Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/XLp6CpBQr9azCpsnYXzng1ufYf0.roa
File: XLp6CpBQr9azCpsnYXzng1ufYf0.roa (raw, json)
Hash identifier: VoQFnds5dZA1et1XDrrDT8jx8hBkjrNF5oeGODTmq4M=
Subject key identifier: 5C:BA:7A:0A:90:50:AF:D6:B3:0A:9B:27:61:7C:E7:83:5B:9F:61:FD
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 0194266C4260760803A98165995A6E0382BD
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/XLp6CpBQr9azCpsnYXzng1ufYf0.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47549
IP address blocks: 93.159.200.0/24 maxlen: 24
93.159.201.0/24 maxlen: 24
93.159.202.0/24 maxlen: 24
93.159.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:42:60:76:08:03:a9:81:65:99:5a:6e:03:82:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cba7a0a9050afd6b30a9b27617ce7835b9f61fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:d6:25:45:ad:41:35:09:cc:b0:b8:bb:0c:
44:cc:83:69:c2:65:da:63:5b:c1:0a:bd:d1:00:d2:
1a:b5:c7:eb:ff:66:d4:65:98:c2:d3:02:35:c8:60:
27:e4:ad:85:c6:56:51:84:e4:70:66:4e:ce:28:2d:
91:6f:33:5a:55:45:fa:5a:69:68:4f:9e:93:c5:01:
6d:8d:ff:b8:b0:bc:1d:6e:46:dc:65:a8:ed:29:b6:
84:39:6f:a6:47:63:d5:6b:ce:37:f4:a9:6f:ed:57:
9f:f8:0e:04:0e:20:55:60:49:96:76:8b:8f:07:e3:
07:0c:dc:a4:2f:56:5c:f7:1f:b0:02:26:bb:1b:a5:
fa:d9:fe:bd:2c:81:de:d9:2e:96:5f:c1:d7:26:ca:
18:15:ef:8e:db:21:c7:14:cc:d5:43:5d:82:85:89:
8d:9a:73:b8:e6:61:69:8c:0b:45:06:c6:75:02:3f:
26:fa:8c:fc:71:ce:6c:85:9a:5b:d7:16:92:23:50:
0b:46:8e:c2:c9:fb:32:0a:66:a9:b1:51:7b:20:b6:
25:82:05:c8:43:38:b0:77:2f:6a:9d:03:1f:53:29:
66:10:53:81:83:47:01:12:63:2d:a8:f4:52:30:b4:
7a:3d:54:2d:0d:9c:65:34:51:b4:8f:e4:bb:6c:6f:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BA:7A:0A:90:50:AF:D6:B3:0A:9B:27:61:7C:E7:83:5B:9F:61:FD
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/XLp6CpBQr9azCpsnYXzng1ufYf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.200.0-93.159.202.255
93.159.206.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0c:22:78:34:a9:cd:ec:f7:9e:06:60:c0:db:19:4f:89:12:
a0:dd:b8:73:5b:7e:1a:07:df:3e:e7:2c:ac:c9:88:4b:16:9c:
00:0b:ff:f7:30:ff:7a:4f:c5:25:43:05:69:10:0c:a2:dd:50:
90:37:05:ff:55:02:bd:3d:0c:52:4a:3c:10:2b:de:dd:37:16:
34:73:bb:6d:7a:62:33:d1:a4:d0:ed:bc:21:0a:55:ac:a4:e2:
c9:70:cf:ed:d4:fd:b4:87:55:bb:0e:85:3d:b0:7e:b3:61:67:
45:76:a3:ba:c0:64:f2:0e:e6:c4:bc:18:81:db:c4:49:57:1f:
9d:e3:61:0f:3d:ce:7e:56:61:61:85:d3:89:71:ef:2f:f0:4f:
a6:93:bb:b2:32:9b:5d:10:b7:19:ff:ff:ff:df:98:3c:14:b2:
1c:76:d9:cc:b2:a7:83:c8:bf:d2:2f:6e:b3:84:6e:25:9b:87:
b0:f4:1a:d2:ba:48:db:52:80:ba:c9:6d:05:29:4d:2a:83:62:
a1:b3:a7:a9:0e:c2:6e:ee:c3:07:a4:44:39:52:cd:89:91:d4:
33:12:71:c3:c9:b6:ea:ed:97:a6:37:8a:66:3b:f4:af:72:97:
be:11:24:57:59:4c:90:3c:3c:5a:0f:34:f6:bc:3f:dd:9c:3f:
48:74:f5:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:00 2025 by rpki-client