Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/Xm-ngS_MnUdhXjLf6p90jOWUmEw.roa
File: Xm-ngS_MnUdhXjLf6p90jOWUmEw.roa (raw, json)
Hash identifier: 9Gf1m1xe/g6A5DBxtP2ns4dstk3fjoEba5kQQxWmoRM=
Subject key identifier: 5E:6F:A7:81:2F:CC:9D:47:61:5E:32:DF:EA:9F:74:8C:E5:94:98:4C
Certificate issuer: /CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
Certificate serial: 019424447DA5A16232CF5879F912C20AA30D
Authority key identifier: 6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/Xm-ngS_MnUdhXjLf6p90jOWUmEw.roa
Signing time: Wed 01 Jan 2025 23:47:35 +0000
ROA not before: Wed 01 Jan 2025 23:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 193.108.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:7d:a5:a1:62:32:cf:58:79:f9:12:c2:0a:a3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
Validity
Not Before: Jan 1 23:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e6fa7812fcc9d47615e32dfea9f748ce594984c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:69:b0:68:c4:de:d1:03:14:37:e4:76:9c:
36:1c:91:c2:ae:81:ad:09:9f:0c:e4:97:11:d7:b2:
53:a2:a5:b0:d9:c8:73:51:3e:35:55:14:6d:88:a4:
55:41:f2:fc:0a:c0:de:41:9d:0e:c7:74:2e:8a:68:
1f:43:5d:c5:06:49:bc:e6:db:6c:52:da:6a:0d:29:
ce:b5:f2:17:fa:26:4e:ff:81:65:82:21:c7:6b:1d:
7b:dc:83:fb:18:d1:4d:95:3e:0f:33:8c:1e:b6:87:
60:4e:14:53:13:c8:da:41:3c:3c:e7:63:de:ea:fc:
cc:5f:2d:c2:e7:82:c4:08:4c:94:80:fb:8b:e5:60:
4a:36:0d:47:0a:ba:e5:29:6f:02:aa:3f:3f:71:57:
31:dc:cd:a9:e2:c0:7f:63:6e:b2:f8:ff:be:e3:a4:
e1:ee:9d:db:75:c7:93:ae:d1:13:8d:30:7b:1d:69:
ff:f3:d4:ac:69:61:50:6e:9d:aa:37:b8:5e:c3:f1:
70:84:44:5b:6d:23:d4:60:fe:71:f0:7c:da:bc:38:
72:e6:6e:5e:7c:94:27:eb:22:e5:dd:6c:98:1d:8f:
dc:a0:46:ee:d0:43:f9:8d:8a:64:a5:e0:51:ca:d7:
d4:c4:0e:13:c0:bd:6f:83:07:6d:5e:ac:d6:63:10:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6F:A7:81:2F:CC:9D:47:61:5E:32:DF:EA:9F:74:8C:E5:94:98:4C
X509v3 Authority Key Identifier:
keyid:6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/Xm-ngS_MnUdhXjLf6p90jOWUmEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.130.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e2:af:06:33:2c:9b:fe:91:6b:47:0c:8c:cb:2f:88:07:07:
9a:85:73:87:c8:58:a9:b2:68:c4:53:d5:82:5f:b7:7d:a5:22:
5b:d8:56:d1:57:5d:aa:f5:7a:4c:86:b3:0d:ef:a3:2f:9d:30:
13:44:5a:ee:d0:e7:a4:c1:a8:99:60:f5:45:4f:2b:3e:9c:f6:
cb:92:85:ae:b7:53:f4:0b:54:88:b0:f2:91:ea:9f:d2:36:b0:
c5:3b:c7:22:ac:98:dc:e9:ff:23:3a:bd:53:42:f5:e1:35:07:
7d:7b:d8:b6:9b:1a:b8:ff:f0:33:83:7c:79:74:0c:d0:86:bf:
f1:93:31:27:28:bd:d3:47:dd:3d:1c:7a:74:0a:d8:32:3a:18:
cd:94:50:bc:59:a7:65:47:6e:02:14:80:81:80:48:fc:ff:2c:
35:cc:b8:72:3b:77:28:e6:40:13:a0:11:9f:c2:b4:31:c6:8c:
f1:6d:0f:d0:94:69:37:b7:49:dc:3f:99:8f:50:c5:fd:a0:d0:
d8:90:4e:cf:b1:16:81:70:5d:ad:5a:8d:e1:67:37:84:1e:b9:
81:cc:e2:9f:d7:2e:ac:90:8e:9b:80:14:03:3b:08:ad:19:61:
95:f9:01:ea:aa:e2:59:9c:79:2a:47:4f:92:c3:38:fd:37:3a:
fd:cc:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:44 2025 by rpki-client