Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/XtEdAEEop3HSdnOxibG98C_uMCU.roa
File: XtEdAEEop3HSdnOxibG98C_uMCU.roa (raw, json)
Hash identifier: +p4FtnANqp2tZpv3Dmdn2vhOEqjGwMWFA5juiZbc568=
Subject key identifier: 5E:D1:1D:00:41:28:A7:71:D2:76:73:B1:89:B1:BD:F0:2F:EE:30:25
Certificate issuer: /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial: 019421B20230D282B89333321814F138DCE1
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/XtEdAEEop3HSdnOxibG98C_uMCU.roa
Signing time: Wed 01 Jan 2025 11:48:21 +0000
ROA not before: Wed 01 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207275
IP address blocks: 91.226.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:02:30:d2:82:b8:93:33:32:18:14:f1:38:dc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ed11d004128a771d27673b189b1bdf02fee3025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:74:4c:10:d1:9f:44:2c:9a:e2:22:1f:a8:
7d:64:e3:d3:a3:e4:82:96:79:24:11:5f:eb:1c:52:
1d:07:c7:6f:dc:f0:95:33:41:85:27:16:9e:47:9b:
39:67:04:94:23:e8:f5:3f:58:76:33:a1:96:8c:03:
fe:94:27:2b:e7:93:3c:ef:22:04:4d:4a:29:39:85:
53:fe:a4:4d:65:bb:8d:58:92:65:a6:86:31:cb:b9:
57:e0:53:10:d0:ff:f3:bf:3e:d0:aa:b4:a3:bf:8a:
5e:7d:ee:6f:6e:f0:2d:03:4f:06:5d:0b:a1:75:d6:
93:df:7f:7e:02:74:8a:bf:3e:78:73:aa:49:01:23:
e1:6c:95:90:43:06:16:44:b4:1b:70:7d:e1:4e:47:
e6:53:45:26:2d:68:fc:56:ff:3c:47:23:6c:db:5c:
fc:d5:50:b1:22:79:ed:db:20:76:fe:31:80:7b:5c:
a3:c4:f6:ed:f7:cf:7f:a2:05:ae:25:8a:f7:a3:c3:
b0:5d:4b:4a:2d:e1:15:79:b6:6a:55:ff:18:4c:13:
93:fd:b0:78:45:3f:75:72:85:97:a6:d3:1d:74:28:
70:a3:61:9e:9d:9a:40:27:1b:6b:69:8f:0e:ba:aa:
b3:e0:f4:63:d7:0d:10:d5:11:8a:bb:9a:e0:2f:bd:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:1D:00:41:28:A7:71:D2:76:73:B1:89:B1:BD:F0:2F:EE:30:25
X509v3 Authority Key Identifier:
keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/XtEdAEEop3HSdnOxibG98C_uMCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:51:d6:c2:6e:21:fe:23:e5:aa:6b:4b:1e:46:28:86:35:bb:
95:4a:9b:26:c6:29:aa:d7:74:5e:5c:0f:4c:04:2b:35:92:46:
10:ec:b7:42:f3:b4:06:ef:40:a9:b1:04:2f:1f:f8:f8:25:53:
f7:fc:31:73:5c:74:2a:b1:09:36:e4:f4:fc:16:52:75:e3:3c:
d5:00:da:2b:00:e1:aa:1e:25:1d:73:75:80:32:6e:8c:5c:91:
21:11:6c:47:49:02:27:30:a8:bc:af:de:1f:7b:e1:aa:62:36:
a2:bd:46:75:10:84:f8:8a:ba:f8:7f:60:0b:6d:5e:36:d7:8e:
18:11:19:db:26:2d:2d:ed:07:ce:84:0b:2a:ee:65:9c:8e:26:
ac:6b:ba:32:f8:31:a0:29:79:40:4f:62:ac:5a:c6:cc:2d:90:
37:89:1c:04:18:41:15:d2:a6:ea:52:6e:f7:1a:da:ec:c6:98:
f8:be:6c:18:2b:08:c1:c9:11:62:6d:b4:bb:2d:e5:b2:9c:19:
e2:56:a1:1f:17:2e:90:e0:eb:31:0c:ff:16:ea:34:8d:af:b4:
9e:75:55:ba:3d:fa:6a:e0:94:8b:9c:93:83:8a:14:2d:a2:0e:
13:19:69:b9:80:0c:f0:63:45:30:2c:31:c6:87:85:4b:a3:f2:
b3:72:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:17 2025 by rpki-client