Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xcJ4qlyDdc3dtYKEn0UIPOPZuDI.roa
File: xcJ4qlyDdc3dtYKEn0UIPOPZuDI.roa (raw, json)
Hash identifier: u/CoMOAcwbg+BY03AjCsTTG5Op3fqXMu5nDoKyJxQlU=
Subject key identifier: C5:C2:78:AA:5C:83:75:CD:DD:B5:82:84:9F:45:08:3C:E3:D9:B8:32
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018D35D4C11D82900514D9C663FAF3B5FB1E
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xcJ4qlyDdc3dtYKEn0UIPOPZuDI.roa
Signing time: Tue 23 Jan 2024 10:19:11 +0000
ROA not before: Tue 23 Jan 2024 10:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 46.23.110.0/24 maxlen: 24
164.215.97.0/24 maxlen: 24
188.64.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:d4:c1:1d:82:90:05:14:d9:c6:63:fa:f3:b5:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 23 10:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c278aa5c8375cdddb582849f45083ce3d9b832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:31:a6:d4:a5:1d:c7:8c:56:c4:9a:57:2d:
47:80:4b:80:54:c0:65:9f:73:b3:e2:e3:b7:8d:50:
bf:32:d3:ee:45:08:f7:cd:40:80:86:29:ad:68:5b:
32:65:9a:36:85:35:ac:ba:46:14:99:26:03:41:d5:
c0:a8:18:41:7b:51:91:86:d8:c3:5c:26:fd:3f:78:
0c:4b:55:4f:7a:64:4f:87:96:96:f1:c5:2e:21:8d:
81:5c:91:14:cc:1a:fd:3f:b8:9c:b7:d9:d7:19:c7:
da:77:3c:6b:4e:ae:84:4d:a6:2e:de:85:7f:f0:fa:
13:c9:06:5f:49:22:eb:bc:01:34:67:b2:f8:5f:04:
e9:56:7c:bd:d9:80:f4:79:a3:24:6d:ae:7f:f2:86:
2e:58:93:e3:02:1a:e2:99:41:94:37:64:43:34:b7:
60:e2:0b:d2:8e:f5:71:9c:46:22:fa:03:3a:29:92:
4c:81:f7:c9:85:33:ce:f7:f7:fb:a3:a9:7c:90:bc:
7b:9e:be:3c:34:78:70:52:82:2a:69:d4:79:b9:25:
c0:02:42:0e:6c:28:65:ee:4a:df:06:75:8d:7b:82:
b3:34:06:b2:05:90:fb:e1:4d:3a:ec:ee:27:3a:70:
81:fa:c0:1d:9a:bb:6e:d7:6a:87:93:44:7b:8d:58:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:78:AA:5C:83:75:CD:DD:B5:82:84:9F:45:08:3C:E3:D9:B8:32
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xcJ4qlyDdc3dtYKEn0UIPOPZuDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
164.215.97.0/24
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
76:16:71:d2:ce:2f:2e:5f:32:8f:a2:5b:88:2d:db:cd:d7:28:
1c:94:b1:bc:8f:02:4c:fd:6c:6e:eb:5b:eb:6c:9a:12:71:cf:
85:2e:f6:da:a8:7d:da:6e:05:ac:c6:b9:0a:d7:22:b0:e7:55:
51:42:8f:71:91:c3:39:a1:15:35:5f:cf:d9:69:f8:4e:d1:da:
2c:9f:bd:90:49:7b:d5:29:32:2a:3e:e2:14:a5:d6:f4:31:25:
d0:2b:96:7c:14:c5:36:bf:1d:82:4d:ed:99:d9:d8:3b:56:77:
03:e5:e0:b2:7f:fc:e3:58:5f:ad:f7:9c:93:08:ed:6a:ac:16:
74:6c:eb:cc:56:37:df:c5:af:b5:75:fd:4b:ca:17:91:9c:85:
cf:fd:a1:1e:26:4c:b0:fa:12:a7:02:fc:ce:4c:17:98:b5:46:
76:1f:47:3e:2b:1a:fc:a1:de:33:5f:53:e1:36:82:6c:e0:27:
96:aa:33:ab:fc:ab:d8:18:e2:2a:a4:66:51:5e:71:15:a6:72:
af:bb:4b:af:dd:e0:c8:1a:d9:79:bc:06:7c:9e:b1:b6:1f:a9:
92:ee:03:38:aa:c9:a5:7c:b4:4c:b5:bf:6b:d2:44:d5:c8:57:
cd:24:4f:a9:f7:87:99:39:bd:6d:f1:36:ed:89:d9:60:c3:d8:
37:15:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:33 2025 by rpki-client