Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/xF5VKoGOYu4SuTkWFtzR0bzZqmI.roa
File: xF5VKoGOYu4SuTkWFtzR0bzZqmI.roa (raw, json)
Hash identifier: rdwu1BaRed5RxmIo/GH4jXiyNp3cFaIjeNX4kVrFm70=
Subject key identifier: C4:5E:55:2A:81:8E:62:EE:12:B9:39:16:16:DC:D1:D1:BC:D9:AA:62
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 019426D94A3C825A8CBC9EBA2222DD602ECB
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/xF5VKoGOYu4SuTkWFtzR0bzZqmI.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211432
IP address blocks: 185.193.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4a:3c:82:5a:8c:bc:9e:ba:22:22:dd:60:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c45e552a818e62ee12b9391616dcd1d1bcd9aa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:b6:ce:08:14:20:12:94:c0:9e:48:6a:27:
58:f0:89:2d:0a:81:12:5a:cc:dd:e5:31:aa:e4:03:
c8:33:f3:13:49:e5:eb:32:ef:d6:5f:11:0d:e0:64:
6a:8a:dd:46:5f:d1:b5:56:fd:ea:b6:60:6b:f0:df:
e7:53:08:8b:a5:88:91:93:4b:b3:24:c0:d9:9b:2b:
26:0c:4d:8d:da:66:39:6d:e9:12:78:b9:5d:48:06:
21:f7:7d:35:1f:17:98:0c:27:af:65:22:1d:62:13:
78:15:b8:7c:05:04:f3:3b:16:e9:9b:4c:a0:9a:d4:
1e:c9:0b:7e:d7:9c:82:46:94:0e:cc:e9:41:03:42:
c0:60:e3:8e:46:40:d6:89:38:0e:ea:ed:42:ed:2a:
d1:fd:84:23:96:38:dd:87:b7:06:1d:8d:6d:23:15:
28:b3:49:64:1d:5c:76:69:13:12:32:a6:56:84:f3:
f3:1c:66:eb:53:4e:98:0f:f3:41:5e:f0:a9:6f:48:
ab:2b:6c:12:a2:4f:29:25:0a:46:59:de:a2:64:17:
3e:8a:92:7c:6d:70:b0:b5:13:02:1d:e7:5c:6c:09:
45:46:cf:02:64:81:1d:a9:aa:f7:6a:99:68:63:54:
34:87:b5:a8:89:dd:9b:78:a8:b1:5d:a2:eb:16:40:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5E:55:2A:81:8E:62:EE:12:B9:39:16:16:DC:D1:D1:BC:D9:AA:62
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/xF5VKoGOYu4SuTkWFtzR0bzZqmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:6f:5d:98:86:b3:8f:64:ea:9b:93:a0:d7:ff:0a:8e:bc:1e:
78:b2:e1:23:fb:c7:af:2e:d6:53:2a:23:4b:6d:01:d1:de:9c:
67:57:f3:da:4c:0d:de:ae:cf:08:09:11:0d:4b:f7:87:3b:db:
5a:b7:cf:43:0f:3c:ec:b9:10:c5:ff:6c:a3:47:ce:b7:71:f1:
3e:45:3d:a3:a4:d9:9e:ad:5b:e4:63:57:e1:69:21:a9:14:59:
84:df:cf:62:64:96:fc:cc:78:59:13:61:8e:96:e6:3f:36:19:
f8:e8:3d:cf:9c:b3:8b:75:ff:8e:6e:0f:da:d9:93:d3:05:1a:
bf:40:45:a6:78:a6:9f:ea:0d:cd:b4:2e:3d:8e:88:cd:c2:63:
c8:50:08:bb:cf:30:c3:47:79:b0:56:fb:a4:70:b4:aa:de:b3:
5e:11:1b:4e:32:d6:c6:45:08:da:b6:24:01:66:72:3d:58:28:
16:98:74:d9:21:64:d0:c8:9f:d2:60:f8:15:d4:57:5c:c8:13:
b2:03:50:5f:ca:f9:15:dc:32:f7:d3:f0:f9:af:6f:29:0c:6e:
34:00:f0:ce:89:36:a8:00:da:85:47:1b:3b:3c:cb:ac:b1:e9:
3a:32:89:83:a3:ed:f1:7e:c5:97:ef:87:0d:9f:08:f0:ef:4a:
8b:c5:2c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:39 2025 by rpki-client