c1:d2:33:5d:e0:af:67:
47:2b:28:e1:7c:b9:cd:7e:24:8f:ed:e5:7c:33:c0:
f8:da:d9:d1:6b:c1:92:c7:1a:fa:7d:94:de:41:3a:
55:7b:fa:a8:a6:51:a4:bb:e5:4a:1d:28:31:07:30:
46:3c:1d:b6:29:cc:ee:56:7d:95:58:cc:09:80:9a:
56:ac:48:40:44:b7:e7:b9:1b:68:c7:c4:8f:d4:d9:
de:8f:0c:ae:6f:ef:bc:92:99:c7:0a:db:53:a8:a7:
de:93:d5:a1:0b:64:98:b6:f9:d2:5e:7b:cd:35:2d:
6c:37:0a:88:5b:b5:8e:35:43:b7:fd:31:10:5b:65:
8b:2a:e4:ab:c1:ce:d0:f2:fb:1a:84:8d:db:fc:55:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1C:35:76:BC:BA:67:FE:4B:20:C8:38:6D:99:BA:AA:7C:A8:4E:0E
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/Xhw1dry6Z_5LIMg4bZm6qnyoTg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.127.0/24
193.56.20.0/24
194.99.25.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cf:a2:46:c0:ce:aa:9d:41:52:42:4b:49:7a:bf:30:a2:1a:
20:3c:73:91:0c:ca:d1:8b:6f:34:96:2f:19:11:87:ab:d8:6c:
c0:bc:e5:f6:45:66:e9:d5:1d:fa:c1:67:77:36:90:63:4f:29:
d4:10:2d:cf:fb:1a:19:a4:c4:a7:3f:54:3a:88:de:f2:0d:06:
7e:73:47:ad:c8:69:05:9a:35:21:ba:8a:52:d4:e3:53:f6:05:
0e:37:05:58:ba:ed:b6:06:23:db:57:50:41:cc:5e:5b:e0:8e:
c2:ce:2f:99:50:75:13:f8:94:37:ba:7f:3a:64:ef:0c:a6:96:
91:8f:67:ce:26:7e:86:24:ce:75:0d:d1:c8:23:eb:28:b5:e2:
0b:d3:70:cc:7f:52:39:4a:aa:20:82:78:40:85:ea:4d:f2:a7:
a7:46:a4:b2:95:30:12:5e:cd:62:1b:49:4a:de:3a:c2:f8:fe:
95:6c:b3:76:7b:fd:6f:2a:d3:8d:69:9a:14:4c:1e:bf:10:68:
8c:a8:1e:32:f6:14:13:6e:5b:13:d5:0b:22:c7:69:0a:b6:b2:
41:38:71:64:c2:31:92:13:d8:df:42:f5:fc:35:97:da:69:f7:
c1:81:ce:ca:48:3b:ef:9c:73:2c:e1:45:bc:4f:3f:01:b7:c1:
16:1b:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:20 2025 by rpki-client