Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/XClvaY1in9ouUhR8Ia9BYbJiBDY.roa
File: XClvaY1in9ouUhR8Ia9BYbJiBDY.roa (raw, json)
Hash identifier: luOsg1Ure5YEHGkMruU1TOHCueuHdlLPk/qZRAFU6yk=
Subject key identifier: 5C:29:6F:69:8D:62:9F:DA:2E:52:14:7C:21:AF:41:61:B2:62:04:36
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019426D9A144EDAA74024770E92B43C9EE5F
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/XClvaY1in9ouUhR8Ia9BYbJiBDY.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 147.161.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a1:44:ed:aa:74:02:47:70:e9:2b:43:c9:ee:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c296f698d629fda2e52147c21af4161b2620436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:3f:fd:06:9a:77:36:87:a8:81:6b:aa:c3:
fe:e1:bc:5b:99:e2:bc:a3:39:e0:3e:9b:a0:a9:0d:
f0:d2:6d:74:98:53:bf:9e:e1:fc:10:ff:0b:fc:d7:
aa:eb:86:aa:3d:8f:a4:de:de:a7:82:b9:ce:9f:b0:
a6:2b:c2:94:ea:24:49:5c:6c:c5:0f:04:eb:58:1f:
7e:d1:7e:4a:76:b9:cf:70:f2:ec:f8:7f:0a:e5:35:
47:71:87:48:3b:5d:a5:9f:bd:a0:8d:66:da:fb:5f:
86:56:77:74:93:79:59:fc:f0:b2:3f:3f:4d:87:1f:
91:e8:f3:d4:5d:97:d5:2d:52:25:c8:45:33:cf:04:
f3:5d:20:cb:19:36:f6:c9:2f:57:ec:ab:6c:b3:08:
6e:72:cf:dc:a9:3b:63:07:4c:83:36:b9:79:14:ad:
09:e0:df:39:ef:75:c5:85:2d:de:ef:75:dc:67:ec:
d7:af:96:1c:ab:b3:df:73:9c:0a:d5:16:c3:18:cc:
e6:ab:03:14:a2:9d:a1:1a:eb:33:1e:0d:ea:80:8a:
1c:54:5b:33:d3:3c:3c:04:fb:ba:43:b5:fe:4b:60:
c7:9a:9e:c3:c4:62:a7:a5:e4:de:86:8f:63:6f:fc:
dc:38:04:7b:45:4e:c6:92:21:c7:91:7e:f2:f8:15:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:29:6F:69:8D:62:9F:DA:2E:52:14:7C:21:AF:41:61:B2:62:04:36
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/XClvaY1in9ouUhR8Ia9BYbJiBDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fe:09:6b:43:b0:87:dc:26:52:37:88:17:a7:c1:5a:6d:43:
22:9d:20:47:d3:5d:4b:51:06:f0:89:58:00:8f:e9:17:a3:a6:
28:8b:db:c2:ef:13:d5:4b:bb:b3:34:ab:f4:8c:df:ba:85:2b:
3a:f8:4b:96:9a:c1:fe:e1:46:79:07:72:23:aa:1a:4d:08:62:
63:d5:5f:49:c9:41:7d:8d:b1:72:34:7c:53:87:44:e5:f2:f8:
83:c0:5c:38:de:ec:ca:7f:73:58:37:bb:f8:f4:3f:a7:c3:f0:
41:f0:63:2a:92:7a:94:89:1d:99:6a:d3:aa:53:ed:05:ba:f6:
f3:78:4b:9e:62:7a:64:f0:fa:92:c9:6d:cb:99:ca:7c:a3:df:
f9:98:d3:80:5d:40:dd:b7:e1:d2:cc:f2:1d:b5:9b:13:90:0f:
93:2c:14:8d:0e:17:ea:9e:24:a2:52:71:3c:4d:4e:8d:d3:4e:
a2:6d:df:0c:ec:c0:b6:55:5e:04:97:c6:77:63:5b:a0:c7:e3:
05:2b:7e:53:1c:4e:fd:0e:04:4d:38:06:98:0c:c2:23:b8:36:
66:99:b6:12:ef:41:de:8c:57:2c:62:be:d4:02:70:a2:ff:38:
dd:20:b8:b4:37:31:79:f0:93:df:de:ba:2d:44:5c:14:2a:c7:
26:ae:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:19:34 2025 by rpki-client