Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/XpYkEceOcNVMjE9iA-7wdH8wU4Y.roa
File: XpYkEceOcNVMjE9iA-7wdH8wU4Y.roa (raw, json)
Hash identifier: ZveXXYUwOKQW6NWsOhOjeqI3QtT8i2gAi2nt9BB+rrk=
Subject key identifier: 5E:96:24:11:C7:8E:70:D5:4C:8C:4F:62:03:EE:F0:74:7F:30:53:86
Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial: 019426D8D72667DFF843583FA87DD1FCA370
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/XpYkEceOcNVMjE9iA-7wdH8wU4Y.roa
Signing time: Thu 02 Jan 2025 11:48:52 +0000
ROA not before: Thu 02 Jan 2025 11:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 193.32.244.0/24 maxlen: 24
217.28.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d7:26:67:df:f8:43:58:3f:a8:7d:d1:fc:a3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Validity
Not Before: Jan 2 11:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e962411c78e70d54c8c4f6203eef0747f305386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:57:bf:cf:88:fd:8d:32:97:ff:60:9d:43:
6b:7a:d3:93:bd:14:01:fc:cb:cb:5c:97:8c:1c:5b:
23:20:4d:68:13:65:73:e1:7b:49:bb:66:13:ef:dd:
4b:66:2a:42:77:9b:5f:ad:93:8a:3c:29:8f:cf:da:
34:af:c5:fa:d3:61:eb:51:52:68:c6:7f:32:3d:93:
ba:8e:aa:50:d0:cd:22:4d:e9:7c:6a:8e:4d:22:1c:
10:62:dd:58:4f:98:fd:7e:0d:37:d6:31:9d:b8:6e:
ff:a8:2b:91:1e:d6:91:7a:c9:ca:74:80:aa:fe:ee:
15:cc:65:80:08:fb:90:05:e9:c9:c7:66:e5:d5:fd:
c4:1c:1a:70:d2:56:29:ef:d3:f7:45:49:94:3d:be:
99:7b:f5:28:c3:84:04:6a:91:73:2f:af:46:c2:74:
e5:b4:67:4a:3a:77:65:1c:4c:9d:dd:ca:df:58:5f:
6a:ba:0e:03:ee:e7:32:a7:f3:7c:ee:ce:e6:c6:e3:
99:38:b7:84:65:ce:4d:cc:1d:cc:1f:71:78:5b:24:
22:22:5a:d2:16:d9:c2:f0:71:1f:0a:19:1c:11:fb:
f6:9e:b4:8d:a4:1f:13:70:02:71:2d:94:27:00:cc:
d1:ae:57:c8:df:81:b0:59:e9:cf:37:6d:06:ee:dc:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:24:11:C7:8E:70:D5:4C:8C:4F:62:03:EE:F0:74:7F:30:53:86
X509v3 Authority Key Identifier:
keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/XpYkEceOcNVMjE9iA-7wdH8wU4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.244.0/24
217.28.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:0e:2a:c9:fa:e2:23:cf:16:f4:92:a1:87:01:aa:32:00:88:
e2:ae:f3:cc:94:58:1d:02:e9:bf:27:63:38:9c:89:22:09:82:
54:fe:b4:41:8f:4c:20:22:43:e5:40:c5:04:ac:53:d1:ca:4c:
77:80:03:d4:a2:e7:92:1a:44:80:61:30:24:b9:bf:d0:44:9d:
fd:cc:cb:68:70:5f:80:11:34:ac:75:83:f2:f0:7d:e4:90:09:
0b:56:f4:a7:6a:f2:10:23:52:9e:39:dc:18:98:55:51:ba:f9:
1f:bb:ae:8b:66:fc:6e:66:87:a2:c6:64:83:69:7f:f9:53:ec:
75:1e:11:01:f2:f4:ba:93:c0:f9:b0:d6:74:6b:17:2c:5f:71:
ad:1b:9f:ac:e2:c3:2a:74:60:4c:e9:68:55:bf:65:63:2c:a3:
09:b2:97:66:1f:e8:46:1f:65:2c:e0:0c:6e:a8:12:db:29:74:
55:8d:17:fd:d6:1c:b4:09:e9:44:ff:ce:67:07:f9:0c:0f:5f:
1d:ce:39:63:8b:e3:a1:86:1f:ed:93:f2:ea:4c:ef:62:ac:ea:
cd:9a:1e:dd:6c:1c:d0:3e:62:4a:fb:53:59:4c:7d:bd:6c:60:
7d:de:8a:ae:11:a7:2a:0c:39:9a:42:d9:f1:00:34:0e:31:32:
57:51:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:34 2025 by rpki-client