Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/X2IXuMlNGoAcrvL_ko43_QrEupI.roa
File: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (raw, json)
Hash identifier: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=
Subject key identifier: 5F:62:17:B8:C9:4D:1A:80:1C:AE:F2:FF:92:8E:37:FD:0A:C4:BA:92
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 0194258F17F048E3E7A12503C481F04EC541
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/X2IXuMlNGoAcrvL_ko43_QrEupI.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30769
IP address blocks: 193.19.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:17:f0:48:e3:e7:a1:25:03:c4:81:f0:4e:c5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f6217b8c94d1a801caef2ff928e37fd0ac4ba92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:23:98:12:ae:50:86:fa:63:32:15:33:0c:
01:aa:29:a7:50:f4:94:77:0f:e0:09:4f:83:f9:ca:
da:cd:4c:aa:79:03:69:b6:74:24:51:d1:0e:b1:a0:
63:de:94:21:6f:47:50:e9:11:9f:99:bd:ea:6c:b0:
7b:03:6a:e8:7b:1f:02:93:e5:53:28:06:a9:70:c4:
42:e8:9a:1d:f3:0f:b9:bc:20:7f:5e:98:31:18:9d:
bb:fd:66:bc:67:3a:e0:2c:b4:7f:6b:56:c5:02:ec:
71:7e:4f:a7:94:c4:d0:e0:2c:39:59:d0:60:d6:63:
a6:ff:4c:1b:f8:b3:31:a4:d0:c2:86:e5:35:a5:ad:
37:13:d8:7d:4d:b5:85:c2:45:34:ab:2b:0e:7f:16:
01:31:4c:e5:84:93:17:d4:a2:1f:af:71:6d:da:d2:
e6:a1:89:ec:00:52:44:56:15:a0:a8:71:70:3a:cc:
a9:bb:d4:29:ee:73:5d:ec:1f:ae:60:e5:23:e9:b1:
b0:3a:e8:d2:a8:e5:b1:df:cf:e8:6c:54:43:84:38:
d5:c1:57:2b:34:6a:ac:7e:0b:30:9e:fb:cf:01:1a:
ca:f1:f8:46:2e:38:b5:d7:59:bf:bc:e6:e6:73:e6:
3a:88:ae:c4:70:0b:0d:37:92:ae:f0:42:8a:c9:1f:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:17:B8:C9:4D:1A:80:1C:AE:F2:FF:92:8E:37:FD:0A:C4:BA:92
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/X2IXuMlNGoAcrvL_ko43_QrEupI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.88.0/23
Signature Algorithm: sha256WithRSAEncryption
18:33:4f:76:47:b4:31:ed:68:64:41:90:f0:1d:64:b1:13:0f:
27:51:fe:c5:8c:44:4c:d3:03:ea:f5:ad:e5:08:2a:44:f4:7d:
fd:cc:ba:13:e2:55:9d:76:c4:ee:62:e3:44:a0:e4:27:2a:74:
9e:26:bf:99:89:2c:5b:ed:94:e3:e1:67:7b:40:b7:bb:b6:b9:
63:61:f4:a6:ee:af:97:f9:89:1e:fc:27:c5:4b:9e:b2:4d:41:
6b:98:9a:46:18:e9:6e:17:40:65:6e:9e:b3:65:5a:1c:cf:df:
cf:0d:99:88:77:0a:47:d1:f7:0d:85:06:01:2e:cb:2f:97:d9:
af:a3:ae:f4:48:2d:38:2e:74:c8:ab:74:08:d4:38:35:ec:5f:
5f:a7:60:a4:78:87:32:7a:47:fd:4c:03:f1:cb:c1:be:2b:3c:
26:18:4b:04:d3:2b:00:50:ab:3e:52:54:96:bf:25:6d:1f:a3:
f9:ed:26:70:2b:44:8a:69:07:64:b6:16:eb:26:73:f4:fe:84:
c1:be:dc:1b:96:27:bf:4f:dd:10:dd:4f:66:be:fc:45:6c:ef:
c3:cf:d2:4c:5b:cb:64:70:9c:a0:97:49:98:43:5b:4f:6d:e5:
f0:b6:32:7b:7b:f9:8c:84:06:61:cb:33:a8:fe:9b:8d:ed:3d:
f6:31:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:22 2025 by rpki-client