Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/xbbY79UbNbRYIgyXeBU4cy_zCmI.roa
File: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (raw, json)
Hash identifier: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=
Subject key identifier: C5:B6:D8:EF:D5:1B:35:B4:58:22:0C:97:78:15:38:73:2F:F3:0A:62
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC40E69C5372FE87C7AEDA049C142E
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/xbbY79UbNbRYIgyXeBU4cy_zCmI.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210515
IP address blocks: 94.188.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:40:e6:9c:53:72:fe:87:c7:ae:da:04:9c:14:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5b6d8efd51b35b458220c97781538732ff30a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:6b:3b:72:9a:0e:e3:f2:94:ae:18:65:6c:
35:40:0f:9e:d0:d1:f5:08:9e:5d:79:96:db:7a:d8:
15:1a:fe:e5:4a:cf:b4:77:a1:ef:52:b3:1b:7f:99:
8f:8e:0b:99:29:b8:8e:8a:c5:e7:5d:30:9d:73:eb:
73:2e:85:9d:41:69:fc:5c:38:2b:3d:5f:93:5a:fd:
56:81:49:0e:39:95:e8:2e:6a:cd:8b:66:ff:e1:5b:
70:ec:f5:af:bb:2c:b8:27:c9:50:7a:ee:1f:b3:e8:
d0:ba:9c:b5:0a:ae:f4:70:73:fb:72:6d:bc:15:e7:
fd:2f:bb:2f:b2:f9:d0:50:c7:ec:5f:5b:2e:ac:d8:
9c:24:bd:78:9c:1d:57:41:d6:b7:bd:11:3f:b9:ef:
ef:be:66:01:98:a2:cc:3a:86:93:30:c6:b1:ba:84:
0a:65:89:16:46:44:c1:56:96:23:d8:01:f2:ac:f7:
27:cf:e3:c6:e8:f2:4f:4e:c9:8c:02:2c:12:6a:f7:
c5:5f:d9:19:84:b7:ad:e3:51:c3:b7:f4:cc:fb:2f:
63:92:12:11:76:83:2b:3e:60:93:48:f9:57:9a:29:
2e:e1:a0:22:4f:3e:10:b2:15:37:31:b0:d7:2c:01:
5b:8c:8a:d3:06:79:fa:cc:a4:2a:ab:40:05:51:6f:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B6:D8:EF:D5:1B:35:B4:58:22:0C:97:78:15:38:73:2F:F3:0A:62
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/xbbY79UbNbRYIgyXeBU4cy_zCmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.174.0/24
Signature Algorithm: sha256WithRSAEncryption
99:52:01:9e:73:a6:76:ef:54:6e:14:4a:4f:d8:c3:7f:ed:4a:
46:26:f5:a6:e1:f9:fc:c8:06:49:db:d7:ed:d0:fb:bc:15:81:
5e:63:d9:b3:8b:ee:b1:8d:17:e6:21:46:c1:9b:f6:4b:75:ba:
4e:9d:4b:de:51:84:0f:83:c3:e9:19:3a:2f:13:ca:e4:b0:dc:
af:07:2e:4d:22:a5:6e:d2:1a:b3:a6:be:39:f7:11:3c:db:b4:
64:7b:39:91:10:9c:bb:27:75:92:ab:ed:98:ae:4b:ee:2e:cb:
37:8a:aa:5c:30:2e:0c:c7:21:ac:63:bb:7d:38:ae:06:d1:60:
48:68:59:3a:5f:54:fb:bc:b1:37:c5:96:a9:71:dc:49:b5:aa:
46:67:7e:40:21:b8:9f:6e:79:a1:53:d9:81:f3:8d:0c:31:4f:
24:a7:83:11:9b:fb:8f:06:0e:8f:5a:d3:54:e0:57:ff:c3:77:
6c:92:42:68:07:2a:86:a5:ab:76:c1:82:0e:dc:b7:1e:b4:c8:
2c:83:8c:d7:d4:3c:4b:57:91:3e:a9:be:6e:e0:c4:be:9f:56:
8a:f4:a3:25:7c:c9:07:1f:4b:2a:a0:bd:f6:28:b5:28:c4:1f:
ea:24:4e:c9:14:80:ce:eb:b7:d1:b5:e2:34:44:db:b3:e6:1e:
b2:d0:c7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:00 2025 by rpki-client