Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/xHkJHzTD8_YsVJb1E014CGyqfNk.roa
File: xHkJHzTD8_YsVJb1E014CGyqfNk.roa (raw, json)
Hash identifier: vU0FBIoesehMBLGSsYMRz2M7MHLMPr/AmIolqA/4dRY=
Subject key identifier: C4:79:09:1F:34:C3:F3:F6:2C:54:96:F5:13:4D:78:08:6C:AA:7C:D9
Certificate issuer: /CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Certificate serial: 019422200E5360D7F3807BA28546A44666D9
Authority key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/xHkJHzTD8_YsVJb1E014CGyqfNk.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60906
IP address blocks: 193.23.16.0/22 maxlen: 22
193.23.16.0/23 maxlen: 23
193.23.18.0/23 maxlen: 23
2a0f:5680::/32 maxlen: 32
2a0f:5680::/48 maxlen: 48
2a0f:5680:1::/48 maxlen: 48
2a0f:5680:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0e:53:60:d7:f3:80:7b:a2:85:46:a4:46:66:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c479091f34c3f3f62c5496f5134d78086caa7cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:9a:49:2d:5b:43:61:05:5b:0e:4e:86:37:
00:44:6b:20:9b:4d:9b:47:de:c0:11:07:b0:10:59:
5a:d7:00:3a:d0:31:27:d2:51:45:3f:8b:a6:f9:ce:
88:70:5f:c9:7e:cc:0d:f7:e6:71:ac:fd:54:23:1d:
74:e1:20:fa:57:83:5b:ce:88:33:b7:0a:54:dd:02:
04:8d:12:dc:e7:bd:3b:e0:07:58:de:53:f3:a7:7e:
09:c6:9b:4a:5d:bc:45:79:f8:8c:8e:ac:fe:88:85:
b6:11:66:a0:31:d8:33:e7:b5:91:68:bc:9d:bf:db:
36:9b:1b:2f:4d:8d:90:07:10:d4:1f:fe:78:85:e6:
be:08:03:cf:3e:5d:da:50:d8:2c:2a:d1:87:24:a9:
a1:06:c5:d0:d4:f0:ce:24:3f:d6:47:1c:71:8c:b6:
a7:0b:f2:44:90:a3:aa:32:37:c5:32:05:73:e6:41:
1e:0c:61:28:90:26:b1:9a:10:3d:5b:0f:0b:c6:a3:
aa:fa:bd:69:ac:95:be:20:d0:9b:cb:9e:29:ed:71:
8e:00:5b:d7:0c:77:45:cc:7a:51:07:1a:e0:09:87:
07:a6:3a:9a:29:2d:71:8a:c3:79:bf:55:8d:2b:d4:
de:21:ae:60:43:b9:bf:82:11:c4:52:5c:d9:b2:d2:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:79:09:1F:34:C3:F3:F6:2C:54:96:F5:13:4D:78:08:6C:AA:7C:D9
X509v3 Authority Key Identifier:
keyid:44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/xHkJHzTD8_YsVJb1E014CGyqfNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.16.0/22
IPv6:
2a0f:5680::/32
Signature Algorithm: sha256WithRSAEncryption
79:47:a3:21:13:6b:10:67:12:15:c5:bf:96:75:fd:98:78:22:
82:75:c5:60:fa:36:c1:5a:24:72:59:3c:9b:8a:87:73:01:83:
a7:fe:17:5f:42:6c:3b:b0:92:c7:1c:82:8b:f2:a3:47:02:0c:
79:99:81:62:eb:83:5b:5d:6c:d7:fd:78:c3:08:dd:4b:61:a3:
c5:45:fe:60:75:3f:fe:61:0e:8f:31:78:48:9f:fd:d9:b1:a8:
d4:ca:0b:35:9a:54:a9:56:54:f2:3b:57:a3:a3:47:27:bd:94:
59:51:fa:ff:ce:7f:0f:b0:18:ad:86:f7:a8:97:c0:36:15:a1:
8a:b7:21:1c:a2:28:9d:fa:fc:8c:41:6b:bb:a3:78:78:ab:e7:
b8:2b:8b:8b:4e:a1:89:4d:5c:a4:91:2d:56:10:bd:b6:6d:15:
22:0f:da:a9:12:b4:56:1c:35:09:c6:19:8f:54:32:09:b3:4a:
e6:ed:7b:e6:e2:41:55:58:d3:cf:a6:3c:54:15:46:b9:7b:da:
89:05:0d:30:09:ee:6d:51:6d:46:07:04:0f:19:e4:b0:39:6f:
d8:0b:c3:62:6b:17:f3:3a:63:de:fc:10:ac:0e:53:e0:68:19:
a4:7c:5f:c7:e7:4e:1a:58:8e:1f:ae:6a:9f:74:3b:41:78:b6:
0b:35:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:37:11 2025 by rpki-client