Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/XHCoeTdfjf1yzIAoZNKkF-W0jQE.roa
File: XHCoeTdfjf1yzIAoZNKkF-W0jQE.roa (raw, json)
Hash identifier: UYcMN/7VmgljB+1bqz+x0b2K6hH4hnIFkSEEU8zPYI0=
Subject key identifier: 5C:70:A8:79:37:5F:8D:FD:72:CC:80:28:64:D2:A4:17:E5:B4:8D:01
Certificate issuer: /CN=859c6dc213c1bee614819c6bd2c607e2f5d8cb62
Certificate serial: 041B9D7B
Authority key identifier: 85:9C:6D:C2:13:C1:BE:E6:14:81:9C:6B:D2:C6:07:E2:F5:D8:CB:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZxtwhPBvuYUgZxr0sYH4vXYy2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/XHCoeTdfjf1yzIAoZNKkF-W0jQE.roa
Signing time: Sat 01 Jan 2022 13:56:07 +0000
ROA not before: Sat 01 Jan 2022 13:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59441
IP address blocks: 193.3.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68918651 (0x41b9d7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859c6dc213c1bee614819c6bd2c607e2f5d8cb62
Validity
Not Before: Jan 1 13:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c70a879375f8dfd72cc802864d2a417e5b48d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:47:f3:55:5a:9d:7d:ac:fd:32:08:47:03:6e:
c5:23:1a:a7:05:2a:4b:a6:68:cd:65:01:ab:02:66:
0f:37:05:0e:6c:6b:8a:7b:8f:2d:3b:ea:17:48:6d:
1e:40:d2:fe:54:00:44:86:05:42:29:1a:d6:f8:7f:
b4:d2:7b:87:ad:fe:3f:b0:95:e3:e0:61:04:1e:31:
02:b0:81:47:7e:fb:bb:f6:16:4e:7c:26:2f:3f:75:
f7:fc:4d:46:23:db:4a:00:f1:17:5b:42:47:09:62:
aa:ea:d4:76:0d:5c:27:c5:22:c3:a1:19:71:17:99:
ad:21:a2:90:b2:40:75:f0:47:50:6a:ad:9b:2f:80:
f1:e0:61:66:82:69:c0:ef:c9:fe:86:8f:89:c3:d9:
e9:12:ac:f1:c8:b4:ee:0a:f0:c3:e6:3f:53:96:34:
b4:e7:10:3f:c3:c7:95:5f:3b:54:ad:de:e7:97:23:
37:e1:e1:d6:a5:10:85:1b:fd:09:73:75:8e:58:12:
ab:f0:bf:8b:b1:cc:92:bd:c3:15:d9:cc:94:37:90:
df:e8:f2:3f:22:f6:e7:88:ec:10:9f:3c:05:d1:b7:
e8:0a:56:aa:d4:a7:f0:09:67:33:dc:b0:85:72:6c:
0a:78:67:60:48:17:22:89:87:b5:58:df:7d:41:db:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:70:A8:79:37:5F:8D:FD:72:CC:80:28:64:D2:A4:17:E5:B4:8D:01
X509v3 Authority Key Identifier:
keyid:85:9C:6D:C2:13:C1:BE:E6:14:81:9C:6B:D2:C6:07:E2:F5:D8:CB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZxtwhPBvuYUgZxr0sYH4vXYy2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/XHCoeTdfjf1yzIAoZNKkF-W0jQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/hZxtwhPBvuYUgZxr0sYH4vXYy2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:23:1f:ce:22:17:24:99:fa:29:88:3d:a8:55:2a:b4:7a:03:
00:2f:95:bf:b3:60:17:e4:cb:1d:ef:c9:35:48:d1:3b:69:6f:
99:7f:a8:b0:c8:d7:ac:e2:a0:d2:69:d8:1b:c3:3f:14:36:5e:
72:4f:5c:60:ad:31:c6:45:93:95:2f:12:59:66:fd:da:14:06:
39:2d:a7:a2:48:94:ba:fd:df:67:7c:b9:a3:5d:3d:ec:81:85:
d9:79:e8:84:de:37:29:25:e1:4c:e5:99:2e:17:66:e9:62:ec:
6c:5b:61:e4:84:cd:12:0a:3a:aa:8c:da:8e:ce:43:fb:3e:19:
01:04:ae:2e:da:a9:66:c0:f9:c0:88:0c:f1:f9:0d:f3:44:26:
5d:12:55:c7:66:d3:01:9f:12:fe:84:ab:c8:4d:d8:58:29:78:
3e:46:57:dd:d0:8f:95:51:87:bd:33:a3:b1:d6:75:7a:6c:31:
a7:bf:e1:ad:43:62:a1:66:4a:73:ea:9e:d7:18:98:c3:5c:b6:
d8:c2:c3:64:4a:58:1c:6a:24:c2:ec:f9:59:32:e7:b4:2a:a7:
01:2b:4d:61:9d:44:87:d9:ea:85:5b:66:ec:76:fd:d6:88:13:
f0:0a:2b:db:41:14:96:ae:ca:0e:bc:78:9c:51:24:d1:75:45:
8a:d1:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:21:15 2025 by rpki-client