Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xhhYD7oFqxPMZQW6Xf5LwTKLFnM.roa
File: xhhYD7oFqxPMZQW6Xf5LwTKLFnM.roa (raw, json)
Hash identifier: 6WdtFpBJJR+65iwfAYQWihy4hUMfJZvvxmx4se4qYLE=
Subject key identifier: C6:18:58:0F:BA:05:AB:13:CC:65:05:BA:5D:FE:4B:C1:32:8B:16:73
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095AB44DA28DD70AD469834E0591F35
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xhhYD7oFqxPMZQW6Xf5LwTKLFnM.roa
Signing time: Mon 02 Jan 2023 03:45:34 +0000
ROA not before: Mon 02 Jan 2023 03:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209074
IP address blocks: 92.253.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:ab:44:da:28:dd:70:ad:46:98:34:e0:59:1f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c618580fba05ab13cc6505ba5dfe4bc1328b1673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:b7:a1:78:34:3b:e1:dc:d7:44:8c:54:5a:
cb:8b:16:9d:21:9a:10:89:c2:85:f5:f6:fc:92:71:
a7:6d:75:58:66:90:32:46:d1:9b:32:b4:34:96:ac:
49:d2:b1:e6:ef:ea:99:c9:ce:12:76:91:65:40:f1:
44:7d:d0:ad:73:ff:5d:5e:13:63:81:b4:6e:42:cd:
d7:98:98:0f:26:66:3f:48:72:a3:44:b1:e3:71:f1:
42:b5:ea:e0:2b:d5:92:c6:0a:0a:60:7b:ad:e3:44:
c0:4e:da:05:1f:f5:fa:1b:19:e3:05:32:5a:70:36:
a2:03:8f:73:a4:99:3f:e5:a7:fd:8f:c0:c6:bb:b7:
6d:f5:51:0f:29:ec:a0:85:d9:61:10:11:6b:f6:a1:
de:3f:3f:fd:f2:85:51:d2:46:9d:41:bf:15:c6:2a:
df:85:86:c0:59:10:29:c8:41:81:cf:6a:ba:1e:b3:
46:8d:39:84:77:f1:bb:c8:6a:f8:85:f2:da:b6:40:
ec:95:ab:b2:bc:85:0e:08:ed:76:e3:cb:4a:6d:43:
ae:13:09:33:b1:ac:c6:cc:cf:05:dc:e5:3e:1c:e0:
af:41:18:dd:8b:8d:70:82:82:f5:6e:2e:e5:c9:25:
73:1d:f1:b7:81:ed:8f:52:56:62:c5:86:52:90:79:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:58:0F:BA:05:AB:13:CC:65:05:BA:5D:FE:4B:C1:32:8B:16:73
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xhhYD7oFqxPMZQW6Xf5LwTKLFnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:37:92:6a:9d:90:93:d9:24:11:3f:2b:14:7c:00:b2:ea:2a:
06:f9:57:97:9a:b8:bd:ec:11:ca:db:12:c6:ea:3e:1e:4e:17:
4f:ef:38:a1:1c:e8:02:71:94:7f:7c:aa:03:a0:81:2e:86:a6:
bd:58:44:4d:81:b7:34:6e:ad:27:97:0f:7c:af:e6:29:2b:94:
58:bb:1f:27:c8:f8:1b:eb:b7:91:17:4d:4c:27:6e:19:3e:1f:
92:3d:13:cc:4e:5e:7a:b3:6f:56:04:f3:f8:08:f9:68:13:e1:
b1:a3:d7:6e:68:55:bd:d7:c7:80:ae:24:4d:af:4d:21:fa:bf:
95:02:00:46:fd:8b:70:a3:1e:45:74:3b:2d:a5:ae:42:6c:03:
b7:9f:c1:ed:c5:80:8d:ac:de:5a:23:f8:d6:d1:78:8f:57:23:
58:50:f8:a4:bf:2c:31:5c:9b:bf:cf:7f:6a:f3:d9:57:aa:b3:
7e:1e:af:19:06:c7:58:88:ff:3e:f9:18:71:84:33:d3:a8:3a:
3b:18:3b:3f:d4:a4:14:69:93:f7:4c:c6:56:93:ec:35:83:1d:
36:6f:20:c6:83:e4:3f:1d:97:b9:11:21:e8:7d:2f:9f:3f:52:
59:ef:3d:15:4b:89:2d:f9:f4:ae:51:63:dd:69:3e:10:bf:7f:
65:1e:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:02 2025 by rpki-client