Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XgtI6gpYv8miU7nQB_kIo1JNPpg.roa
File: XgtI6gpYv8miU7nQB_kIo1JNPpg.roa (raw, json)
Hash identifier: sNKFx8aXrI0fbXUKXH64egDkcjAgZ6bftf8HqGSpA4I=
Subject key identifier: 5E:0B:48:EA:0A:58:BF:C9:A2:53:B9:D0:07:F9:08:A3:52:4D:3E:98
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BC61B6B0FD8D7A568E05D5F5EB3CC
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XgtI6gpYv8miU7nQB_kIo1JNPpg.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 146.19.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c6:1b:6b:0f:d8:d7:a5:68:e0:5d:5f:5e:b3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e0b48ea0a58bfc9a253b9d007f908a3524d3e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:3f:24:9b:db:92:f5:1c:ff:42:ac:1e:5f:
30:65:d0:e0:4b:a6:dd:64:e9:87:77:98:27:39:da:
60:37:e3:d6:54:02:fd:6c:6b:59:31:55:26:7b:1a:
0e:39:86:0e:6a:07:ff:af:c2:8a:18:c2:a1:3b:e6:
a2:62:42:30:dd:5b:62:88:b9:55:f6:85:64:fb:99:
dc:22:d2:cb:47:e5:6d:80:72:48:5f:45:ba:2c:47:
1d:88:07:de:76:90:71:69:cb:f8:22:7e:f1:b4:ac:
5b:35:0e:3e:8e:26:e0:2c:f9:29:05:82:95:62:ec:
a7:49:15:9a:2c:8c:3e:97:c3:0c:ab:45:0b:34:7b:
b8:6c:47:1f:ef:3f:9b:51:c8:5f:fa:19:a6:f4:6c:
83:6c:7c:06:22:24:63:70:71:68:18:d2:e2:fa:33:
de:aa:3b:1e:01:eb:93:8f:da:fa:7b:db:f8:a6:d9:
10:f0:2e:94:8e:2a:3e:8f:25:8b:f4:49:43:20:fe:
02:f3:1a:5c:c2:06:17:3e:f8:00:b5:df:6c:f1:66:
44:22:07:06:af:75:1e:93:02:13:11:0d:a0:c0:63:
bc:77:65:df:0a:cc:86:1d:69:db:eb:7c:b0:88:65:
65:8a:66:aa:78:32:e4:36:7e:81:da:0e:ca:e7:83:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:48:EA:0A:58:BF:C9:A2:53:B9:D0:07:F9:08:A3:52:4D:3E:98
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XgtI6gpYv8miU7nQB_kIo1JNPpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
06:14:44:3a:2f:c2:e0:3a:0a:7e:39:81:7e:5c:c6:26:40:58:
23:b0:6c:5b:eb:60:8e:f8:ab:70:70:c5:89:2b:81:11:40:45:
89:c1:c2:e3:59:e5:14:b6:86:e3:59:5b:bf:85:d1:88:e6:4b:
2f:b0:70:4c:47:66:99:61:58:4b:bb:ca:fa:d0:65:b4:0d:61:
de:16:59:0b:4a:e9:ea:ff:8b:ec:f5:dd:0f:f4:69:79:4d:40:
5b:9f:af:93:47:cb:1a:ae:20:60:67:bb:a9:0f:d7:d4:4e:b6:
56:db:27:ea:61:a0:e5:36:85:e5:0f:2c:2c:44:b4:88:a5:94:
87:8b:f8:8c:ad:a6:9b:83:92:7f:7e:96:9a:7d:cb:4b:36:e7:
02:8c:de:b2:5e:81:12:03:b5:3f:67:9c:20:09:2c:67:b8:77:
72:d1:bb:76:76:1c:9f:e3:8c:0e:95:9e:7e:be:05:d3:1f:66:
45:45:25:c3:46:2c:18:a2:a0:6d:48:4f:63:76:c1:b5:16:b8:
57:5c:4a:59:95:5c:fa:38:a3:e4:ae:da:e0:7d:93:03:31:84:
01:e0:e1:aa:4e:31:b4:02:b4:1c:a4:96:6d:7e:5a:36:1d:b6:
b8:3a:39:cf:22:75:17:61:33:67:96:d0:af:ab:06:0d:1a:1a:
da:5c:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:45 2025 by rpki-client