Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XtFuUfYargbq0XnIVn9ar9WCKMo.roa
File: XtFuUfYargbq0XnIVn9ar9WCKMo.roa (raw, json)
Hash identifier: XEooxts1KI1WZ1qE1pW+Vw1ibdu1dBJ2lidX3SDPcGs=
Subject key identifier: 5E:D1:6E:51:F6:1A:AE:06:EA:D1:79:C8:56:7F:5A:AF:D5:82:28:CA
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018B6BB90AA7CB622786AF7741C1B5E887CF
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XtFuUfYargbq0XnIVn9ar9WCKMo.roa
Signing time: Thu 26 Oct 2023 11:22:50 +0000
ROA not before: Thu 26 Oct 2023 11:22:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 94.176.164.0/23 maxlen: 24
94.177.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:b9:0a:a7:cb:62:27:86:af:77:41:c1:b5:e8:87:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Oct 26 11:22:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ed16e51f61aae06ead179c8567f5aafd58228ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:0e:e0:4d:78:e0:5e:f0:0c:1f:94:4a:6f:
90:e7:65:47:fd:b4:72:3f:14:4c:a0:f2:e2:eb:58:
0d:ca:9d:f1:4b:c1:8d:d4:d5:2d:3c:3a:5b:bb:b6:
b1:dd:71:63:28:d6:92:38:76:65:66:cb:58:41:94:
56:53:e1:c4:ff:cd:2d:9e:f2:1a:e1:b8:cb:c2:de:
61:fe:f3:0d:28:64:31:ab:5f:36:e7:fb:ff:11:0a:
e6:7f:45:12:a6:82:b3:11:99:7c:6e:f1:03:97:84:
27:d6:89:06:cc:b3:03:af:3b:3b:ba:5b:77:5c:0f:
80:12:9d:2d:3c:49:af:0f:b2:b8:6c:5d:2b:ec:bf:
67:d1:2c:74:25:90:7c:f6:a9:1c:0c:32:31:5b:3a:
3f:d8:77:db:0a:b8:c2:fe:90:6f:a1:39:a3:c0:ac:
9c:c2:b3:34:fa:87:69:9f:eb:36:f4:23:1c:ae:90:
d0:00:24:3e:e0:73:40:5b:fd:73:88:2b:95:d9:2f:
01:3d:03:98:58:3c:b5:ab:ec:d7:d0:71:b1:48:30:
81:b3:6b:68:07:5a:2a:54:22:68:0b:c1:48:3b:26:
a6:6d:c5:79:05:f6:c5:15:60:a1:fe:4e:08:b9:8a:
5a:c5:55:af:6e:24:6e:31:9c:d7:3d:c5:84:d5:4a:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:6E:51:F6:1A:AE:06:EA:D1:79:C8:56:7F:5A:AF:D5:82:28:CA
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XtFuUfYargbq0XnIVn9ar9WCKMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.164.0/23
94.177.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f1:4c:f5:1d:0a:eb:af:45:1b:1d:2c:8a:02:16:1b:fb:68:
56:3f:fb:64:52:bd:b0:1f:7b:9b:13:8c:fc:02:1d:6d:56:58:
38:16:c1:e0:02:b2:63:84:97:0e:01:5d:fb:bd:69:e3:af:04:
1e:8f:3d:2c:b7:7b:4e:63:bc:ae:ef:67:e5:df:14:44:4e:1b:
32:51:98:0b:07:37:29:03:3a:40:ee:5e:8b:66:3f:ce:b5:7c:
99:b6:74:ac:a3:c9:0f:14:5b:bc:b7:57:43:1b:1e:64:5f:da:
96:3c:d3:6c:5d:19:c3:64:98:26:0c:a0:83:cb:96:0b:69:b4:
e6:12:23:8b:e6:a5:9d:26:1f:e0:71:ec:56:89:fc:11:54:d4:
80:9d:0a:31:1d:a6:53:7c:bb:23:c5:d8:90:e0:b2:31:9d:ee:
2e:ab:3e:7c:dd:a7:fc:f8:d7:45:d1:a6:26:c0:13:35:10:30:
a2:e1:c0:b0:ab:a5:76:2c:c8:d3:c9:a4:3f:c9:eb:df:23:10:
27:a2:10:49:1d:be:06:09:04:07:4d:b7:3a:ac:b7:0a:d4:25:
be:02:ef:08:be:20:36:11:35:16:6d:29:5c:56:00:9e:37:c8:
11:a6:f1:68:6a:63:f2:5e:fa:37:e8:fe:d8:05:17:62:be:ba:
5c:b0:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:24 2025 by rpki-client