Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/XbJcuydIncWtAlCq-oCN4oH5WCE.roa
File: XbJcuydIncWtAlCq-oCN4oH5WCE.roa (raw, json)
Hash identifier: khCS83Yu0ZP4QD2xgvWixhTQRH03wB0gLlOMTM5yj2I=
Subject key identifier: 5D:B2:5C:BB:27:48:9D:C5:AD:02:50:AA:FA:80:8D:E2:81:F9:58:21
Certificate issuer: /CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
Certificate serial: D0E444
Authority key identifier: 21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/XbJcuydIncWtAlCq-oCN4oH5WCE.roa
Signing time: Sat 01 Jan 2022 12:05:25 +0000
ROA not before: Sat 01 Jan 2022 12:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.26.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13689924 (0xd0e444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
Validity
Not Before: Jan 1 12:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5db25cbb27489dc5ad0250aafa808de281f95821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:cc:26:32:f7:71:b5:5e:25:20:8a:42:e8:
2c:49:c8:f9:e1:48:ab:5f:51:82:3b:97:32:dd:72:
13:6c:d8:16:10:15:49:0b:73:0c:55:17:f6:48:81:
7e:5c:d3:c1:49:b0:f0:6d:51:38:94:4b:a1:d6:dd:
a5:59:21:3f:4f:c1:82:64:83:dc:b1:6f:0e:28:dd:
bc:8f:47:b9:2d:22:1d:1c:c6:0f:0b:f1:b5:c6:56:
97:93:f6:77:ba:c7:d4:96:2f:ee:4e:a7:24:a6:28:
d5:73:aa:92:a2:ed:49:c5:f1:67:95:d7:72:91:54:
3b:0d:85:cb:09:39:16:b8:fb:96:e2:22:12:9b:74:
24:d6:00:c9:b0:0b:a9:4b:b8:7f:c5:49:61:70:99:
10:45:34:66:09:49:bb:1c:80:33:65:99:87:56:53:
6a:9a:9e:c8:c2:30:d7:b2:90:00:df:ba:a1:45:36:
bf:06:1c:69:64:0e:87:14:61:3d:1a:5d:92:e1:af:
8c:d6:02:bc:53:82:4d:a0:46:82:47:9f:6c:30:b3:
63:44:b5:fe:5c:f3:86:45:93:9c:5d:c4:10:20:da:
97:0c:3b:1d:5f:68:36:78:67:e5:0d:a1:df:e1:6e:
8b:6a:df:7e:1b:07:b3:7d:40:77:b5:50:f9:d1:9c:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B2:5C:BB:27:48:9D:C5:AD:02:50:AA:FA:80:8D:E2:81:F9:58:21
X509v3 Authority Key Identifier:
keyid:21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/XbJcuydIncWtAlCq-oCN4oH5WCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:73:d7:32:bb:6e:3f:a7:3f:8e:69:a8:31:34:e0:90:b8:21:
16:ad:c9:f1:c9:ad:86:88:f8:81:de:f1:e7:28:67:57:09:94:
6e:e0:92:cb:01:c1:b9:56:c0:a2:57:ca:16:1e:5f:4a:91:a3:
11:7e:37:34:18:21:d1:90:68:6f:dd:9e:ae:41:d9:81:bc:a3:
69:4b:b2:52:2c:52:14:c2:b1:5b:e5:93:56:81:da:6b:98:27:
7c:e6:a4:6b:8b:ec:99:2f:92:39:7c:e6:39:f8:2e:9a:5c:e0:
cb:49:8d:06:d9:4b:5c:b3:b1:74:d6:9c:b6:dd:e3:b3:30:fc:
d5:bf:ab:92:80:06:88:c6:b1:44:0b:bf:a5:d5:1a:84:72:60:
38:3a:29:9e:e5:f8:0f:e8:11:d0:e6:96:0f:ba:e3:95:e1:34:
6e:07:5e:2b:ff:14:59:65:ae:75:a5:b2:17:1f:2f:ea:99:34:
b3:a2:52:60:16:03:17:9b:b9:17:ce:9f:67:72:3b:40:ac:c2:
b8:9b:b7:4f:27:75:c2:d7:4b:5a:8f:57:80:e8:ea:29:63:ed:
7e:c2:8d:49:7a:98:8c:1f:cf:1f:91:db:08:3e:b0:dd:ea:e9:
21:d1:07:4d:6e:9d:1e:9e:6b:65:d7:bf:b1:9f:f5:14:7a:2e:
67:b5:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:05 2025 by rpki-client