Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/XntGa_7-ppXotUDBoZrK1B3W5Z0.roa
File: XntGa_7-ppXotUDBoZrK1B3W5Z0.roa (raw, json)
Hash identifier: 24HGkZzWTnK/S3EwJ7veoxpuQnRxskzxwtNYQjYX8aM=
Subject key identifier: 5E:7B:46:6B:FE:FE:A6:95:E8:B5:40:C1:A1:9A:CA:D4:1D:D6:E5:9D
Certificate issuer: /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial: 01942444FBD8F77250B711797464DAEB4FCC
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/XntGa_7-ppXotUDBoZrK1B3W5Z0.roa
Signing time: Wed 01 Jan 2025 23:48:08 +0000
ROA not before: Wed 01 Jan 2025 23:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21385
IP address blocks: 193.108.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fb:d8:f7:72:50:b7:11:79:74:64:da:eb:4f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Validity
Not Before: Jan 1 23:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e7b466bfefea695e8b540c1a19acad41dd6e59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:ba:cf:20:10:32:ee:44:ac:30:67:24:e6:
c8:5e:a2:8d:eb:30:4c:4d:47:40:13:53:ef:9b:14:
43:7b:68:8c:a2:75:95:c8:70:46:09:da:d8:7a:6b:
e5:78:aa:e1:3e:2a:75:29:28:29:32:c1:a3:86:5c:
7e:b5:08:8a:21:02:4b:cb:90:f3:35:c7:56:fb:87:
aa:57:51:0e:8d:f4:12:16:b2:95:dd:8a:7c:bb:20:
4c:e0:50:e2:08:46:bd:b3:0d:ee:8f:2b:74:f7:ce:
ad:5a:f0:31:b6:4a:d7:de:c9:f3:3f:b8:c6:5d:1e:
1b:c7:f7:f3:f5:0c:1f:33:6b:58:b3:f9:3f:84:2e:
ae:6c:cb:85:60:35:75:04:18:36:c3:fe:1b:1b:24:
c0:5f:3f:6b:22:99:92:b7:3b:92:32:33:5e:8c:e3:
d4:73:4e:51:c7:a4:54:c0:40:f2:09:a4:80:98:87:
72:db:f2:ef:86:35:7b:28:4d:5b:91:bf:b1:e7:35:
d4:3a:06:33:2e:f0:c5:af:1a:a6:6f:1c:0e:71:dc:
ea:5d:23:2c:45:ec:26:8a:64:5e:f4:cf:50:20:92:
70:b7:dd:95:bf:5c:a5:9c:26:41:2d:09:d1:1d:f3:
f7:7b:18:9b:e4:5c:41:64:45:83:eb:39:ae:2d:4e:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7B:46:6B:FE:FE:A6:95:E8:B5:40:C1:A1:9A:CA:D4:1D:D6:E5:9D
X509v3 Authority Key Identifier:
keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/XntGa_7-ppXotUDBoZrK1B3W5Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ee:ea:78:94:d5:0b:6b:5c:36:e0:3b:52:7d:bb:f1:47:1d:
e4:80:f0:4e:e7:d0:81:b6:9f:fa:53:bd:2e:4a:df:dd:ad:b9:
8a:48:2d:e5:e1:74:21:4c:e3:3a:ab:64:89:e5:ea:52:e2:ca:
74:48:8e:45:a4:2d:76:12:6b:2e:8c:2a:2a:b1:5f:18:a4:ef:
26:71:bf:a5:15:95:76:66:98:76:e9:c7:4b:30:89:e4:38:69:
1c:03:c3:1a:47:13:88:7e:8d:76:00:93:69:12:68:f9:71:1d:
e2:72:c4:66:e5:65:da:3b:90:5d:71:f5:00:c6:49:08:a5:47:
e9:8b:78:54:80:f0:45:13:75:b0:fc:91:dc:a7:fc:21:9e:ee:
51:60:02:69:f0:79:5f:72:5b:41:9d:ce:ee:6b:74:3b:11:dd:
43:dd:bf:62:46:32:f8:fc:85:aa:30:e3:56:eb:4c:b8:a5:60:
b9:12:59:24:e0:e6:cb:0d:40:3c:db:9a:19:16:03:ad:c5:12:
75:61:82:07:75:d9:8d:bf:d1:92:ad:48:41:b3:66:2c:4e:4c:
3b:4d:d2:d5:8e:21:99:e1:05:ab:db:42:f4:2e:c1:a5:0a:03:
a8:3a:d4:53:d5:51:93:19:e2:83:71:83:e1:74:79:cf:dd:ae:
58:5c:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:05 2025 by rpki-client