Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/Xx4qE33JyRm22QhkLWfKDRWAGnk.roa
File: Xx4qE33JyRm22QhkLWfKDRWAGnk.roa (raw, json)
Hash identifier: VBDGbrM1tTGjVGL2Bxa5hAlgL/jyV9v4XsVJ8TB6uSs=
Subject key identifier: 5F:1E:2A:13:7D:C9:C9:19:B6:D9:08:64:2D:67:CA:0D:15:80:1A:79
Certificate issuer: /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial: 019422FB93BE7BFA0B7C5EE8997E15614577
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/Xx4qE33JyRm22QhkLWfKDRWAGnk.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 193.34.81.0/24 maxlen: 24
193.38.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:93:be:7b:fa:0b:7c:5e:e8:99:7e:15:61:45:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f1e2a137dc9c919b6d908642d67ca0d15801a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:c6:38:4e:90:ee:ac:ec:ca:ce:3e:8d:fe:
14:ee:6e:42:64:cc:11:b2:0b:33:63:0e:97:e1:93:
37:0c:1e:ab:e7:bf:71:75:08:69:8a:61:58:d4:3c:
a7:c9:f3:a1:ea:a4:e9:92:0d:fa:5b:c7:f1:5d:48:
2a:70:07:f6:52:7c:db:1f:2e:f6:7e:ad:0d:53:d3:
c5:b1:00:a6:9b:e0:2c:19:45:d4:ce:b5:91:c3:bc:
e7:6a:19:93:55:2e:86:e5:1b:54:13:00:6e:29:05:
ad:17:04:b5:b0:21:e6:e4:d9:05:94:21:89:94:40:
3c:24:dc:9f:c5:17:90:2e:a9:ec:c2:da:90:15:ad:
8d:0d:90:eb:8b:2f:e0:f9:1b:d3:dc:23:ad:a6:a1:
95:a4:7a:e1:68:67:10:33:4e:7f:20:47:27:c4:69:
ee:45:e4:61:fa:54:5f:92:d6:ce:0d:dc:60:69:88:
91:ba:26:d8:80:7e:f2:59:0d:68:4a:0d:81:2c:e7:
92:2e:d3:a5:16:6f:a2:12:e8:0e:97:fd:54:8a:10:
2e:f3:51:e2:cf:9e:12:7d:3f:76:87:2c:2e:79:45:
e6:c7:7d:e4:2e:10:40:44:17:4a:12:da:0c:13:ab:
60:18:f8:ef:f1:7d:42:48:e1:e2:e2:02:88:07:a9:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:2A:13:7D:C9:C9:19:B6:D9:08:64:2D:67:CA:0D:15:80:1A:79
X509v3 Authority Key Identifier:
keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/Xx4qE33JyRm22QhkLWfKDRWAGnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.81.0/24
193.38.244.0/24
Signature Algorithm: sha256WithRSAEncryption
73:de:72:8c:ab:a3:da:5d:32:66:eb:8d:cb:32:4e:05:74:8b:
aa:d6:04:28:a5:3d:5d:85:7e:5b:56:88:73:dd:24:a5:d0:0d:
a2:1e:ca:43:a2:21:7d:d5:88:07:53:38:19:87:ab:8b:53:d6:
ba:97:61:cb:40:59:78:e3:86:bc:de:43:a2:95:c3:26:bc:e0:
a8:da:74:22:2f:f2:61:a3:67:5c:d5:32:a0:3e:48:fb:0e:47:
0d:da:ba:9c:22:c1:8c:09:6b:18:6d:f1:d3:37:6a:65:0f:99:
d8:19:ed:34:0e:71:59:2f:f8:9e:7d:20:d2:2f:2d:10:91:1e:
fc:74:e4:96:f6:27:f2:f8:53:d7:09:a7:10:97:f4:94:0d:20:
73:64:9d:a7:6c:17:93:9f:16:fe:d3:e8:7c:e7:aa:f2:56:b3:
0e:25:c3:6a:29:ac:da:29:2e:c7:97:63:72:f6:47:3b:c2:c4:
d8:d6:7a:90:9e:b4:ec:7b:67:33:93:32:98:75:34:b8:c5:f1:
4b:2a:e9:31:e4:85:7f:ea:a3:cd:b2:97:b6:e0:ff:d4:f8:29:
87:e2:b2:a6:6c:e8:87:71:14:b7:b4:20:05:28:1e:0b:4f:25:
a6:00:1d:68:0c:f3:32:1a:b0:94:28:a7:a5:f4:6c:6f:f2:0c:
10:09:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:27 2025 by rpki-client