Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa
File: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (raw, json)
Hash identifier: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=
Subject key identifier: 5E:5E:9A:96:4D:7F:2C:2A:8E:23:03:D3:F0:D7:58:1E:5D:F5:17:54
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 019420D5F20794E664863AD6C5DBC137D877
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214872
IP address blocks: 193.104.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f2:07:94:e6:64:86:3a:d6:c5:db:c1:37:d8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e5e9a964d7f2c2a8e2303d3f0d7581e5df51754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:d0:8b:fd:86:41:66:c5:2e:90:5c:ad:ed:
77:49:b1:79:e1:8c:aa:a3:90:3b:36:49:4c:94:f3:
5f:be:21:2c:9d:59:01:03:b2:66:f0:8f:8c:93:7e:
5d:fb:0b:b3:4f:5d:61:e1:cb:c3:3e:68:12:b9:79:
17:8f:e6:d8:d1:41:21:02:f3:e9:4d:f2:bc:6a:28:
9f:76:dc:44:78:f3:60:c8:9c:c3:ed:0c:3c:ba:ed:
f4:e1:a3:00:d5:0f:b8:c7:65:2a:65:17:a8:a5:a9:
83:ee:24:3a:ca:57:1d:c7:2e:38:fe:4a:84:4c:82:
d5:04:86:31:5d:53:7a:8a:4c:18:69:7f:af:30:78:
dd:2b:64:77:9d:eb:5a:d1:49:aa:96:2d:91:db:30:
83:d7:5d:bb:9c:cb:26:05:4c:88:88:fb:df:3a:94:
a7:f0:23:d5:22:74:b2:60:dd:d5:71:3a:74:c7:d5:
cb:fc:e9:f7:f3:15:0f:36:b7:9c:37:c6:15:48:12:
7b:38:48:f2:78:1f:7b:a6:0e:29:0e:5a:99:49:3e:
53:af:20:9c:66:56:a6:97:a4:fc:b7:55:dd:d5:1a:
3d:b8:47:b2:e7:36:5d:76:73:7b:72:09:a8:72:df:
25:26:1e:87:f8:df:83:87:e1:58:3e:bf:68:94:5a:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5E:9A:96:4D:7F:2C:2A:8E:23:03:D3:F0:D7:58:1E:5D:F5:17:54
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:dc:98:66:6d:8b:25:58:20:02:27:11:1c:a7:07:65:fd:a0:
e4:32:d5:2f:8c:c5:56:f9:a7:5f:c4:27:34:43:38:b8:2a:6f:
a2:79:d0:8d:0c:b6:47:77:f9:f3:30:98:89:d3:a2:d8:56:e2:
76:b0:97:0f:13:28:d8:d8:d7:22:66:63:a0:17:80:c0:5e:aa:
80:61:9f:50:3d:f3:4d:56:89:57:c7:3b:bd:08:5a:9b:ed:35:
08:62:a6:0e:0c:37:01:c8:e1:6c:b6:a6:19:f7:88:1f:a9:65:
86:8a:01:62:42:41:78:64:43:7b:6e:d6:55:c3:aa:a0:34:29:
b4:0b:97:73:a5:8f:da:72:c7:68:0b:c4:6b:7e:db:df:ab:46:
2a:d7:9e:ef:ab:3e:f4:0b:c9:2c:47:34:b6:d7:57:c0:b0:46:
e6:7a:49:c9:ab:19:85:52:f5:c9:3c:44:08:66:31:b0:f1:0b:
a7:fd:c0:6b:18:c3:26:03:6c:bc:da:21:ac:86:63:f9:56:4d:
cc:b9:92:48:82:f3:57:c2:c2:6c:f3:95:eb:d5:77:ee:5d:98:
3d:93:7a:ee:94:64:26:3c:d5:b9:73:c9:f1:ae:38:87:89:ac:
87:a4:b6:16:41:d4:35:b9:fb:2c:e0:3d:5a:66:98:08:c0:bb:
e3:ec:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:28 2025 by rpki-client