Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa
File: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (raw, json)
Hash identifier: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=
Subject key identifier: 5E:91:38:F2:5E:59:F9:66:F6:56:7D:02:2F:03:E8:F2:0B:0E:AF:8B
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 019423D6C63C591817363A6EC830327C7DBF
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 193.41.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c6:3c:59:18:17:36:3a:6e:c8:30:32:7c:7d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e9138f25e59f966f6567d022f03e8f20b0eaf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:ad:0a:11:22:cb:ed:6b:c8:c1:88:0c:ca:
d6:d9:18:90:9c:f7:70:d4:bb:e9:c7:6d:27:89:22:
ab:9f:20:81:cd:ec:f1:2a:c2:29:28:53:8e:ee:dd:
0d:b6:52:f0:73:d0:77:e9:fa:e3:c8:a1:e6:ff:b4:
ec:8e:72:a1:33:ce:26:bb:c7:5a:58:3e:e8:33:96:
61:80:f6:6a:30:79:5e:3c:24:59:42:5b:fc:37:d9:
80:09:91:bc:4a:cd:fb:65:2a:c5:db:a0:38:92:ba:
95:94:0d:48:60:84:bb:2b:67:fe:0f:66:e6:bd:d8:
b7:40:66:24:6f:89:2b:34:b1:b0:46:a1:be:db:2a:
41:70:7c:ee:d7:99:ed:88:71:34:fd:fe:80:13:c5:
15:37:f0:af:4f:20:51:5b:e7:7e:41:63:2e:4e:45:
41:fa:12:f7:ff:66:19:7d:64:38:ca:19:a0:de:11:
9a:2e:ef:87:35:80:a5:7d:51:83:ae:2c:74:bc:d4:
a1:36:dd:14:1a:8a:d6:68:1b:0e:0d:4a:2c:05:5e:
5c:a9:48:cd:26:f1:d4:a0:61:48:47:51:7d:d0:e7:
8f:58:5d:67:80:01:46:50:db:8c:9b:19:1f:92:41:
57:94:f4:02:b7:79:fc:51:3b:de:ad:c3:3d:7d:8f:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:91:38:F2:5E:59:F9:66:F6:56:7D:02:2F:03:E8:F2:0B:0E:AF:8B
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.156.0/24
Signature Algorithm: sha256WithRSAEncryption
85:58:9d:af:ad:23:fd:1f:18:af:ec:a4:61:7e:11:b6:14:90:
52:5c:28:b9:50:da:aa:c8:96:7a:78:92:92:4c:d6:ed:f0:0b:
ad:4c:80:1d:ab:99:b8:64:0b:3f:a0:91:0f:bd:13:08:c0:78:
ae:b0:94:3a:55:e7:b6:d4:0b:61:39:51:30:b0:d7:45:b9:01:
4d:c5:e9:15:ee:de:c9:a0:ff:90:e5:9a:90:d7:aa:be:65:07:
d6:55:51:32:03:d7:9e:99:9a:b5:b7:60:ce:90:b4:02:31:10:
ae:c3:49:46:1e:7c:d8:c4:bf:f0:d5:9c:96:74:27:b1:93:2c:
8d:66:ec:3d:65:1e:54:94:ef:cb:f2:7c:bc:e0:02:10:d2:d0:
e5:c7:f0:40:10:71:56:3f:f9:8a:2e:74:2e:db:41:92:48:fa:
22:98:94:51:d0:b9:53:32:0d:19:a2:bb:89:3a:4c:6c:5c:f3:
84:bb:92:0d:4f:12:fc:e8:4a:da:5b:e9:47:b1:12:10:e7:1c:
ca:4b:b3:bd:b0:03:02:ce:18:b5:b3:bb:1b:05:8d:73:e2:80:
d8:6e:21:56:4c:41:49:bd:d0:bb:d1:9c:ce:6a:7a:ef:de:47:
3c:b7:3f:dd:83:37:a3:9e:15:f6:0f:2d:47:b2:94:07:d5:fe:
69:cb:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:31 2025 by rpki-client