Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/Xmkl6LzftdXXTuFIy5y0gG04yrg.roa
File: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (raw, json)
Hash identifier: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=
Subject key identifier: 5E:69:25:E8:BC:DF:B5:D5:D7:4E:E1:48:CB:9C:B4:80:6D:38:CA:B8
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 0194258E8A427486EB53701EFC0E99CB4C23
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/Xmkl6LzftdXXTuFIy5y0gG04yrg.roa
Signing time: Thu 02 Jan 2025 05:48:05 +0000
ROA not before: Thu 02 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13054
IP address blocks: 193.101.168.0/21 maxlen: 21
193.101.168.0/22 maxlen: 22
193.101.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:8a:42:74:86:eb:53:70:1e:fc:0e:99:cb:4c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Jan 2 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e6925e8bcdfb5d5d74ee148cb9cb4806d38cab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:46:c0:64:d2:43:ea:94:8f:50:7e:c9:8a:
d2:fc:ad:72:6c:5e:f2:a9:f5:20:44:0b:c1:eb:d4:
17:40:08:cf:e5:5e:54:85:52:3e:56:ad:dc:f6:7d:
29:8f:d0:fd:20:12:78:1a:6d:20:57:a8:6d:4e:02:
44:b7:3c:8f:1d:41:37:2a:ad:09:62:5d:39:a8:fb:
5f:20:bf:1c:10:ed:63:7e:e4:1a:5a:c9:77:a7:d6:
df:42:4e:3e:4a:bd:0b:82:d3:cc:0a:52:11:50:68:
0c:ad:3e:62:5d:77:67:fc:48:d9:38:73:10:b6:65:
37:d6:59:f9:c7:37:26:4e:98:d4:5e:de:0f:e8:f6:
92:04:0d:29:70:ce:66:46:fc:13:af:98:dc:2e:49:
c4:a5:6b:67:52:87:32:21:1c:27:3e:92:fe:3d:15:
89:7b:73:d8:ec:ae:7e:95:57:c6:aa:ee:3d:ad:02:
ac:73:f8:e0:b5:42:ba:aa:c8:c7:8e:7f:54:2f:bd:
01:ac:91:14:7a:f8:41:36:e5:ce:02:50:67:41:95:
f4:24:7f:c9:f7:84:36:ba:5d:8d:7b:74:dd:2c:0e:
05:43:ef:61:c1:3a:da:75:9e:79:25:21:ab:0a:52:
54:f5:55:1b:c6:44:62:b5:95:5c:a1:47:27:82:d4:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:25:E8:BC:DF:B5:D5:D7:4E:E1:48:CB:9C:B4:80:6D:38:CA:B8
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/Xmkl6LzftdXXTuFIy5y0gG04yrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.168.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:15:1a:b2:d0:2c:53:f1:ab:a0:2c:56:af:0f:94:1a:9f:5c:
60:da:d0:78:c1:38:e9:d8:55:fe:0e:65:b5:c0:00:89:4c:66:
a6:9d:9a:99:aa:16:e6:1d:b5:1b:5f:8c:8b:22:92:0b:f1:63:
cf:f1:f5:fb:7b:ed:6f:e3:55:ba:1e:00:e1:0c:e3:05:5d:90:
0c:62:95:c8:71:91:1a:ef:76:f6:9c:f1:02:29:be:83:fe:dd:
d4:2b:87:94:07:41:4f:11:8c:e6:ad:3a:ea:fe:71:35:a1:16:
ef:9d:36:14:80:e5:fc:a7:fe:05:de:99:ec:12:2f:72:89:85:
6d:f8:b7:11:6a:a5:1c:cc:f6:4c:b1:01:01:3a:81:76:85:44:
16:4f:bc:02:b9:ae:12:58:5a:1c:db:95:74:17:55:37:fa:7b:
41:be:3d:1a:1c:c3:7a:99:28:a8:34:d7:b3:06:2d:0a:d0:55:
38:a7:9f:55:88:4c:73:2f:15:f3:6f:d0:59:b6:4c:98:12:01:
01:15:55:2c:89:5d:f8:ee:b3:b3:a9:85:6e:f8:e3:62:61:1e:
47:ee:4d:2a:9c:56:88:37:4a:4d:47:26:37:ef:d9:13:9e:9a:
c0:b1:bb:ce:e2:a7:d8:5c:4d:13:93:13:42:1d:82:03:a7:f8:
ad:d1:39:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 06:13:41 2025 by rpki-client