Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/XW4EspWncCMOGdIvDnpKvj9kiPU.roa
File: XW4EspWncCMOGdIvDnpKvj9kiPU.roa (raw, json)
Hash identifier: L/K5bByn6P6f3vKuE7LV8l0lsGYh6uhq1DUdMyacHjQ=
Subject key identifier: 5D:6E:04:B2:95:A7:70:23:0E:19:D2:2F:0E:7A:4A:BE:3F:64:88:F5
Certificate issuer: /CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Certificate serial: 01856FA723301436715BFE6D15712441350A
Authority key identifier: 8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/XW4EspWncCMOGdIvDnpKvj9kiPU.roa
Signing time: Sun 01 Jan 2023 23:25:02 +0000
ROA not before: Sun 01 Jan 2023 23:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 193.238.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:23:30:14:36:71:5b:fe:6d:15:71:24:41:35:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Validity
Not Before: Jan 1 23:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d6e04b295a770230e19d22f0e7a4abe3f6488f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:6a:dc:e4:4f:cf:34:ac:e0:91:be:dc:4e:
a1:98:6b:5e:d4:7e:ad:03:7f:fe:e8:33:4f:66:3b:
6a:98:3b:3d:d9:86:e2:b1:ba:4e:df:b2:4e:3a:b9:
01:8b:a2:c5:11:34:4e:ff:c1:58:72:ef:f4:73:55:
01:c0:00:44:f6:5c:4f:ee:b2:4a:ab:08:15:1c:b3:
52:25:d4:1e:be:4e:29:34:5b:4d:4a:a6:7b:81:59:
0f:20:2f:3a:22:79:4d:b2:49:ca:39:17:20:c2:19:
c9:dd:a9:14:e5:22:7d:fd:76:5f:31:3b:ed:e5:81:
f6:37:02:6b:41:3a:36:d3:31:94:09:9c:19:1a:91:
ea:e6:73:73:8a:b0:dc:02:bc:e9:4e:23:2e:cb:c6:
66:e1:ba:47:9d:35:f6:49:56:0a:59:1d:94:ac:04:
d2:08:51:67:84:8f:65:61:3e:42:56:5f:af:fc:1e:
db:d7:b9:49:3a:23:aa:c8:13:5d:0d:65:ab:67:57:
7b:60:f6:5c:50:cc:76:c5:14:56:fa:05:1e:97:84:
d6:49:ef:eb:c4:6d:2e:8f:0c:ab:32:aa:85:ee:2b:
97:88:24:c9:d3:f9:c2:5b:8d:20:ca:85:02:4c:63:
58:24:dc:25:f4:b9:ed:01:1a:e3:d1:b2:d9:a6:e5:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:04:B2:95:A7:70:23:0E:19:D2:2F:0E:7A:4A:BE:3F:64:88:F5
X509v3 Authority Key Identifier:
keyid:8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/XW4EspWncCMOGdIvDnpKvj9kiPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:fe:60:32:cc:ee:42:04:d2:1a:26:f7:38:8a:ce:f7:c8:e9:
2a:7f:74:9e:f6:0e:49:08:60:48:91:92:78:a0:f2:cf:f8:a3:
d2:86:8b:0f:08:c6:1d:c6:ff:28:56:d6:1b:98:25:97:c6:20:
a9:b0:ab:f6:6b:41:0a:11:ae:7a:6a:64:85:b1:be:2b:e2:dc:
af:f0:bb:31:5d:a8:4f:34:fb:1f:3b:09:05:3e:e8:73:e6:96:
3c:a7:0d:4a:5f:cb:10:06:ca:30:13:c9:3b:86:26:eb:4d:fb:
6f:4b:32:d8:42:69:94:4b:0c:67:f7:74:94:ca:85:ca:c8:cd:
11:0c:2c:93:46:1a:ba:cc:48:75:17:ac:22:e3:3f:e5:27:82:
70:7b:5f:75:64:c0:97:43:bc:30:e5:3f:c5:11:17:29:f0:12:
1c:52:99:ec:88:95:93:48:88:14:0a:54:de:f2:75:d2:69:c6:
d5:74:9f:da:16:14:15:63:32:d9:0e:bd:dc:2a:3b:b8:45:b9:
cb:d1:6a:af:cc:e2:60:dd:11:5f:bb:6e:b8:ea:78:d1:4d:9f:
08:c1:92:cf:49:01:5e:db:00:e3:b7:bf:b4:2d:be:02:dd:82:
a7:46:79:48:15:ae:83:3b:a2:70:24:cd:5a:1f:91:25:b7:9d:
17:bb:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:37 2025 by rpki-client