Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Xt0A3vvOHsW-8bus7d123gZWRys.roa
File: Xt0A3vvOHsW-8bus7d123gZWRys.roa (raw, json)
Hash identifier: Yid/IUeu+rzPo6DAGHfEHLWcgyyTKel6c5WkvurrM2o=
Subject key identifier: 5E:DD:00:DE:FB:CE:1E:C5:BE:F1:BB:AC:ED:DD:76:DE:06:56:47:2B
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01945A7A98F63689557F396DA55FE0078A3D
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Xt0A3vvOHsW-8bus7d123gZWRys.roa
Signing time: Sun 12 Jan 2025 12:26:11 +0000
ROA not before: Sun 12 Jan 2025 12:26:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5a:7a:98:f6:36:89:55:7f:39:6d:a5:5f:e0:07:8a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 12 12:26:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5edd00defbce1ec5bef1bbaceddd76de0656472b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:28:6c:ca:58:37:e7:65:dd:a4:37:00:92:
6c:9e:ee:e9:2a:e6:cb:42:d9:cf:35:0c:f8:48:bb:
28:01:a7:48:83:05:a1:26:c6:07:e7:cd:b8:99:4e:
30:10:ff:65:4e:a5:5b:ee:46:2a:2f:4c:18:b1:1c:
92:f8:b4:2d:32:9a:c8:89:52:21:e0:08:fd:55:29:
ac:26:7b:64:86:e2:17:f5:b7:e4:d8:46:d5:90:67:
3c:e4:ae:f5:91:ed:8c:92:a1:cc:68:e8:67:88:a2:
51:36:7a:5e:24:9a:e7:22:29:7b:22:5a:3e:3b:72:
ef:16:28:ef:89:01:46:d8:4a:59:12:86:8c:95:dd:
eb:35:45:b8:d5:61:12:83:ce:d4:42:dd:91:82:71:
6a:2f:21:ab:47:f1:54:24:5d:f0:23:bd:6a:48:76:
3b:ce:c4:18:e7:7e:2e:53:f2:aa:3a:be:68:e4:63:
8d:b1:13:68:2f:0e:d4:31:16:b5:7b:3b:be:7b:5e:
0b:3e:7f:38:f3:44:4c:7c:11:80:b2:68:53:45:da:
84:b3:ee:76:69:6a:51:1f:63:7a:4e:56:86:69:56:
7b:be:45:ca:93:94:8d:40:6d:0e:93:d1:8f:8a:af:
db:7f:69:d4:90:1c:32:f3:ea:20:5c:4b:4d:6a:09:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DD:00:DE:FB:CE:1E:C5:BE:F1:BB:AC:ED:DD:76:DE:06:56:47:2B
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Xt0A3vvOHsW-8bus7d123gZWRys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a7:d6:56:11:0b:f8:24:5c:27:7d:b4:0d:67:3a:35:a0:da:
14:29:06:67:04:ed:13:73:f2:d1:fe:6e:8f:99:e4:1b:08:0b:
8e:4e:09:ce:a4:1c:99:aa:e4:05:36:58:2f:ae:2a:dd:79:3d:
40:3a:32:85:d1:1e:72:a5:f7:21:5f:2d:3d:84:f4:0c:4b:26:
e2:32:a8:bc:3a:38:62:be:ca:b8:8f:36:8c:77:c7:af:1b:f1:
4d:ef:b4:f2:90:d9:25:5b:27:d2:86:fa:b3:c5:de:fc:28:f1:
23:b0:57:b0:6b:99:aa:55:81:2d:33:64:f0:66:56:12:d2:eb:
00:a8:55:e5:b2:e9:82:85:27:1e:e3:0a:1b:26:b2:64:b3:f9:
b6:3b:90:7e:b0:c7:5a:58:ba:45:57:1c:1c:7f:f0:b8:28:58:
42:53:ef:fa:f8:1a:67:c5:8f:9e:4a:c1:27:da:9b:a5:90:1c:
b7:c7:c8:bc:c5:ae:c9:dd:a7:1c:da:23:7e:51:58:a0:94:92:
7f:02:6d:ad:7a:6f:ed:13:53:e4:a9:b6:db:72:4e:27:e3:02:
e5:17:a8:77:ec:e5:74:49:2f:bd:3e:bb:b2:0e:bd:fc:dd:a3:
a4:89:98:f1:51:5b:51:6d:d0:69:3f:f7:d8:7a:e6:37:05:6e:
e5:d3:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:21:22 2025 by rpki-client