Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/xNx96Q3CalEzxDDmWGhbb3xTorI.roa
File: xNx96Q3CalEzxDDmWGhbb3xTorI.roa (raw, json)
Hash identifier: gvLi2++gvNdVJ+GZ37QZOorhQSEvCo36oQwUoZic47Y=
Subject key identifier: C4:DC:7D:E9:0D:C2:6A:51:33:C4:30:E6:58:68:5B:6F:7C:53:A2:B2
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 0194258F7F28570000763C0FA5D9D7CDEB07
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/xNx96Q3CalEzxDDmWGhbb3xTorI.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213173
IP address blocks: 84.54.12.0/24 maxlen: 24
193.176.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7f:28:57:00:00:76:3c:0f:a5:d9:d7:cd:eb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4dc7de90dc26a5133c430e658685b6f7c53a2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:4b:a4:be:7f:b8:7d:95:2e:73:f8:0b:c6:
b0:92:00:fb:30:1e:29:a6:56:88:18:68:9d:e1:2c:
47:2d:04:1b:1b:d8:64:e0:07:fe:96:e9:47:2b:b0:
aa:b6:00:b1:ed:6b:27:a2:8a:2e:77:bf:57:e2:8a:
1d:6d:41:55:69:07:f6:59:fe:2a:c5:cd:0e:a8:2d:
46:28:83:5b:f1:ea:0e:36:7d:9b:64:f5:73:55:85:
d4:6b:14:75:b9:4d:9c:2b:a7:fe:bf:f8:b7:1f:09:
7f:cb:ac:2d:1b:dc:ee:6d:b5:aa:c2:44:5e:29:81:
79:c9:4b:ea:c7:cf:a1:7f:6e:03:53:f6:47:8a:79:
80:f3:24:da:a8:85:79:67:ae:bc:d8:01:71:fe:d8:
3a:28:2a:f3:13:a0:ad:fc:22:00:d1:08:0d:9c:75:
43:6f:b7:fa:c3:29:aa:73:aa:89:17:5e:91:f6:a3:
40:f6:f0:bd:33:99:b0:7f:65:39:d6:c8:36:27:71:
88:7c:40:0a:14:8c:15:f0:c7:03:c6:2f:51:f1:fe:
87:af:f2:6f:33:dc:cb:7e:32:1d:dc:12:7c:7c:99:
f4:ea:2c:8a:37:14:7a:cc:39:b9:42:03:33:93:fb:
87:f4:d2:00:e7:9e:23:b1:b3:33:b8:d6:28:87:2f:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:7D:E9:0D:C2:6A:51:33:C4:30:E6:58:68:5B:6F:7C:53:A2:B2
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/xNx96Q3CalEzxDDmWGhbb3xTorI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.12.0/24
193.176.239.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5a:ab:ca:64:f5:1c:40:b7:2e:47:86:80:85:5d:b3:4c:d6:
7d:85:69:dd:ce:ba:a8:ef:23:7a:5a:cd:7a:b3:76:1e:7e:57:
25:f0:4f:8d:cd:4e:15:c5:a9:22:bb:93:6e:9e:e9:35:cd:8c:
0d:0d:e1:2f:64:f6:77:fb:da:9f:a3:fd:f0:20:0f:b9:36:4a:
d0:40:36:62:24:34:a0:85:07:33:98:a5:4b:3e:18:8f:58:40:
5e:83:70:bc:68:bb:55:db:5b:df:19:35:e0:88:66:3e:c3:1e:
d2:4d:5d:f0:96:c4:7b:76:f5:56:9a:17:eb:b5:82:b1:7c:06:
45:33:44:e6:a3:af:5c:e0:5a:52:2f:2d:e7:37:e0:62:05:22:
69:5a:55:43:ef:15:70:5e:65:bb:b8:1c:70:b1:9d:d1:a7:cf:
12:53:78:f7:54:f2:5e:07:8d:36:6c:ab:4b:51:87:e2:8e:2e:
6f:6c:20:83:10:54:25:c6:f1:e5:19:74:81:84:85:e3:b7:4f:
ee:95:17:0d:e3:33:f0:8b:7e:f9:6b:4c:b0:fc:a3:a1:1a:a3:
8a:17:72:77:6f:1c:f2:4b:fe:b1:e8:88:52:66:f8:4e:3a:a9:
31:d2:3d:23:da:e8:73:75:2c:2d:a8:84:96:9b:ab:37:71:7b:
46:2e:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:58 2025 by rpki-client