Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/xqRhaDuWbvwuCgdy62MSW3T7-_A.roa
File: xqRhaDuWbvwuCgdy62MSW3T7-_A.roa (raw, json)
Hash identifier: E6MIsrMkJ4GdOWqUu5/m7Ul8X0CNVw6dv7DOMQQRlWE=
Subject key identifier: C6:A4:61:68:3B:96:6E:FC:2E:0A:07:72:EB:63:12:5B:74:FB:FB:F0
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C2CB1C671F090F579D8F4835284EC
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/xqRhaDuWbvwuCgdy62MSW3T7-_A.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 91.247.178.0/24 maxlen: 24
178.23.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2c:b1:c6:71:f0:90:f5:79:d8:f4:83:52:84:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6a461683b966efc2e0a0772eb63125b74fbfbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:7a:7d:42:20:ac:35:95:0c:82:b6:6c:73:
84:1d:88:5a:ee:29:25:8a:29:f9:80:d3:01:66:17:
c6:06:70:0a:4b:e7:98:4d:94:b5:9a:e8:c4:f6:47:
55:8f:9f:30:4b:b9:3a:6b:7a:a3:9b:96:9d:4f:ee:
b4:19:79:55:c7:b0:c6:d9:18:d1:3d:d3:08:d6:12:
b1:80:e5:10:90:bc:f8:d7:8b:e5:de:b9:05:73:ba:
0e:18:91:66:6a:f1:e2:3d:f0:6a:97:5c:1e:7d:c6:
c1:54:c8:90:cd:ac:e9:25:49:0c:2a:34:74:f9:ba:
e5:08:cf:b6:f4:d5:07:2b:cc:39:ee:f9:3a:6e:5d:
1c:1c:98:c2:9e:72:6d:57:67:56:e9:65:e9:bb:a6:
10:e2:d4:a9:48:fb:17:94:f1:99:03:90:3a:cc:75:
c7:4d:97:0e:4c:e4:9f:7e:13:41:db:21:a5:f7:fa:
8f:78:ae:a3:9c:fe:87:5c:6e:ae:51:35:f9:1d:2c:
81:7a:47:d7:90:9a:fb:41:e6:42:aa:d4:21:b6:12:
89:0f:44:60:0c:71:da:25:32:4b:73:7b:47:fd:45:
a5:1e:05:f7:fa:28:b1:3a:84:4d:3d:78:8a:01:78:
b9:ae:63:75:f0:63:d5:f7:23:72:4e:55:e9:13:67:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A4:61:68:3B:96:6E:FC:2E:0A:07:72:EB:63:12:5B:74:FB:FB:F0
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/xqRhaDuWbvwuCgdy62MSW3T7-_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.178.0/24
178.23.188.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fe:57:81:ea:48:ce:12:34:8d:9e:be:f2:29:3d:12:c7:9d:
ac:9c:5f:ee:2a:89:84:d5:bf:63:87:a0:0b:a3:50:61:34:70:
57:fe:86:78:35:93:fb:7a:90:9b:01:ec:98:7a:e3:07:eb:a8:
13:c1:28:49:df:d5:bd:f3:0b:f9:b4:86:34:b1:2a:56:5d:36:
e1:4b:59:2c:0a:6b:d0:12:9c:30:b2:95:40:4b:6f:9c:fe:5c:
28:39:65:1b:b9:04:96:4c:0c:8a:6d:35:20:8d:1d:36:42:3c:
94:45:6f:23:4b:5b:4c:bc:bc:69:3f:26:82:d0:da:b6:63:83:
5a:9e:3a:eb:75:a9:79:0d:0f:02:a6:d7:4b:aa:92:ef:a3:8d:
f2:55:4e:30:46:a7:c7:2e:a3:c8:17:c5:53:08:52:9e:00:4f:
5c:a4:f7:e4:c9:9d:ff:2d:ce:dc:75:53:12:a8:1b:d0:c6:ac:
c1:82:65:cc:0c:b5:79:49:09:29:17:18:6a:f7:60:be:03:5f:
08:c3:6b:f3:ff:ae:6f:d0:05:d2:20:94:86:b4:4f:cd:e4:3c:
89:ca:46:44:2a:0f:33:ad:81:00:fc:ea:97:a8:6b:8f:de:97:
66:f2:68:aa:86:17:3f:e0:c7:a3:56:97:96:db:11:e5:47:4f:
2a:f6:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:17 2025 by rpki-client