Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/xFzbq7zegADAXEC3JlJ8gW_VXDA.roa
File: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (raw, json)
Hash identifier: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=
Subject key identifier: C4:5C:DB:AB:BC:DE:80:00:C0:5C:40:B7:26:52:7C:81:6F:D5:5C:30
Certificate issuer: /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial: 0194228D993051C64D410C81514C1B1C64E9
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/xFzbq7zegADAXEC3JlJ8gW_VXDA.roa
Signing time: Wed 01 Jan 2025 15:48:12 +0000
ROA not before: Wed 01 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213142
IP address blocks: 193.247.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:99:30:51:c6:4d:41:0c:81:51:4c:1b:1c:64:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Validity
Not Before: Jan 1 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c45cdbabbcde8000c05c40b726527c816fd55c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6e:c9:cf:ea:28:0c:a4:1b:f5:80:03:2f:71:
9e:e3:83:bb:eb:99:5e:1c:4f:f5:ae:28:6d:5a:e1:
7f:05:73:96:4e:0d:9d:ce:0f:fc:c1:41:ad:e0:cf:
6d:3d:3b:93:ce:cc:ab:ea:e2:73:cd:6a:df:5e:cf:
32:3f:5d:f2:c6:8e:32:ed:db:35:aa:ad:87:94:d2:
e2:96:1f:01:ce:f2:a4:72:00:39:f8:e9:73:1b:41:
01:3a:66:5f:8c:00:01:92:1b:18:a7:24:0a:84:8a:
a2:63:d0:0e:d9:75:43:cb:51:bc:42:6e:24:13:70:
24:92:e6:8e:bb:63:84:9b:aa:b2:5a:b8:8d:c5:c2:
26:a6:44:7e:44:ad:79:c4:32:c3:c2:38:2f:04:28:
c2:3b:e2:5a:7a:ba:71:a8:b2:58:4a:79:cd:f7:f3:
1d:29:8a:d1:cf:1a:c8:15:70:b9:bb:1c:b9:55:15:
5f:ca:5c:23:fd:b0:0c:93:cc:c4:fd:c1:8b:67:84:
2b:03:87:af:d3:f0:97:e7:6d:f7:8d:0d:f3:35:1f:
07:c6:1a:54:f8:55:7f:43:72:74:b1:0e:f3:ae:8a:
e9:7f:bc:93:57:19:c4:47:ea:0f:66:c1:f4:10:04:
b0:72:8f:3f:f2:29:75:5f:6a:4e:3b:53:e1:3a:8e:
4a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:DB:AB:BC:DE:80:00:C0:5C:40:B7:26:52:7C:81:6F:D5:5C:30
X509v3 Authority Key Identifier:
keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/xFzbq7zegADAXEC3JlJ8gW_VXDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.67.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e9:dc:a6:82:6c:f6:1c:41:ed:4b:20:72:b0:d7:6b:97:39:
b5:08:ce:94:e3:12:27:d5:38:06:96:10:a7:c4:c8:a6:81:5c:
42:ed:66:ae:e4:c6:9d:6f:65:a7:ff:a7:0f:eb:1a:a1:27:9f:
8d:d8:d8:a4:84:c8:58:c3:7f:a3:98:0b:94:9e:df:b4:a2:26:
fb:e9:6b:9d:21:91:3d:ad:61:d4:60:ec:4a:29:f2:7f:07:69:
16:bc:27:1e:89:ab:e7:92:74:ab:5b:b2:f2:07:7a:48:f5:fe:
ea:90:7e:0b:0e:a1:ea:f1:26:8d:b2:f0:7d:dd:bf:70:e5:97:
7a:06:e9:dd:07:88:a1:50:eb:97:94:b7:41:b1:a4:ba:b2:6a:
70:b0:97:68:3f:3b:65:c8:63:a9:ec:cb:58:d1:25:67:46:44:
05:b2:82:52:1c:39:5a:8c:45:f7:23:6b:cb:b7:81:2f:75:c9:
a6:b6:68:62:8e:e1:80:66:b8:59:f8:ef:da:27:47:14:0d:45:
99:d8:1f:ca:9d:3a:65:27:d2:0e:5c:2a:08:b6:c8:bf:8e:b1:
37:78:32:25:cf:30:6d:91:d4:69:83:c4:bf:45:68:38:4f:f3:
a2:ad:c2:70:cc:93:a1:c5:19:68:30:88:3c:b8:7e:fa:74:74:
d2:4f:bd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:48 2025 by rpki-client