Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/X0DytevtLn_tD-UIlvCY6CSOdKg.roa
File: X0DytevtLn_tD-UIlvCY6CSOdKg.roa (raw, json)
Hash identifier: Th1+P8gx4BoI3AyiSLEceUjwPmG4/h5mNLTNI2Ql9CI=
Subject key identifier: 5F:40:F2:B5:EB:ED:2E:7F:ED:0F:E5:08:96:F0:98:E8:24:8E:74:A8
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F1C9749D33847E0218F0906E2D482
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/X0DytevtLn_tD-UIlvCY6CSOdKg.roa
Signing time: Thu 02 Jan 2025 05:48:43 +0000
ROA not before: Thu 02 Jan 2025 05:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48811
IP address blocks: 193.255.70.0/23 maxlen: 23
193.255.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1c:97:49:d3:38:47:e0:21:8f:09:06:e2:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f40f2b5ebed2e7fed0fe50896f098e8248e74a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:d8:59:0a:0b:08:33:11:2f:10:0c:d6:85:
db:d1:9c:a8:c1:f0:0c:94:d1:dc:27:65:ab:b6:27:
0f:fe:62:e8:17:78:73:c6:ff:11:e6:be:5d:a2:80:
b2:a2:1b:41:fd:f8:d4:17:9e:6b:e0:95:53:85:94:
93:66:0e:15:35:92:2c:82:47:34:00:26:f4:45:f9:
18:30:2b:cf:29:e5:5f:eb:b3:b3:60:97:12:f0:8c:
56:e0:c8:cd:92:50:38:e4:53:18:db:87:eb:b1:16:
15:d2:38:5b:9d:c0:be:a5:30:d4:fc:7a:0b:d0:6e:
a9:90:e7:ef:8f:79:21:a2:67:d5:7f:c5:ca:d2:30:
6c:64:b1:39:e8:25:60:61:75:75:c0:2d:67:e8:06:
5e:56:ed:86:58:0e:cb:8b:41:ec:46:a4:ab:37:43:
15:56:6c:29:b5:f1:a7:c7:c4:7b:2d:c2:fa:04:16:
49:57:45:1a:84:21:e2:c3:88:43:7b:0e:2a:d6:09:
81:ec:65:84:c1:16:e4:3e:7a:5f:db:80:f2:56:ba:
66:c2:28:9e:98:0f:d5:b5:b0:92:7f:80:b9:62:41:
77:7e:fd:3e:39:9c:46:d5:41:0c:be:8d:0c:69:89:
4d:52:b6:c4:c3:79:d2:24:36:c4:a5:fb:c3:41:3f:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:F2:B5:EB:ED:2E:7F:ED:0F:E5:08:96:F0:98:E8:24:8E:74:A8
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/X0DytevtLn_tD-UIlvCY6CSOdKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.70.0-193.255.72.255
Signature Algorithm: sha256WithRSAEncryption
05:53:e4:a9:09:b3:13:f6:54:45:07:c1:c2:a4:06:42:4b:f7:
3a:a2:d0:2d:b9:39:d0:44:d5:fc:9f:e8:60:18:de:f0:d2:cf:
ff:a9:e8:6e:34:3f:3a:ef:b1:9b:7a:11:ff:e6:7f:d9:32:40:
74:a0:07:fb:8f:19:34:43:b3:06:72:0b:f9:72:27:07:28:cd:
a5:ed:5c:ee:fc:f9:ef:60:82:5f:cd:5c:5a:8e:c4:9b:2b:bd:
00:c5:ee:35:b8:76:f2:b8:08:07:1d:64:0f:3b:1e:20:6f:fd:
05:21:a5:25:af:e6:49:08:f5:aa:77:1b:35:39:d4:55:6f:79:
82:14:d0:80:d0:81:06:da:6d:79:d6:df:82:07:85:ff:f8:d4:
ac:cf:de:6e:f2:f7:ad:ee:a2:9a:c2:5a:2d:a0:36:71:cf:3b:
5f:5a:35:97:6d:f9:d1:69:cd:d3:8e:fe:5e:56:80:5a:ca:28:
50:a8:46:75:ab:9e:ab:e8:14:a2:aa:09:19:29:40:c5:00:59:
80:63:5d:1b:a6:80:f9:02:80:bd:1d:a8:21:55:a7:d7:a7:3f:
47:02:79:b1:6d:db:e7:7e:9c:16:75:32:a9:81:64:1a:b8:41:
6e:08:32:f8:a0:5e:90:5c:66:f5:79:45:98:cc:d9:f5:d4:08:
1e:8c:85:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:58:51 2025 by rpki-client