Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/x0axh4n_DaC6c1zlt0cZyUBbm6A.roa
File: x0axh4n_DaC6c1zlt0cZyUBbm6A.roa (raw, json)
Hash identifier: Jaupk19l4OhK0tjeiFEoV/neU6DYrge7rDtoCeYVWU0=
Subject key identifier: C7:46:B1:87:89:FF:0D:A0:BA:73:5C:E5:B7:47:19:C9:40:5B:9B:A0
Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial: 01942445888AD87A1766998AFDDBB98B41E3
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/x0axh4n_DaC6c1zlt0cZyUBbm6A.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201291
IP address blocks: 194.93.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:88:8a:d8:7a:17:66:99:8a:fd:db:b9:8b:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c746b18789ff0da0ba735ce5b74719c9405b9ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:a7:f2:84:00:99:a6:d8:d9:72:01:d7:78:
ba:b5:3c:78:3e:e6:ec:d5:5f:cf:e6:ba:46:3f:7c:
f9:dd:86:f9:88:e8:af:04:98:47:54:df:df:8b:79:
ef:be:34:34:ec:d7:ba:93:16:2f:4f:b7:94:3d:70:
36:39:16:e9:90:dc:29:3c:c7:02:5f:c7:b2:78:c9:
46:70:f9:36:80:8d:60:15:77:b0:ff:46:82:db:68:
b2:06:57:58:dd:d4:13:38:37:48:ef:59:c4:5a:a6:
28:cf:c0:02:43:82:ad:3e:ac:a5:57:bb:92:5a:cd:
8a:fb:f4:e0:54:e7:12:e9:d7:b3:fe:21:02:53:a8:
11:dc:2d:c8:36:6e:bf:9f:73:0d:e0:75:74:ad:48:
b3:f9:8c:12:da:1f:52:8f:96:59:d9:48:51:0f:72:
ea:c5:88:57:d8:bc:15:6b:b8:d4:ec:72:ae:20:ac:
ec:b9:3b:d4:fa:3f:44:3f:2f:d3:db:8f:43:a9:4e:
cb:5d:b6:52:0a:1b:19:32:43:db:ac:a1:a5:5c:aa:
6b:57:1a:e5:11:e0:54:12:cd:f5:f7:ac:2b:8f:27:
83:cc:a1:bf:f6:6c:f5:bc:18:72:47:75:67:c4:5b:
63:66:7c:37:95:2e:01:fa:53:a1:0b:29:1e:99:47:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:46:B1:87:89:FF:0D:A0:BA:73:5C:E5:B7:47:19:C9:40:5B:9B:A0
X509v3 Authority Key Identifier:
keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/x0axh4n_DaC6c1zlt0cZyUBbm6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.97.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f8:c2:a7:c7:dc:75:4d:d6:19:2a:0d:06:e4:13:43:e7:6f:
15:68:2e:11:24:3c:07:46:fb:27:7a:7f:1e:7a:a1:f8:50:38:
fa:0d:89:7f:16:a1:9a:d7:10:80:c5:d4:c8:89:f1:d6:89:01:
a7:79:84:81:d7:f6:27:1b:ac:86:12:e7:c4:de:65:d0:a4:68:
bf:2b:4e:f0:7f:12:2a:fb:20:98:fe:55:8c:54:49:02:a4:77:
f0:2a:08:e5:07:2d:65:fa:26:0f:45:83:30:04:2c:47:26:90:
20:b9:70:27:e6:7d:e1:5e:eb:9c:e1:ee:ca:f5:e1:63:93:eb:
ba:ec:41:a3:1d:f5:ec:0a:d9:b3:5f:0a:fd:cc:33:f4:33:c5:
5f:35:61:f3:15:dc:e1:c9:8b:eb:06:02:84:f7:29:21:af:e4:
1c:8b:bd:8c:87:56:c8:bd:32:51:4e:32:0a:48:5a:49:51:e5:
ee:31:fa:94:3c:8e:de:2f:96:a6:64:98:e6:10:52:fc:bd:f4:
f8:34:f6:6c:75:b5:f6:6e:78:12:43:c7:3d:1c:a1:d8:c6:24:
63:c5:ba:d2:30:6f:e6:53:63:23:ab:42:f8:7d:03:10:e5:71:
6a:e2:75:26:ea:7e:63:28:de:d1:ce:2c:86:1e:c6:24:2a:14:
e8:d4:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:41 2025 by rpki-client