Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/XFRqozBjRCDgkRfk1bxKNY0dgFg.roa
File: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (raw, json)
Hash identifier: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=
Subject key identifier: 5C:54:6A:A3:30:63:44:20:E0:91:17:E4:D5:BC:4A:35:8D:1D:80:58
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 01942369AD47DA5CEA7E2C75D571AAFD949A
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/XFRqozBjRCDgkRfk1bxKNY0dgFg.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207349
IP address blocks: 193.188.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ad:47:da:5c:ea:7e:2c:75:d5:71:aa:fd:94:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c546aa330634420e09117e4d5bc4a358d1d8058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:7c:d5:36:8c:6b:2a:78:24:7b:d0:90:99:
d4:2a:67:8c:93:12:20:c8:2f:db:7d:c7:6d:79:46:
3a:c1:fd:cb:23:a0:9c:b5:ba:ac:7b:cf:38:b1:f8:
dc:ba:f4:17:35:56:b2:68:21:37:21:8a:ce:66:93:
79:e6:58:59:e6:17:1b:c4:2f:97:64:1f:77:9e:dd:
c8:05:cb:c9:df:55:d0:e0:04:f3:90:b0:32:00:28:
79:0c:e2:33:36:4d:bb:b7:49:ff:9b:df:85:fd:6e:
c7:ce:67:f5:00:bf:37:e5:f9:61:0a:99:f3:f9:12:
ca:3c:ff:a1:f9:94:9b:c9:27:44:a5:e1:0b:c1:35:
4f:e3:92:de:ea:f1:9d:86:a5:4c:d6:69:c1:24:63:
9a:17:3a:db:b7:67:f7:52:72:47:44:98:af:25:04:
4f:df:70:6a:00:df:ca:d7:0e:0b:f1:9c:fb:e5:e3:
8a:85:fd:ce:a7:30:a9:39:ad:1e:c9:34:aa:ce:6d:
8a:d2:f6:f2:ee:94:de:81:a1:73:a6:dc:9a:f4:05:
5f:9d:0d:de:68:5c:99:77:3e:a7:80:62:cf:8c:10:
48:19:55:16:12:73:50:df:56:6f:e9:35:96:a7:cd:
89:b6:aa:26:6b:8a:9f:5c:35:5d:df:86:64:bc:78:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:6A:A3:30:63:44:20:E0:91:17:E4:D5:BC:4A:35:8D:1D:80:58
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/XFRqozBjRCDgkRfk1bxKNY0dgFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.193.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a1:58:aa:9e:1b:56:15:28:f4:32:cc:9f:7e:85:58:cb:c9:
44:8a:87:40:00:5d:52:f6:39:73:cb:cb:8c:6e:68:3a:34:b6:
cd:63:60:b3:5d:b9:82:2f:11:19:59:8d:49:00:64:ec:5b:bf:
cc:80:45:7a:ad:b4:40:24:a1:89:51:80:3f:86:1f:c0:15:ab:
4d:9e:c9:df:9e:e5:ab:8a:46:fd:dc:b9:64:fc:fb:09:23:87:
f1:07:45:6f:1b:36:1d:4e:c9:4f:41:16:cf:cc:77:47:02:93:
b6:33:be:17:f3:31:c2:68:5f:b0:e0:cc:eb:b6:03:08:c9:34:
0c:8d:66:dc:ae:d2:7d:52:74:7d:01:9a:d9:bf:35:b9:93:c4:
0e:61:ad:66:c1:3c:ee:1b:37:74:20:ee:f8:9f:4a:50:d6:73:
ed:9b:35:6c:51:5b:6e:12:7c:5c:62:7a:68:69:7e:30:fa:69:
97:74:a1:c7:86:b3:8f:70:83:03:09:9a:4b:b9:1b:84:26:c5:
7a:44:95:61:fa:93:61:c7:ed:5d:2f:4b:89:60:a1:17:cf:34:
1c:9c:40:05:8d:ed:10:e2:87:8b:1a:93:de:ff:3c:23:1d:54:
7c:51:dd:fb:8f:57:ac:c0:58:db:cf:65:3b:61:17:b6:7e:b7:
c4:8e:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:07 2025 by rpki-client