Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/Xexkr9ER5xECkERyEHLzkSej43U.roa
File: Xexkr9ER5xECkERyEHLzkSej43U.roa (raw, json)
Hash identifier: sVhi67eobs1XfmF4q9loQE5orHqrnoaPDVwvOiSqc/4=
Subject key identifier: 5D:EC:64:AF:D1:11:E7:11:02:90:44:72:10:72:F3:91:27:A3:E3:75
Certificate issuer: /CN=947b9c9d1c1bebca2605323946c809887be90871
Certificate serial: 03B91E6F
Authority key identifier: 94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/Xexkr9ER5xECkERyEHLzkSej43U.roa
Signing time: Fri 29 Apr 2022 17:06:42 +0000
ROA not before: Fri 29 Apr 2022 17:06:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 193.149.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62463599 (0x3b91e6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947b9c9d1c1bebca2605323946c809887be90871
Validity
Not Before: Apr 29 17:06:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dec64afd111e711029044721072f39127a3e375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:5d:ed:68:35:e8:ef:fd:ef:3e:56:3b:46:
10:5c:2b:22:03:f0:c7:ae:df:4c:df:5b:51:30:da:
88:5b:c2:53:89:22:2a:07:70:03:90:b4:0d:35:a1:
d2:1e:4c:4b:d1:52:f9:4b:f8:a5:be:20:6b:5d:0e:
82:42:5d:1e:f4:e4:0d:7e:c5:26:58:ca:47:01:0c:
87:fe:5e:a6:fa:8b:f0:d5:5c:3e:58:3e:55:fa:42:
49:e5:8a:8c:13:07:b2:0c:b6:c7:0c:a8:cc:d4:ce:
29:6f:a7:cd:2d:b1:07:39:74:8d:c6:2d:b7:c0:7b:
79:41:b2:6f:b0:6d:21:7e:52:a3:88:d7:4b:cf:fd:
97:b2:af:b5:5f:43:f3:23:1f:79:d6:4c:e8:a3:65:
c7:15:2f:91:58:b5:3a:13:d8:8d:4b:39:4b:64:54:
0f:44:fc:98:b8:be:7f:f1:91:1f:ce:13:0c:d3:1a:
c3:4e:ae:3d:bd:07:9b:61:75:79:ae:07:e8:d7:bb:
3e:04:25:32:6b:c3:b9:90:99:9a:4e:7f:9e:f5:ff:
46:64:53:95:0e:d7:d7:bb:aa:e6:21:e4:8f:18:26:
ee:36:c7:ec:b0:ff:68:c6:4e:ec:03:2c:43:12:56:
0d:1c:bd:e2:20:02:f7:b4:3d:26:24:31:c6:e0:94:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EC:64:AF:D1:11:E7:11:02:90:44:72:10:72:F3:91:27:A3:E3:75
X509v3 Authority Key Identifier:
keyid:94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/Xexkr9ER5xECkERyEHLzkSej43U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
52:d3:90:51:9b:83:69:07:37:6e:ed:65:0f:05:ba:ac:4f:5d:
0f:4e:3b:7d:43:ca:9c:76:de:23:df:91:8a:e0:71:8a:c7:8a:
d3:c3:27:aa:83:77:e0:cf:12:31:ef:75:52:ef:17:ee:a8:04:
64:37:d4:b2:8c:ae:62:c6:cb:66:fb:7e:41:14:06:5b:e6:9a:
a4:0c:66:4c:f7:a0:f1:d0:e1:7b:51:b9:15:39:bf:eb:46:6f:
7f:8f:f7:08:dd:5f:ff:79:d3:e4:db:49:b7:1b:a6:c3:7a:60:
7d:7e:71:fd:75:1b:b9:c2:17:84:3e:0a:6e:a2:97:61:2d:46:
6d:db:63:3c:80:1d:1e:27:ce:19:7e:3b:d5:c7:54:11:71:fe:
59:8d:df:4d:17:bb:f2:8e:55:3b:0a:e0:0f:15:25:c1:25:9f:
a9:b2:96:80:05:2a:16:c7:da:88:34:96:9e:80:d3:2f:83:b7:
11:87:57:39:d9:48:e2:3b:9f:09:2d:2e:b6:f7:24:dc:ef:a3:
ac:e7:db:e0:61:da:63:62:9f:0e:f8:33:85:de:58:2a:62:dc:
e8:37:6e:c4:b1:04:5b:68:e7:c9:c5:9e:62:00:69:e1:96:d8:
f8:12:59:58:5e:d3:77:0c:ee:5c:45:2a:1a:b9:c2:4e:14:eb:
42:99:f5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:06 2025 by rpki-client