Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Xek8BiWZuwz6RhvP3XncStTKsDs.roa
File: Xek8BiWZuwz6RhvP3XncStTKsDs.roa (raw, json)
Hash identifier: +Pansyb3jq18CI8q3kCu6b/go8j9kACC3atMWIZi0+o=
Subject key identifier: 5D:E9:3C:06:25:99:BB:0C:FA:46:1B:CF:DD:79:DC:4A:D4:CA:B0:3B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487D813DEC125AFC845B1D85EA5962
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Xek8BiWZuwz6RhvP3XncStTKsDs.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209454
IP address blocks: 193.181.26.0/24 maxlen: 24
194.132.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7d:81:3d:ec:12:5a:fc:84:5b:1d:85:ea:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5de93c062599bb0cfa461bcfdd79dc4ad4cab03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:62:de:91:52:ef:c4:48:a8:4f:88:58:af:
bd:e7:28:92:03:70:1d:a9:77:47:cd:03:3e:1d:b5:
e6:2f:61:2f:92:a8:b0:01:e4:89:b9:28:4c:41:8c:
29:58:22:b6:bc:6e:d0:c3:f5:c6:81:6b:d1:6a:d3:
4f:ce:7c:b4:28:37:a2:ef:7a:70:6b:0e:ee:93:b2:
96:c6:03:93:37:04:e9:ae:1d:c0:cf:38:fd:24:43:
52:ba:65:d9:50:64:a8:32:05:bc:d0:d9:80:3a:d3:
9e:0d:79:23:32:e1:bd:ec:27:00:67:aa:87:3d:64:
b9:8c:4b:f9:bb:c5:2a:5e:61:45:08:31:41:43:87:
5d:4b:bc:bb:41:67:01:58:6e:df:56:75:88:43:f5:
61:2d:3c:f3:4b:5e:34:23:4c:c9:00:2b:ea:0a:67:
45:ef:b7:b6:74:6d:98:ca:ef:56:99:71:24:4c:07:
b6:95:a5:98:9f:67:a5:5e:7c:e1:05:c7:ee:37:72:
51:7f:7b:9d:5f:61:43:03:3d:10:74:2c:d5:09:e8:
45:b9:2a:1f:34:26:60:4e:07:26:ad:3c:63:0f:d9:
96:2c:69:11:cb:54:dc:1e:32:21:93:03:ac:58:6e:
34:4f:c5:f1:06:9d:b7:0b:8d:c3:a1:24:5a:c5:9f:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:3C:06:25:99:BB:0C:FA:46:1B:CF:DD:79:DC:4A:D4:CA:B0:3B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Xek8BiWZuwz6RhvP3XncStTKsDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.26.0/24
194.132.58.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ee:66:0f:bd:c3:19:64:6f:81:c6:94:8d:8f:19:e8:8e:31:
06:55:37:6b:f1:7f:21:b4:ca:c0:80:43:5e:1d:58:20:9d:02:
7f:ae:b2:6c:86:77:61:b0:b2:ff:0f:09:4a:10:7a:2e:ce:f1:
99:0d:d9:bb:36:93:4c:38:c0:90:7a:c4:3a:e7:5e:6d:68:ad:
a2:b3:ac:01:f3:5c:6c:fc:c0:48:42:4c:46:0d:d7:88:cd:85:
56:c4:0e:3b:82:a1:7a:fb:0e:a7:98:ee:1d:3c:5d:45:ac:2b:
fb:7f:b9:0d:af:af:6b:c5:ff:41:ee:b9:04:75:0c:ec:ef:b6:
9a:6b:5b:6e:62:1e:7c:b7:d2:dc:7c:c2:15:0c:f9:d4:4c:3b:
25:8c:10:c7:96:31:07:e0:b4:d5:c1:5f:80:14:e2:99:81:00:
35:52:15:84:6f:f5:ce:65:54:45:f1:5b:b0:81:ae:54:51:e1:
3b:1f:d8:b9:42:cd:18:1a:7d:cc:34:ae:ba:fd:a9:05:8c:3d:
65:4b:6f:be:eb:ff:fb:c1:a8:cc:04:37:15:65:cb:90:62:f1:
e6:3e:8f:0b:7d:56:6e:88:8c:89:44:15:d6:18:2b:86:5d:ab:
d1:77:04:45:85:8c:42:50:ce:b5:87:41:b0:61:d7:63:f2:80:
67:9c:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:38 2025 by rpki-client