Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa
File: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (raw, json)
Hash identifier: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=
Subject key identifier: C6:83:E5:0F:4A:EB:04:42:48:14:8B:E4:93:A4:75:47:A7:8F:19:5A
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019421B248FB0AA5EB7C44BFF1BB0FC1EEA6
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200577
IP address blocks: 193.228.3.0/24 maxlen: 24
193.228.60.0/24 maxlen: 24
193.228.101.0/24 maxlen: 24
2001:67c:201c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:48:fb:0a:a5:eb:7c:44:bf:f1:bb:0f:c1:ee:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c683e50f4aeb044248148be493a47547a78f195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:6a:83:93:00:e3:da:3a:b7:8e:89:73:44:
e9:41:cd:23:8b:ef:5b:a0:22:7c:05:0d:29:e7:1a:
5a:27:7c:46:cd:4b:20:c0:02:df:aa:4e:bd:77:61:
07:02:81:0a:89:75:1a:57:50:a0:25:80:32:3d:c7:
ce:f2:f2:f7:11:2e:3c:87:47:5c:0a:80:b6:46:ef:
35:e4:3b:ff:77:c1:84:b7:a2:3b:a5:e0:45:8d:06:
06:3e:f7:ce:99:14:69:60:61:3d:61:e5:e7:bd:c6:
a8:9f:19:8e:76:66:e2:f1:7c:7a:47:c4:16:1c:b7:
e6:b1:84:3b:ef:04:ff:c0:2d:89:aa:f1:92:e7:bb:
89:02:84:7b:09:59:a8:f0:1b:9e:1a:f9:17:6d:7d:
be:e4:73:64:ae:7a:a1:93:99:9b:1d:ca:12:9e:e6:
28:9a:a2:fb:40:e0:2d:26:ba:95:f0:d3:12:45:a0:
65:bb:dd:0c:6d:b9:62:e7:95:67:f3:82:16:1e:50:
9a:b7:b5:d9:8d:7d:b4:20:61:dc:27:3c:6d:c9:94:
ce:1e:63:b4:e8:df:08:7e:3f:26:5c:4c:bc:f8:b9:
fe:2d:70:57:12:0f:da:d3:71:1e:fa:86:f0:e1:18:
c6:f1:0c:7e:fa:30:8f:fb:f6:58:c3:8d:dc:51:b4:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:83:E5:0F:4A:EB:04:42:48:14:8B:E4:93:A4:75:47:A7:8F:19:5A
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.3.0/24
193.228.60.0/24
193.228.101.0/24
IPv6:
2001:67c:201c::/48
Signature Algorithm: sha256WithRSAEncryption
92:5f:38:54:2d:5b:4a:34:dd:80:3f:2a:f9:8f:88:3b:1d:59:
5f:15:74:63:a7:31:17:75:20:87:65:b7:31:fb:80:65:a4:f4:
42:85:47:3e:d6:5f:24:8b:23:1c:cb:61:02:11:a6:6b:67:bf:
4c:26:ca:f5:26:22:88:5d:ed:69:8c:fd:ca:a2:4d:ec:5a:38:
4c:b1:e3:d7:b5:2a:c4:ee:e2:d5:cb:41:e5:0d:75:af:45:fc:
7c:ef:5d:2d:0b:ae:90:2b:56:5b:3b:82:c3:27:26:94:9a:40:
07:0c:a9:da:e9:20:11:dc:87:67:53:80:88:a4:6c:19:27:36:
ce:d5:b3:93:12:79:43:76:28:69:30:d0:5f:27:c2:92:d5:56:
ae:07:0a:8d:82:02:b6:08:cd:20:31:e5:00:6d:30:bf:3c:ac:
2d:13:d7:a5:3b:9e:93:dd:e6:98:41:b0:04:7a:4c:31:0c:26:
27:0a:fa:26:a6:96:dc:5f:9a:eb:27:bf:6c:f0:f6:19:3e:e6:
d2:e3:6a:aa:68:6a:60:3a:ac:03:26:2e:9f:f1:7d:4f:95:b4:
da:ee:86:22:1d:f5:3d:5a:8d:f1:25:42:17:ac:91:d8:d6:00:
65:58:9f:19:9f:19:67:11:aa:49:54:09:af:11:13:49:05:e5:
c5:a7:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:19 2025 by rpki-client