Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa
File: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (raw, json)
Hash identifier: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=
Subject key identifier: 5C:63:9C:E9:8B:5A:D6:3E:EC:50:CE:85:BF:46:46:A7:AC:A4:BE:CE
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 01942143EF9DD55ACFA4CA5EBE587FD3EF7E
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 194.0.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ef:9d:d5:5a:cf:a4:ca:5e:be:58:7f:d3:ef:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c639ce98b5ad63eec50ce85bf4646a7aca4bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:50:9f:30:2b:6c:de:69:f0:59:48:d6:d8:
5e:bb:83:c3:d3:0a:a5:15:76:80:7c:f3:76:d6:25:
47:a8:91:41:05:fe:c9:bd:f8:c0:6b:13:a8:3e:71:
d3:dc:8c:ad:4d:c9:23:58:4e:66:c5:0b:69:d7:9d:
27:e6:4b:06:61:38:18:1d:6c:2b:04:af:c6:b1:a3:
f5:70:f6:9f:e1:71:ce:0c:88:c6:c8:fa:be:95:0f:
91:dc:3f:ce:f9:3b:e5:36:30:be:94:7f:42:55:0e:
ba:50:23:69:32:23:8c:b3:63:68:cb:5f:a5:60:2b:
f9:fc:46:8a:e0:b7:78:e3:ca:04:b2:25:ee:1f:c8:
da:1c:5e:3b:1f:6d:9b:9b:03:38:dc:71:11:de:bb:
72:95:25:d8:4c:b1:ac:aa:10:71:81:1e:af:7e:ca:
11:90:7c:7e:b5:bd:89:cf:3f:21:f9:cf:bb:26:94:
90:6e:7a:2c:b9:51:48:66:80:c7:64:7c:d5:39:2d:
b9:27:5f:b6:63:06:72:11:30:02:f6:bc:f7:01:35:
48:e9:84:63:5e:c1:29:e6:02:a1:ad:0e:bb:5b:a5:
4c:66:fd:2c:fd:7c:ba:67:af:8e:c9:09:8a:7c:2a:
c7:0f:b5:d1:92:6d:34:eb:47:ec:37:a3:eb:e4:c6:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:9C:E9:8B:5A:D6:3E:EC:50:CE:85:BF:46:46:A7:AC:A4:BE:CE
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:23:dd:48:e8:0b:2b:fd:62:bc:91:57:0d:3b:b8:46:09:0e:
b2:f1:29:14:5e:51:c3:7c:73:86:85:1e:19:b7:a7:92:71:32:
f5:5c:e3:ef:80:08:03:cd:80:76:8b:42:ed:13:95:c3:e8:7a:
2c:f8:0b:8b:f2:d8:94:0b:be:47:54:05:02:b1:9c:3d:f1:52:
55:8d:29:94:f7:b0:99:0d:65:3c:71:3b:e3:3c:72:8a:36:06:
d4:a2:a6:25:bd:af:1e:97:c7:bb:55:64:e7:48:1a:75:e9:b2:
31:53:34:4b:d7:92:55:9d:71:26:e5:58:37:de:3f:ec:17:de:
54:ca:d1:db:2e:37:ea:4f:99:ca:2d:e7:49:63:a5:3c:b3:83:
17:41:17:a0:72:6d:10:c8:5e:fd:a7:6f:76:7b:03:63:c1:46:
b5:33:dd:3b:a3:c3:2e:4e:51:7d:52:c3:79:08:12:5d:8a:74:
d4:73:13:f4:99:ad:54:e4:e4:18:5d:2d:15:3c:cb:25:dc:1e:
57:a2:bc:ca:23:98:ab:f2:b2:ca:80:0e:08:03:b5:56:80:b0:
f6:23:96:97:f6:76:4f:da:37:f2:aa:e9:a3:ba:e8:65:0e:32:
41:1a:1b:b6:26:2f:32:cf:7d:13:9f:08:92:5d:b8:bf:ca:42:
27:9a:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:25 2025 by rpki-client