Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xOvbONmuHLggj1kz21tIox0xOws.roa
File: xOvbONmuHLggj1kz21tIox0xOws.roa (raw, json)
Hash identifier: ds3rCPllIr2md5+i8qtkfA5r8fRJicK2asbgHg2K2Q0=
Subject key identifier: C4:EB:DB:38:D9:AE:1C:B8:20:8F:59:33:DB:5B:48:A3:1D:31:3B:0B
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827F2C2F2D1371EC90AAE6B9A77B7DC
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xOvbONmuHLggj1kz21tIox0xOws.roa
Signing time: Thu 02 Jan 2025 17:54:54 +0000
ROA not before: Thu 02 Jan 2025 17:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 146.19.154.0/24 maxlen: 24
193.84.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:f2:c2:f2:d1:37:1e:c9:0a:ae:6b:9a:77:b7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ebdb38d9ae1cb8208f5933db5b48a31d313b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:2e:17:ff:64:65:cb:e1:ae:3c:cb:72:fe:
5b:ed:51:a4:7c:f2:59:7e:21:a4:ae:b7:d5:7e:6a:
1b:bd:70:3c:b2:28:dc:57:42:77:19:4e:00:43:f1:
0f:ff:32:3c:2b:30:7b:0e:54:43:87:e8:c2:62:5c:
44:65:d9:89:89:81:55:35:44:26:03:92:b8:dd:e7:
de:1f:18:de:01:39:76:a5:ba:7b:1c:5e:22:c0:b2:
6e:c0:f0:d2:8f:24:97:51:6e:1c:e1:13:17:5f:5d:
0c:18:74:44:48:7b:dc:25:67:d4:3f:cc:1d:27:3e:
ab:24:fd:11:8e:ab:46:18:ea:44:7d:09:cf:26:3a:
6c:2e:31:5c:64:b3:ce:70:81:77:09:f0:b5:6b:a7:
f6:cb:a7:b0:48:7d:ac:6a:4b:8c:c1:3f:22:97:fa:
a0:ad:bb:26:69:4c:5d:8c:b9:d2:ee:34:d8:01:43:
a2:d9:a8:34:e2:37:55:77:3c:bc:f9:5c:9d:0c:5d:
02:cf:8a:36:3b:14:e9:a1:8a:dc:cd:0d:5e:cf:46:
6e:8f:f0:cb:bd:24:47:a7:c5:b6:a1:67:cc:c3:87:
c5:bc:b2:42:30:c9:99:ba:04:82:86:e8:2d:ef:43:
07:25:e2:1c:f2:f5:0b:1a:27:c7:cc:d7:fb:e4:65:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:DB:38:D9:AE:1C:B8:20:8F:59:33:DB:5B:48:A3:1D:31:3B:0B
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xOvbONmuHLggj1kz21tIox0xOws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.154.0/24
193.84.109.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:59:91:ac:10:2d:3b:50:d4:df:bd:24:58:51:de:27:02:ca:
d2:57:60:a0:8a:bc:fe:02:4a:f8:7e:83:5b:ee:cc:d3:7a:63:
d4:36:ee:52:58:77:d8:7f:16:07:f7:bc:a9:6c:f0:78:8b:db:
6d:df:aa:4e:d6:9a:8e:68:9a:e2:48:9d:a3:c1:94:8c:4f:86:
a2:4d:98:01:2a:72:52:ad:d0:46:e7:29:86:09:aa:9f:4d:69:
1d:3f:68:b8:12:ca:71:da:2a:d8:41:2f:2e:ef:f0:80:4b:ea:
f3:46:d9:88:5b:4f:85:58:30:fa:07:f0:6b:2c:7f:1b:dc:5e:
cf:ff:d6:aa:4b:78:a6:e8:71:60:3f:98:78:cc:3b:c0:26:0d:
59:90:89:c1:03:9a:99:af:07:e9:d0:e9:d0:5e:ee:d5:88:17:
4f:aa:ca:5d:61:93:eb:a8:1b:5c:fa:ca:41:36:36:3f:a6:de:
8f:03:76:41:6b:96:d0:3d:94:0a:fb:ac:17:af:04:7e:08:77:
be:60:54:40:a1:0d:81:1b:99:c4:2c:87:09:ab:e3:5e:da:ba:
f6:80:05:c3:f7:7a:ab:87:d0:b5:d7:0a:e4:3b:89:63:6a:5d:
8e:0b:08:e7:11:27:1d:fd:00:0c:7c:e8:2d:ea:d6:35:6e:66:
34:6a:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:22:32 2025 by rpki-client