Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/xcycZms0_ZHCVQVtErEWcPT6uzM.roa
File: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (raw, json)
Hash identifier: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=
Subject key identifier: C5:CC:9C:66:6B:34:FD:91:C2:55:05:6D:12:B1:16:70:F4:FA:BB:33
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 0194214429A06C43E5819C527A31BA826037
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/xcycZms0_ZHCVQVtErEWcPT6uzM.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 194.15.16.0/24 maxlen: 24
194.15.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:29:a0:6c:43:e5:81:9c:52:7a:31:ba:82:60:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5cc9c666b34fd91c255056d12b11670f4fabb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:6f:06:33:25:af:ab:d6:78:62:30:06:52:
76:e4:0c:f1:2f:e5:ff:05:49:72:8e:c2:5f:9e:2e:
2e:ee:bf:34:70:5a:48:31:9b:7b:1e:e0:78:cb:b7:
33:7f:c0:50:88:29:23:dd:bd:8b:f1:3f:0b:84:70:
41:01:d4:fe:95:04:9b:62:ad:4a:fa:b1:31:c9:ff:
20:00:fb:76:37:72:ea:54:0d:72:7e:42:f7:9d:54:
62:34:ed:50:49:cb:66:78:b1:fd:45:7b:ce:75:69:
e2:c5:52:d3:0f:e4:90:fc:97:64:ab:63:01:bc:ca:
fa:ed:98:be:26:e8:a3:4f:a2:63:6b:c1:9a:90:fc:
67:75:82:7e:f1:88:e8:a3:f4:fa:f4:c4:88:a6:ea:
b5:f8:c2:18:54:c2:64:a4:d0:7a:97:95:64:50:2c:
30:44:16:3d:43:10:55:6d:c4:a0:fb:85:cc:91:ca:
ed:99:f6:59:7c:3c:75:3a:d4:ff:34:33:02:f8:98:
00:62:a5:c8:0c:d5:34:ce:41:29:00:e5:64:76:5e:
74:48:90:ce:44:7d:4c:22:c6:12:4d:3e:f6:1d:3b:
f0:57:86:65:5e:3d:83:dc:63:43:82:aa:ef:64:90:
fa:87:d9:bb:71:00:77:dd:33:3b:e2:66:af:65:46:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CC:9C:66:6B:34:FD:91:C2:55:05:6D:12:B1:16:70:F4:FA:BB:33
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/xcycZms0_ZHCVQVtErEWcPT6uzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.16.0/24
194.15.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:64:8a:0a:3e:ee:3f:f0:a0:17:1e:55:99:48:93:04:8b:8c:
65:05:c4:37:27:87:0e:b4:70:49:e1:82:0f:fb:12:c7:88:c5:
b0:d0:fe:67:c6:1a:08:34:ae:88:7a:2a:a2:01:e1:a3:fe:eb:
b3:73:5a:b3:10:9c:10:bc:5f:4d:47:be:1c:58:bd:20:fd:a8:
4e:72:4c:b4:a2:16:f2:20:54:82:8a:b5:60:53:41:32:37:26:
10:38:9d:b6:81:04:94:78:67:5e:40:43:ef:3b:4d:ef:92:4a:
c2:4b:44:0e:5b:fa:02:87:3a:5d:9d:44:fa:96:6b:85:0e:dc:
e0:c4:0f:10:10:b5:03:28:aa:d9:34:60:91:12:e4:9e:be:a2:
a5:78:22:54:1e:04:ef:db:20:f9:f8:49:57:a2:f5:b3:8d:9e:
32:d3:50:9d:1f:11:3c:cf:41:2e:4e:e3:d9:6b:31:e8:f7:eb:
7a:6e:d6:ec:23:50:ab:d5:6a:d7:ed:5b:de:62:ea:59:7e:cf:
56:25:94:27:f7:02:81:9d:b2:73:7c:d8:49:56:35:8d:05:c9:
5b:94:b4:bd:63:e0:79:71:a9:26:1d:f4:9a:7a:3b:a0:09:c1:
cc:70:ff:e4:d0:08:d2:18:e0:f1:1f:51:42:cf:49:16:b4:62:
a4:79:f7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:18 2025 by rpki-client