Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/xT6LSHcklUc3M3cH3H2fye8Rh5Q.roa
File: xT6LSHcklUc3M3cH3H2fye8Rh5Q.roa (raw, json)
Hash identifier: TTxYyL6eHUVGHRRaGbbWfPgpApE3u59SB8dEYudVkS8=
Subject key identifier: C5:3E:8B:48:77:24:95:47:37:33:77:07:DC:7D:9F:C9:EF:11:87:94
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01941F8C0BA8AC53C5CEEE4BBFFDD9CE1902
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/xT6LSHcklUc3M3cH3H2fye8Rh5Q.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 193.35.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0b:a8:ac:53:c5:ce:ee:4b:bf:fd:d9:ce:19:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c53e8b487724954737337707dc7d9fc9ef118794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:18:42:70:4a:70:d9:75:d5:45:fb:41:68:
16:eb:f5:74:95:d6:f3:34:bf:75:88:a2:a6:94:e5:
e0:39:9f:fb:9f:ef:db:0c:00:be:11:ee:03:0e:ce:
7b:19:4c:96:97:12:04:f0:8b:4c:b5:40:0d:d1:41:
46:4b:c0:5f:2e:c1:3d:da:34:50:e2:31:6a:d6:b4:
bd:87:75:61:92:87:d5:cc:63:9d:65:c2:c9:a3:54:
b9:a0:c0:38:dd:fe:c8:9d:86:6c:ee:72:10:22:0d:
fc:65:d3:a5:07:52:b4:7e:18:40:28:fe:96:10:23:
e9:29:d9:1c:2f:53:4d:d3:bc:3c:e1:40:46:b0:3f:
f2:da:02:7b:8c:34:97:93:b2:79:54:f4:24:8a:36:
18:92:61:16:f0:b6:3b:44:a6:32:34:78:69:06:2a:
ff:a4:19:2b:59:3d:24:b3:ec:f6:67:8c:83:08:00:
db:b8:47:4a:1e:cb:04:19:2d:d3:7f:f3:6f:bd:3a:
d5:a1:a5:ad:20:ad:8f:71:ac:b5:e4:7c:80:64:14:
c8:8d:53:dd:36:17:0f:3e:8c:93:d0:d7:08:9e:48:
e1:bc:63:eb:03:e0:93:d5:e8:cb:65:ec:0e:c3:b0:
29:2b:8b:52:c3:a9:6f:8c:95:2d:bf:14:dd:78:b3:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3E:8B:48:77:24:95:47:37:33:77:07:DC:7D:9F:C9:EF:11:87:94
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/xT6LSHcklUc3M3cH3H2fye8Rh5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:82:ef:59:f3:4f:e2:06:16:4c:c9:e2:34:18:0d:2b:fd:81:
7c:61:40:e3:65:b0:16:8b:fa:08:3f:cf:f6:c3:61:b3:05:da:
a7:69:4c:31:6a:01:52:d2:e2:cd:1b:6f:17:2a:b0:5b:a3:47:
1b:0c:ac:ef:78:f7:82:2a:d4:b1:32:7c:cb:5d:4a:d3:90:60:
ca:98:51:6e:ef:f9:b4:ea:55:55:0c:cc:47:4a:77:4f:2d:fc:
10:e2:89:b2:6e:74:af:8b:69:45:6c:33:19:68:66:b2:68:cb:
4c:6e:bc:77:1d:f7:05:2c:e0:04:7f:ce:aa:03:a5:6b:fe:fe:
31:98:76:dc:20:99:a3:c9:56:47:34:79:41:f8:c4:84:9c:19:
6c:f0:85:89:f7:75:ee:44:8d:a7:0d:c6:03:99:30:27:27:89:
90:b0:14:ab:e4:8c:7f:03:88:28:0d:c4:0d:e4:1a:42:69:0e:
5a:13:b6:1b:9a:88:29:d0:fa:f5:2b:7a:a3:2b:a2:35:72:15:
18:5b:0a:d2:01:54:2d:3a:de:eb:13:a9:b2:99:91:0c:d9:5a:
e2:8a:96:8a:1f:55:4b:92:5b:52:10:47:8e:62:48:8f:57:4a:
35:f4:a4:8d:b1:82:c1:7b:00:41:56:bd:f0:7b:65:28:34:33:
71:a7:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:58:51 2025 by rpki-client