Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/XwkiDoPJO2CBnz93OLKXgZcA-EI.roa
File: XwkiDoPJO2CBnz93OLKXgZcA-EI.roa (raw, json)
Hash identifier: z5n08om/6nq3rXIos6vXJLwfly1DbLZ5SYYouu/hGIA=
Subject key identifier: 5F:09:22:0E:83:C9:3B:60:81:9F:3F:77:38:B2:97:81:97:00:F8:42
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01935EEE37556FE734F05556AF824D1D51DF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/XwkiDoPJO2CBnz93OLKXgZcA-EI.roa
Signing time: Sun 24 Nov 2024 16:08:10 +0000
ROA not before: Sun 24 Nov 2024 16:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23961
IP address blocks: 194.104.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5e:ee:37:55:6f:e7:34:f0:55:56:af:82:4d:1d:51:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Nov 24 16:08:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f09220e83c93b60819f3f7738b297819700f842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:9e:82:09:56:0d:e0:dd:e2:42:3b:07:4e:
c3:91:7d:54:1e:c7:70:52:5e:c5:e8:0d:ed:4c:72:
86:36:15:e0:82:dc:dd:6e:d1:be:29:3a:d5:34:d5:
a9:0a:65:35:96:4d:23:4c:f3:5c:b4:ff:a0:bf:5c:
a3:06:99:2b:95:a3:1d:c6:de:2f:31:69:b4:d0:ce:
14:10:2c:68:0c:d0:ea:92:26:ea:00:c0:9a:00:11:
2a:3f:24:3a:a2:b9:30:72:e9:f0:4f:f0:83:65:9f:
8f:5b:63:a5:29:ef:ae:3e:bb:75:0f:3e:13:6c:3e:
d2:06:af:2c:d9:0f:12:7a:35:9d:8f:67:c5:b1:9e:
31:b4:0e:5d:83:27:18:10:29:2e:78:30:da:75:d2:
47:c1:50:2f:3c:7e:ac:c5:fa:8e:18:57:04:d2:fd:
8a:33:11:06:4c:34:95:ca:e2:91:87:8a:46:08:d2:
2e:ac:df:9b:cc:6b:9c:bd:2c:b5:a1:ee:a2:dd:79:
75:c1:6c:66:bc:ae:db:b0:90:af:a5:36:da:ee:47:
a7:2d:81:b4:ec:92:2e:66:b6:bd:41:8b:3a:9d:d8:
b7:0a:59:d1:dc:1e:b0:17:a5:2c:f5:fa:08:5b:12:
78:64:9d:b8:7f:6c:12:ca:3e:a8:00:c9:ae:04:23:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:22:0E:83:C9:3B:60:81:9F:3F:77:38:B2:97:81:97:00:F8:42
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/XwkiDoPJO2CBnz93OLKXgZcA-EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.146.0/23
Signature Algorithm: sha256WithRSAEncryption
90:f3:36:73:c1:74:0f:b2:ad:0a:d4:ba:a7:ea:33:25:1b:ba:
82:f9:18:88:ac:12:01:d5:eb:11:d8:cf:7a:7e:25:f0:01:1b:
47:7b:95:0f:72:76:86:2a:da:a6:7c:c7:3d:4d:50:d5:33:be:
b6:a0:43:08:4f:24:5a:67:bf:a5:66:76:27:2c:b7:0d:19:74:
bb:88:00:9e:fb:ae:4f:1b:2d:7c:ea:0e:54:d8:43:5e:6f:c7:
54:b6:f6:97:d8:56:11:d1:c1:09:5a:3f:71:3f:72:ef:58:f5:
47:94:c2:f8:8c:90:bb:3a:dd:e4:bc:21:e5:a9:a8:5c:5f:6f:
12:9e:a0:c1:91:75:14:82:b3:c0:5a:00:2d:a5:5e:94:19:24:
61:20:f3:a2:c2:cd:5b:77:b9:64:fa:9c:18:a6:a3:5d:3c:5d:
71:80:d8:37:4c:ff:45:98:a1:79:74:d7:2b:17:d4:1f:8a:b9:
44:cf:d4:3a:3e:cc:04:d9:f4:0a:8a:09:8c:d6:37:f4:e8:05:
61:e6:35:1a:5e:5e:06:ce:71:07:8d:d6:cb:ce:bb:ba:93:dc:
80:95:1b:85:73:9b:7e:2e:a9:71:f7:8a:a2:9c:26:4b:48:41:
b6:89:7f:cd:d6:57:26:04:5c:09:77:23:57:44:23:8d:dc:5b:
2f:c3:a3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:42:59 2025 by rpki-client