Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/xrLqhB44ahJrZkrpq776iPxXSCk.roa
File: xrLqhB44ahJrZkrpq776iPxXSCk.roa (raw, json)
Hash identifier: 2seBzYFd8/WScME6k6K00IcVwIGFWlR4v0bOWy/e0ow=
Subject key identifier: C6:B2:EA:84:1E:38:6A:12:6B:66:4A:E9:AB:BE:FA:88:FC:57:48:29
Certificate issuer: /CN=a4ff9dc0b66f279ad05ca2f4ea433981cce0f06d
Certificate serial: 0128283C
Authority key identifier: A4:FF:9D:C0:B6:6F:27:9A:D0:5C:A2:F4:EA:43:39:81:CC:E0:F0:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP-dwLZvJ5rQXKL06kM5gczg8G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/xrLqhB44ahJrZkrpq776iPxXSCk.roa
Signing time: Sat 01 Jan 2022 04:03:56 +0000
ROA not before: Sat 01 Jan 2022 04:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 93.190.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19408956 (0x128283c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ff9dc0b66f279ad05ca2f4ea433981cce0f06d
Validity
Not Before: Jan 1 04:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6b2ea841e386a126b664ae9abbefa88fc574829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:b1:cb:8a:f9:14:c9:39:30:39:b2:58:03:
20:eb:ef:77:dc:ed:e9:f5:50:64:2f:8c:76:84:ee:
95:46:e2:e6:58:56:3b:87:bd:33:ad:1c:20:0f:b1:
16:02:07:67:7b:a7:01:6d:41:1a:a7:31:e2:aa:a0:
33:c9:c0:30:21:da:68:72:10:da:c1:f8:35:87:e7:
fe:5d:bb:42:cb:67:8f:4b:33:8e:57:08:c5:89:7a:
d9:29:9e:16:99:a4:a1:a9:9a:43:b8:7b:0e:7d:d9:
ff:e6:0b:b2:22:ce:48:2f:a2:69:46:2c:c5:8c:b6:
b9:55:f3:b3:1b:84:fe:bd:c6:3b:0b:9b:83:2b:38:
29:09:10:6c:cd:c2:7f:8d:5e:15:53:fd:4b:cb:e0:
3a:11:f8:ef:08:7e:38:28:8b:c4:11:e3:47:2b:d7:
54:1a:17:7f:42:cd:ae:47:1b:08:a3:62:0b:70:79:
c7:fd:16:f5:23:02:64:35:46:1c:2d:6a:2c:9f:ea:
1f:a0:0c:5c:ca:07:bf:ff:6c:73:13:07:22:4b:4d:
fe:51:93:5a:72:0f:92:32:9f:6c:cd:54:b0:48:ad:
09:c7:cf:db:2d:da:d5:e9:42:7c:14:1f:b9:ff:cd:
77:be:90:65:9e:e4:84:a4:24:b6:65:21:2c:a9:72:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B2:EA:84:1E:38:6A:12:6B:66:4A:E9:AB:BE:FA:88:FC:57:48:29
X509v3 Authority Key Identifier:
keyid:A4:FF:9D:C0:B6:6F:27:9A:D0:5C:A2:F4:EA:43:39:81:CC:E0:F0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP-dwLZvJ5rQXKL06kM5gczg8G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/xrLqhB44ahJrZkrpq776iPxXSCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/pP-dwLZvJ5rQXKL06kM5gczg8G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.123.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6c:91:c9:ae:09:89:0d:17:5c:48:d2:00:9a:41:c6:75:6a:
15:c7:93:db:3a:51:93:49:bb:90:a3:79:b9:af:f7:21:0c:34:
67:8f:3a:3e:3c:7d:d2:fd:5d:13:24:b6:25:30:e1:ea:2c:e1:
2e:d7:e3:b5:48:e1:a4:4c:21:47:fb:24:a4:f2:38:c1:de:f5:
de:53:df:f7:c5:42:2f:d7:94:cf:5b:a8:25:36:fd:24:c4:55:
78:00:4b:57:82:7a:29:c8:1b:4c:5f:38:ce:4b:0d:83:77:ca:
35:45:63:d0:d4:8f:c1:fd:3e:fb:a2:8d:7e:de:74:7d:2e:fb:
6a:27:8e:52:b3:c6:8e:0f:7b:a6:5c:f3:75:1a:80:a7:6a:bf:
c1:5c:36:fc:6d:22:6f:55:84:82:31:29:6c:c6:22:6d:7b:41:
70:66:c1:8d:89:4b:4b:f4:48:dd:0a:ac:d2:b0:f8:04:57:e0:
54:6e:90:ea:3c:46:66:bf:7c:e4:3a:8a:b7:cd:7a:5a:a7:a3:
b3:1a:00:df:4b:23:a0:0c:be:96:da:d6:e6:e7:ea:1f:03:dc:
fe:4c:7f:ed:0a:6c:8c:7d:51:2c:cf:cf:da:5c:25:1e:eb:82:
d9:f9:05:2b:dd:f3:96:18:c6:33:37:09:1d:e6:16:69:a0:02:
85:e2:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:12 2025 by rpki-client