Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Xk5AYjoJKqpE6UbWJWl0e64Jdgc.roa
File: Xk5AYjoJKqpE6UbWJWl0e64Jdgc.roa (raw, json)
Hash identifier: Crv4Pgd3B0w5ftY7wmKEGbhnAr8LA9YDu34JHjjTqtw=
Subject key identifier: 5E:4E:40:62:3A:09:2A:AA:44:E9:46:D6:25:69:74:7B:AE:09:76:07
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143C12D3839E30044700679B23FABDE
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Xk5AYjoJKqpE6UbWJWl0e64Jdgc.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207684
IP address blocks: 193.59.14.0/23 maxlen: 23
193.59.16.0/22 maxlen: 22
193.59.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c1:2d:38:39:e3:00:44:70:06:79:b2:3f:ab:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e4e40623a092aaa44e946d62569747bae097607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:4e:2b:29:f9:30:ec:da:00:a0:7a:5f:12:
6d:d5:ff:f5:17:7d:5b:d5:21:33:2b:bb:bb:3e:bb:
db:30:22:ac:0b:15:a4:42:bd:3a:b5:27:13:c7:7b:
55:a3:b2:20:a4:c0:08:5b:9c:06:84:21:d4:29:b0:
a8:8b:39:4e:e9:3b:0e:cd:af:98:23:b5:b3:96:95:
b7:65:81:9a:2d:36:58:f0:8c:85:69:b8:48:c2:d3:
aa:bd:65:01:e1:a9:34:86:fa:b1:60:e5:62:b1:f4:
4a:06:9a:52:65:95:dd:21:2a:1c:dd:86:c5:ac:29:
6f:82:51:b0:4a:5c:9d:be:bf:c3:46:df:7d:de:a6:
9e:09:74:3a:51:52:01:b7:8c:0f:47:b5:1d:af:63:
a9:a4:c1:38:61:ad:dc:16:44:54:50:0f:2d:4b:cd:
45:2c:b0:5d:0e:30:f0:fd:74:9a:26:79:50:d2:e7:
35:54:fb:41:e8:27:ce:8b:81:f6:27:ac:9b:f9:47:
fa:02:77:0d:23:6c:26:75:49:66:e7:ea:94:09:d6:
c8:85:91:7f:7b:5c:c4:66:f6:d5:b4:1c:f2:e8:d3:
f7:e7:7e:b0:98:f9:d5:e6:c9:28:e3:9d:3f:25:98:
87:9d:9d:23:2d:88:eb:c9:9a:a7:b1:04:8e:40:b9:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4E:40:62:3A:09:2A:AA:44:E9:46:D6:25:69:74:7B:AE:09:76:07
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Xk5AYjoJKqpE6UbWJWl0e64Jdgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.14.0-193.59.19.255
193.59.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:d9:70:cf:f6:8c:34:aa:e0:9b:ef:95:6a:75:f5:c8:fd:4c:
1a:f8:d6:bb:6d:7f:f2:c3:b6:c7:29:0c:f2:34:91:c9:e5:47:
47:45:8c:83:2d:13:30:6c:df:8f:cf:5e:0c:cc:25:20:0b:7b:
db:14:64:50:04:79:c4:7a:d1:4a:17:12:2d:48:4a:7e:fb:c4:
9c:53:6e:bd:b2:02:c3:df:1f:f6:37:93:60:77:44:ea:00:3e:
57:c8:20:52:05:08:95:59:91:8c:a2:7c:33:ca:39:25:7b:02:
7b:9f:90:e3:c3:2b:f8:40:5f:44:6e:1f:22:d5:f3:d2:93:99:
e4:d3:4a:28:99:8b:75:51:87:09:bb:36:cb:85:1b:f8:79:62:
80:36:05:ae:7d:e4:65:60:c5:bc:94:92:5c:21:72:db:c9:ac:
17:49:b9:e5:70:93:ac:72:b8:81:4f:23:fc:d5:89:c6:41:83:
c6:62:24:5f:46:c5:5e:b8:a6:2b:62:16:08:85:76:d3:2c:16:
48:ab:e4:84:30:26:45:7b:8a:52:f6:8f:cb:00:6b:97:3d:42:
a2:d0:a2:ac:4b:cf:4e:7a:06:07:da:cd:bd:13:c8:86:22:fc:
a3:93:ab:94:f4:e3:ad:07:3e:a0:f8:6d:45:a3:e3:94:68:ef:
ff:20:68:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:12 2025 by rpki-client