Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xbob74xuX2YCRK9WWS83TdJk9dw.roa
File: xbob74xuX2YCRK9WWS83TdJk9dw.roa (raw, json)
Hash identifier: 7xCklr7H29CEWbOkcJofNk/0745xsV04mi4Z13VdwpE=
Subject key identifier: C5:BA:1B:EF:8C:6E:5F:66:02:44:AF:56:59:2F:37:4D:D2:64:F5:DC
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A8BE642DFE452D34075F6DB19110
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xbob74xuX2YCRK9WWS83TdJk9dw.roa
Signing time: Wed 01 Jan 2025 19:48:34 +0000
ROA not before: Wed 01 Jan 2025 19:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58337
IP address blocks: 93.119.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a8:be:64:2d:fe:45:2d:34:07:5f:6d:b1:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5ba1bef8c6e5f660244af56592f374dd264f5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:8e:7b:9b:f1:29:66:36:67:ee:c1:ac:03:
b8:1d:89:c2:f1:80:2e:d5:f3:02:77:85:49:d3:f6:
8d:64:51:10:e2:f7:75:62:e2:91:34:80:3e:d5:5c:
1c:b4:85:05:97:a4:82:fe:ed:06:be:e8:fa:67:56:
03:0c:ee:53:eb:25:50:2b:ab:94:62:9d:6c:95:0e:
e2:fa:51:6f:86:e2:46:f9:c3:d0:93:11:02:e4:0c:
52:d2:45:06:65:44:6d:d1:9d:9d:04:30:b3:7e:e9:
6e:62:75:40:21:f4:96:78:8c:ad:aa:0f:28:ad:65:
bd:c6:fd:7e:48:12:21:34:d5:2e:10:0c:91:7b:93:
9c:4e:1d:34:fe:51:e7:0b:23:0e:89:68:c0:5d:bd:
00:b0:50:7d:4a:49:09:66:e2:96:89:05:17:f8:ef:
3e:f9:9c:e2:96:de:05:e4:1f:74:b7:ce:8d:3b:58:
eb:15:c0:40:f0:03:0c:e9:a1:75:14:87:40:57:f8:
18:2b:8b:8f:a7:f7:d7:ed:af:53:06:57:40:99:a7:
db:b7:28:cd:ff:d7:d9:48:b1:be:d7:1e:b6:f5:80:
33:ff:24:9c:cf:48:48:ec:ca:6a:13:60:9e:31:38:
bd:a7:5b:19:17:37:8a:6d:d8:92:3c:81:0e:aa:79:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BA:1B:EF:8C:6E:5F:66:02:44:AF:56:59:2F:37:4D:D2:64:F5:DC
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/xbob74xuX2YCRK9WWS83TdJk9dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.192.0/24
Signature Algorithm: sha256WithRSAEncryption
f0:42:24:e2:f7:9b:3c:77:ef:ad:f1:d2:4c:95:e3:e8:d0:85:
a2:17:16:0b:94:3d:01:85:29:87:06:82:7e:60:5f:68:3c:a4:
da:9d:7c:ca:9c:e9:54:8a:85:dc:fa:81:d5:56:5a:aa:4e:0d:
d1:86:6c:66:99:3c:5a:24:ab:ff:e1:e8:65:75:66:fb:29:43:
ca:3a:d5:e1:52:eb:62:3d:d6:4d:7f:d8:34:e1:5f:43:ec:16:
52:c8:c5:b3:e9:85:5d:19:e0:ee:29:01:b4:53:46:3c:8e:36:
c9:a9:fe:5f:81:46:f9:50:7f:b8:56:2a:98:6e:65:05:f4:aa:
de:78:e6:51:41:d2:77:6e:3e:71:dd:30:59:fd:03:a2:4a:62:
8f:4a:76:0a:a3:a5:9b:b9:8a:78:08:11:93:19:54:4e:64:9c:
82:ad:3d:48:86:11:9d:7e:8c:5f:3d:1f:38:a4:b7:d5:d8:56:
12:d8:0c:2a:75:2b:53:ad:89:f2:16:9d:03:1e:86:da:4f:d3:
ec:63:ff:12:99:e0:d8:1a:a9:cc:6c:65:80:71:e8:4c:6e:76:
f9:f2:87:42:ec:95:ec:35:2f:1b:ca:89:dc:bd:33:6d:33:64:
da:d8:18:4e:d7:b8:cc:51:f2:1b:1d:6d:5e:c3:60:65:63:34:
a2:36:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:25 2025 by rpki-client