Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/XEqexKJb2LrlBy7JmazWnnfRrCw.roa
File: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (raw, json)
Hash identifier: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=
Subject key identifier: 5C:4A:9E:C4:A2:5B:D8:BA:E5:07:2E:C9:99:AC:D6:9E:77:D1:AC:2C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 01942067FBEE0049E0F3372CA26B55785950
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/XEqexKJb2LrlBy7JmazWnnfRrCw.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 193.24.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fb:ee:00:49:e0:f3:37:2c:a2:6b:55:78:59:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c4a9ec4a25bd8bae5072ec999acd69e77d1ac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:7c:47:51:bf:62:5b:ee:69:bf:14:98:92:
a5:1a:d7:12:20:56:17:c2:88:8e:59:38:42:dc:b1:
e1:83:cc:a3:d6:99:19:a6:74:75:20:c0:ea:b7:d8:
ac:5e:ab:a9:fa:b4:82:a7:3f:80:96:e9:01:83:3d:
4f:6e:02:2c:2d:10:4c:6d:c5:7f:73:6b:e7:15:a9:
3c:30:84:80:e0:a3:5f:52:49:cf:70:bc:d1:f7:7d:
09:3b:9f:7c:f4:a6:1a:24:f7:1e:34:29:bd:e7:89:
3c:37:3b:95:0b:63:09:2c:67:0d:2d:12:e3:89:33:
2c:fa:f4:68:a6:1c:d6:35:94:d8:38:d1:cb:5b:ac:
43:c8:8d:ac:4a:25:2a:ef:31:c6:e6:df:b3:3c:eb:
a2:4b:fb:9e:f2:55:36:ec:4d:b3:4b:91:62:41:e7:
47:54:21:ab:1e:6c:cb:09:1e:30:d6:cd:89:24:51:
43:22:ca:8c:e3:74:b3:bf:f6:a2:7c:9c:2d:1b:d7:
ce:21:07:e8:36:b9:ad:ec:bf:9d:3c:75:b6:68:0f:
14:0a:04:fd:20:00:35:2b:f5:db:96:dc:e0:c9:f6:
c7:39:b9:a2:3e:42:8b:4a:64:ea:a0:c7:7d:57:27:
2c:d5:de:86:f4:a5:63:e5:57:19:02:83:5c:19:fc:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:9E:C4:A2:5B:D8:BA:E5:07:2E:C9:99:AC:D6:9E:77:D1:AC:2C
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/XEqexKJb2LrlBy7JmazWnnfRrCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.105.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b4:bb:8f:f4:5c:e6:e3:80:80:cb:2c:73:5c:69:45:e4:ab:
9c:cd:a3:56:85:f7:30:50:84:cd:21:e1:df:63:25:21:90:59:
88:e1:29:27:24:81:bd:e5:d9:aa:d0:b1:ed:d3:5a:52:ae:21:
fa:cd:37:03:06:a7:6f:c1:e8:9e:2f:eb:49:18:44:a1:44:8e:
64:1e:20:7a:2c:91:10:4e:9f:3a:2d:50:52:71:21:c1:22:38:
32:ce:2c:a6:b8:7a:b1:5e:db:98:2d:30:df:e1:a1:b2:8c:68:
15:7a:5b:a0:0c:9a:2c:45:ab:a3:5b:e2:ab:2c:23:3e:2d:eb:
ed:22:b2:1e:bf:ea:1c:bb:29:a4:77:45:77:b9:98:7f:31:c8:
05:c2:48:d0:1e:0c:0d:1f:42:05:a8:50:fb:6e:9c:b5:e5:ac:
4a:8b:f9:81:87:73:ad:07:c5:e7:9b:76:9f:1d:f8:0f:20:35:
21:0f:37:07:4e:ac:76:af:05:e7:ea:fb:5a:68:86:89:16:a0:
84:60:76:67:3a:e6:d0:bb:35:8b:3f:e4:68:09:cc:1b:50:1f:
98:33:ee:ca:35:9c:5c:38:35:71:ae:f8:ae:ab:6b:e5:3b:dd:
8a:f3:24:e4:a2:c6:cf:4d:45:05:6b:b2:ac:f5:bd:71:95:85:
2d:2d:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:00 2025 by rpki-client