Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa
File: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (raw, json)
Hash identifier: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=
Subject key identifier: C4:D8:0C:AD:6F:90:51:65:98:D9:E5:7F:49:C8:12:56:B3:66:FF:BB
Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial: 0194221FE09B1E9521E19379A4F278F3B75A
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196882
IP address blocks: 193.104.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e0:9b:1e:95:21:e1:93:79:a4:f2:78:f3:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4d80cad6f90516598d9e57f49c81256b366ffbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:6b:1c:4b:9c:6b:59:cf:82:35:5c:d2:f1:
48:71:5e:3d:a0:05:b3:70:57:b4:03:5b:1f:9f:60:
85:21:ea:4a:0e:b8:43:07:a0:d6:27:53:ba:45:8e:
7f:8e:5e:83:c6:bd:39:19:e4:e9:9f:6b:94:39:3a:
06:12:5a:e2:d9:a6:bd:4c:a8:de:f7:9f:61:39:f1:
75:ab:58:45:d7:df:dc:fc:e3:8e:67:18:fa:dd:5a:
fd:67:ef:54:ba:08:fd:cf:8f:6d:df:4c:39:79:bd:
e1:93:31:c3:00:70:c2:bc:77:fd:83:49:87:de:0f:
1d:18:c7:33:3d:b8:3d:ac:31:ba:8a:10:d6:ed:73:
67:6d:9e:60:04:04:39:13:ed:3e:30:64:4b:25:8c:
06:d7:71:5e:89:b6:fe:29:fe:b2:38:b8:3e:6a:45:
d3:65:ed:04:d7:33:45:cd:64:dd:50:9b:bc:03:9d:
4a:92:66:8c:20:9d:7b:37:8d:3e:7a:b5:58:da:f7:
36:05:95:bd:bd:9a:bd:2f:ba:5e:7d:41:ce:b0:42:
0d:dc:ca:16:50:9e:18:7f:57:06:ef:76:da:a9:ae:
7e:e6:55:6b:06:c8:87:2d:45:4d:30:22:67:7d:d8:
ee:48:f1:5a:dc:97:98:ed:e8:32:a2:d2:e2:7f:c8:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D8:0C:AD:6F:90:51:65:98:D9:E5:7F:49:C8:12:56:B3:66:FF:BB
X509v3 Authority Key Identifier:
keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.235.0/24
Signature Algorithm: sha256WithRSAEncryption
15:50:56:0d:d9:62:c8:4d:d1:ed:ee:63:e6:f3:e6:cd:70:1b:
53:99:d4:e9:82:b5:27:6b:59:b0:c6:5f:ed:bf:cb:2c:c2:f2:
d4:da:5f:95:46:6f:ab:0b:df:bc:77:41:42:7a:aa:fa:ef:47:
38:01:37:74:da:35:bb:cb:19:68:87:47:a3:3a:f1:43:4b:9a:
34:89:40:a3:8d:55:61:d4:1b:89:83:1b:a5:1c:e1:f8:76:14:
23:10:59:e1:24:44:a8:b9:e3:34:ab:78:02:66:1a:38:a5:4f:
a7:0a:32:df:80:ed:94:2f:4e:7f:7b:bc:35:78:ab:64:ae:fb:
e6:6a:35:45:c1:8e:1b:fb:77:87:77:d2:25:55:40:cb:7e:c0:
4b:9f:0a:92:ec:f3:24:43:0a:e3:ff:4c:cb:fd:e9:62:79:c8:
44:9b:bd:e9:9f:0f:51:bb:f2:d2:74:fe:a9:37:27:0b:85:c6:
59:b5:d6:8a:39:26:77:59:73:e7:0b:83:7c:61:82:67:0c:e5:
97:c9:2e:af:7a:4c:4d:98:64:79:3c:23:d3:07:e8:c0:58:24:
85:2d:ba:92:6f:81:19:b3:f9:4d:42:47:c2:da:bf:29:f6:f9:
e2:e6:4b:ae:d0:28:d0:08:be:91:dc:ab:d5:92:b6:98:48:92:
87:08:2a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:44:56 2025 by rpki-client