Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/X8fY8K0OzoX-twMpR8XT4sdBQQM.roa
File: X8fY8K0OzoX-twMpR8XT4sdBQQM.roa (raw, json)
Hash identifier: eD5lOY0SbLpqWshxImyw0tBiDQ1puCvW1llLgsnndUs=
Subject key identifier: 5F:C7:D8:F0:AD:0E:CE:85:FE:B7:03:29:47:C5:D3:E2:C7:41:41:03
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 0185704BADFA07A312A3DA672370738D172A
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/X8fY8K0OzoX-twMpR8XT4sdBQQM.roa
Signing time: Mon 02 Jan 2023 02:24:45 +0000
ROA not before: Mon 02 Jan 2023 02:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137427
IP address blocks: 194.126.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ad:fa:07:a3:12:a3:da:67:23:70:73:8d:17:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Jan 2 02:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fc7d8f0ad0ece85feb7032947c5d3e2c7414103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:3f:f2:5b:15:49:b4:8b:bf:61:b0:13:f8:
44:8d:2d:49:00:2c:57:68:bb:5e:7f:a9:18:9e:74:
17:db:a3:d4:f0:76:fe:62:eb:b3:1a:d6:cb:c8:c2:
37:c0:34:c8:d3:46:84:6b:37:c5:2a:78:58:8f:0d:
af:41:65:e3:6f:fb:a9:61:75:e4:4e:e1:c8:2a:7a:
75:5d:a7:09:d7:9d:f0:d5:c9:43:9e:34:3f:43:4f:
33:f5:27:d5:b2:8e:1e:d9:4b:7b:b3:4a:50:11:23:
ad:c0:03:4b:69:92:9e:16:8c:64:00:0c:ec:5b:af:
cd:b4:5d:cc:b0:72:42:34:3b:d8:af:36:8e:5d:e1:
2e:00:7b:7c:0c:5a:94:37:e9:c1:ad:77:90:af:db:
01:78:2e:17:e2:0a:7a:6f:69:16:42:7e:1b:d1:8d:
4d:49:be:4d:00:91:66:39:31:8c:81:f5:8a:35:b9:
24:28:a7:c6:3f:86:e0:50:eb:c4:fa:8b:17:f7:7b:
05:70:f5:ab:cc:1a:2f:28:fa:d2:b6:98:5f:9f:56:
73:c9:41:be:8d:80:59:12:b7:94:ea:6c:46:75:21:
39:d5:c4:24:97:63:9e:5d:d5:24:c4:d6:cf:65:0f:
b7:81:a6:9e:c4:63:0b:20:e0:42:2b:57:af:66:98:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C7:D8:F0:AD:0E:CE:85:FE:B7:03:29:47:C5:D3:E2:C7:41:41:03
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/X8fY8K0OzoX-twMpR8XT4sdBQQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
83:85:23:a3:dd:5b:3d:e2:20:16:07:53:b1:20:66:ea:e4:49:
94:c2:b9:2c:3d:7d:39:28:e3:b6:28:d6:f0:37:7b:81:7f:be:
1d:65:20:f6:96:61:65:a6:27:24:ef:49:93:24:c3:a6:58:e0:
d9:70:2f:71:ae:9b:21:b4:92:c3:cf:49:4b:ff:c6:c0:f5:1d:
e3:97:40:e2:f4:9c:9e:ed:c9:64:54:e5:b7:80:79:27:b4:98:
30:c1:50:cb:81:90:74:b0:a0:a5:50:9a:bf:63:8c:37:05:47:
21:a7:36:1f:f4:16:21:22:c7:76:2c:03:36:eb:ad:58:7d:5b:
d0:97:22:53:0a:bf:a4:a2:f1:3d:c4:3b:f6:ca:f4:dc:b4:ad:
a6:b5:62:9f:b8:86:30:44:ab:f8:91:db:8f:b6:5b:2c:aa:18:
f0:60:83:ef:c9:38:06:7c:41:8c:4f:bf:a9:d1:9f:5f:95:2f:
57:25:fb:82:ef:7c:57:e4:c8:67:fc:dd:b6:5b:fa:32:89:b5:
19:69:ff:09:53:54:83:f0:4b:c0:f6:50:8d:02:3c:a5:99:95:
89:2f:e3:e0:a0:ae:1c:e2:58:2a:e3:f5:a8:67:04:96:32:39:
ba:23:ab:46:fa:91:59:f9:a2:34:c1:02:b7:89:80:ba:15:5d:
b4:81:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:33:27 2025 by rpki-client