Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa
File: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (raw, json)
Hash identifier: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=
Subject key identifier: C7:75:29:83:12:0D:7D:81:AD:28:2B:4E:41:0F:27:4C:AA:A7:7D:84
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019423D805290492B0201B35BB928A7663E7
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209393
IP address blocks: 193.187.156.0/23 maxlen: 24
193.187.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:05:29:04:92:b0:20:1b:35:bb:92:8a:76:63:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7752983120d7d81ad282b4e410f274caaa77d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:22:5e:f2:f6:d9:c6:ea:59:df:51:ac:0f:
6e:75:73:45:67:67:79:df:94:82:0c:44:88:48:97:
ba:0d:d6:c1:d8:db:df:c3:4d:03:b7:97:ef:50:fd:
15:58:48:50:f6:18:06:24:fb:f9:1b:38:3c:9b:f1:
2c:c5:86:48:29:ae:b2:8a:5f:86:6e:ad:6a:42:84:
28:69:99:63:b7:e9:2d:4f:4b:b2:32:f5:88:97:d0:
a1:48:6c:de:3c:74:4a:fe:7a:3f:30:da:2f:c2:58:
4c:94:9a:d1:ab:2d:66:f8:21:6a:31:b0:37:b9:05:
cc:b8:68:ad:4b:30:ca:9e:e7:55:21:78:db:24:c0:
cf:35:91:7f:31:96:e0:1e:e0:67:8d:07:dd:65:3c:
07:9d:b1:69:6f:bb:39:61:08:cf:8d:56:26:1b:4d:
16:9d:a1:c1:09:ab:98:14:6b:2c:1e:0a:96:ea:7d:
ba:12:70:cb:27:85:2e:e2:fe:00:35:dc:d7:82:c4:
ba:ed:cd:8c:e9:7f:96:50:b6:e9:d4:64:3f:81:12:
24:18:98:db:7d:eb:4e:a9:22:e3:c8:d3:c9:27:08:
be:b5:b6:ec:9b:97:ce:c0:29:1c:5d:07:b5:d4:7e:
8d:17:59:0f:6c:8d:16:54:31:1c:ed:22:6f:b6:33:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:29:83:12:0D:7D:81:AD:28:2B:4E:41:0F:27:4C:AA:A7:7D:84
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.156.0-193.187.158.255
Signature Algorithm: sha256WithRSAEncryption
7d:1c:56:a5:e6:67:0c:22:e7:22:6c:84:a5:48:eb:fa:8c:15:
e1:fd:d8:f8:9e:44:58:08:8c:02:34:44:06:68:be:4e:0b:2a:
fe:11:19:6a:29:a5:c3:7e:f0:bf:08:76:af:61:97:fc:b3:71:
d1:94:b3:03:67:2b:62:08:0b:eb:ce:f6:a7:86:6c:09:8e:1d:
b2:43:c3:d6:86:b1:ee:22:01:f0:54:39:51:df:85:1c:e4:d2:
b3:96:85:ab:e5:8d:21:df:58:83:a8:58:f0:82:e0:ab:7b:ab:
e4:13:89:15:d7:b2:14:6d:17:fe:7f:3d:63:b5:17:ff:05:28:
27:0f:ba:c1:38:94:a3:a5:2d:7e:2b:b0:32:c8:f0:63:26:07:
4e:3b:9e:64:0b:3e:a3:4f:54:43:aa:49:54:40:05:7c:77:e1:
a9:24:6e:49:b9:74:1b:4e:56:96:0b:33:00:9c:d5:68:06:69:
41:e0:d6:aa:6a:16:ee:40:a9:f1:25:fe:d3:2a:c7:b8:fd:e5:
fa:93:c5:73:e3:fc:ef:f7:1b:06:bd:71:f6:be:eb:cf:70:e8:
9d:77:6a:ae:2e:39:5b:76:27:ff:80:3a:69:f1:58:fb:f0:92:
ff:a2:b5:99:e1:54:1c:9c:db:c2:87:d2:ba:95:70:56:43:48:
48:15:1f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:11 2025 by rpki-client