Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa
File: XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa (raw, json)
Hash identifier: 4sk0t2n52t1+zIieedKbu6GF5jguH4obuoBrZPYHYOc=
Subject key identifier: 5C:35:61:C2:69:53:7F:F9:EA:84:28:0D:01:36:52:77:46:AB:D0:0C
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 01942521D338865DD54FABD57C3C9E4DC43D
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa
Signing time: Thu 02 Jan 2025 03:49:21 +0000
ROA not before: Thu 02 Jan 2025 03:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12213
IP address blocks: 83.142.64.0/21 maxlen: 21
193.93.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d3:38:86:5d:d5:4f:ab:d5:7c:3c:9e:4d:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Jan 2 03:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c3561c269537ff9ea84280d0136527746abd00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:25:2e:38:c1:5e:ec:b6:60:18:fb:4b:c9:
26:44:b5:51:c1:19:78:25:e2:ec:dd:54:60:20:4e:
ff:aa:ff:fb:52:c2:fb:d0:9c:54:ce:ae:aa:4f:4e:
25:3a:c5:6f:ab:1f:b9:ef:74:bc:70:65:30:d4:02:
80:94:22:1f:92:9e:4b:0e:be:ab:87:76:c3:19:ec:
0e:7c:48:9b:37:7c:e6:97:49:3b:63:08:f3:0b:40:
f9:a8:62:ad:5b:1c:42:0d:d8:eb:8d:79:23:91:39:
36:38:31:8e:08:6b:2b:5f:fd:48:1f:cf:6d:50:5f:
08:9f:ca:42:fe:a4:e3:0c:fd:92:be:73:a0:3a:35:
3b:e7:54:ae:46:df:82:49:e0:db:87:d3:5c:9a:e8:
d6:f3:a2:48:02:a2:d0:83:ab:1e:f9:24:02:8e:c0:
18:90:5b:f3:49:d1:d9:43:84:60:e1:4d:a1:7c:b2:
15:68:87:79:a3:c4:f8:a7:ec:64:70:95:9f:ca:c7:
3c:01:a1:4a:99:19:a4:01:8b:a1:99:99:40:db:a0:
6b:54:b4:08:13:df:3c:62:c3:db:40:92:fa:32:bc:
e1:f9:e9:33:ee:e0:07:23:c2:ad:ee:70:f0:d8:9b:
ef:6d:fa:f5:8f:e4:fd:28:1c:dc:70:28:42:b7:44:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:35:61:C2:69:53:7F:F9:EA:84:28:0D:01:36:52:77:46:AB:D0:0C
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.64.0/21
193.93.84.0/22
Signature Algorithm: sha256WithRSAEncryption
57:22:d4:02:a4:04:37:6a:b0:5c:6f:a0:6b:1b:08:47:82:b1:
64:1e:c5:69:4b:c9:75:63:c6:6c:84:63:af:f5:3b:f4:18:ef:
80:66:18:e4:1e:2b:d9:01:80:cf:96:d6:d5:dc:34:78:99:08:
ba:c4:c3:e6:a5:49:9f:fd:8c:71:34:08:dd:e1:96:4b:4f:f2:
51:ea:f9:d2:b4:1d:43:2a:ae:f2:ae:e8:a5:5d:83:4f:5f:b5:
33:20:77:0e:59:48:40:4f:b4:16:34:46:7e:b6:17:61:0e:1a:
c7:97:0f:76:75:40:fb:95:41:7c:b6:a7:88:42:f7:23:31:6c:
56:85:03:bd:8c:dd:40:08:9b:08:b3:c7:0d:d6:96:0f:6b:92:
06:f3:eb:2c:0e:24:06:11:f0:b0:06:e4:27:95:45:68:a6:ae:
a8:9e:bc:ce:40:92:1c:d3:c6:d2:e2:f4:9b:ad:d8:8e:5e:69:
92:4c:b0:11:38:3b:48:3e:aa:3f:fa:5a:7a:2f:3a:c0:ca:02:
40:54:2c:6f:ad:22:ed:7e:6b:94:4c:17:d6:57:31:16:6c:7d:
92:2f:f5:72:0a:b7:0e:be:5e:86:ab:4a:93:77:19:04:45:39:
2e:70:3e:c4:0d:d7:a6:55:42:8d:5a:63:ae:cd:f5:b3:1b:2a:
54:93:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:06 2025 by rpki-client