Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa
File: xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa (raw, json)
Hash identifier: ZuaV3q0OgmaLrqgLObSDoZ2eNoEB+XGTiCr0RvXHj+4=
Subject key identifier: C6:52:85:67:E5:76:9B:02:DD:76:EC:02:92:DD:21:54:AB:92:78:C7
Certificate issuer: /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial: 019420685FE52093A91FBBD4A26E8956177E
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39479
IP address blocks: 213.187.10.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5f:e5:20:93:a9:1f:bb:d4:a2:6e:89:56:17:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6528567e5769b02dd76ec0292dd2154ab9278c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:4a:89:12:c8:a9:1b:7d:0c:bb:17:7a:e5:
0c:00:ea:8d:1a:b4:e7:05:fa:b5:10:29:4c:ef:e4:
ec:66:f7:3a:cb:e6:ca:46:45:69:6a:c0:df:66:ae:
d3:83:fd:fd:df:66:05:63:fc:84:a9:36:96:b6:13:
d3:c6:65:5f:d8:0f:b9:d3:12:65:bc:ac:95:04:14:
0c:93:19:4a:44:d5:8d:07:78:8d:47:3b:a3:6c:da:
90:24:66:86:00:92:47:27:00:91:a2:40:34:80:a0:
ce:c1:c5:a7:9b:df:76:20:60:e9:9b:77:f6:a9:bc:
d2:c2:2a:0c:d1:de:13:18:5b:c4:b7:67:e3:b0:7d:
82:d5:85:49:3d:5d:c5:b8:c2:e5:5e:13:d8:a7:e7:
af:ae:43:bd:9a:6f:38:25:5b:84:03:dd:3b:0e:59:
78:13:e1:05:a5:ea:c7:45:01:3d:2c:8e:70:fc:64:
e0:ac:0a:a5:e3:af:c2:30:3c:89:07:a9:c3:1b:59:
17:85:1a:f8:16:17:2c:f2:ed:34:60:45:d2:e0:ed:
c0:02:05:de:52:95:eb:f5:d7:21:87:2e:b0:5f:a6:
49:c3:f5:e5:5f:4f:7e:0e:72:a9:f8:b4:59:b2:b5:
88:6b:6a:d0:b5:9e:58:f6:60:8f:70:75:20:79:48:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:52:85:67:E5:76:9B:02:DD:76:EC:02:92:DD:21:54:AB:92:78:C7
X509v3 Authority Key Identifier:
keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.10.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d3:ac:9d:81:1a:c1:dc:a0:4d:a5:0e:cf:6b:87:cc:24:ec:
61:5a:a4:7c:4e:9e:b5:49:ca:65:1d:bf:d6:14:5b:a6:36:a6:
7b:fd:92:c6:c3:74:85:34:bc:b0:cc:08:ed:98:be:f7:22:00:
76:d1:8b:c9:c5:18:de:1c:10:c7:44:e4:8b:d0:3d:d2:de:1c:
0c:b0:9c:8d:44:c6:5e:ac:04:15:dd:f9:ac:c6:76:61:4f:9e:
7a:a2:73:f3:2d:68:bf:52:91:4e:af:74:c6:3f:a4:0f:45:de:
dc:85:06:73:06:8e:16:49:c2:71:c4:e9:6e:b4:23:02:96:44:
f0:45:01:19:1f:cb:2a:2a:b9:c9:2f:74:e1:05:3d:6b:d6:48:
84:f8:c1:bf:7d:96:4f:bf:42:1c:c9:a7:1f:6c:42:99:a0:eb:
51:34:92:5b:d1:02:f3:39:a2:01:2a:08:e4:78:7e:20:e6:12:
0d:a9:41:8f:1f:82:07:2c:09:ba:24:2e:50:8e:43:62:62:27:
1a:8d:63:38:cf:45:17:88:48:02:2f:4d:e9:7f:e8:b3:60:13:
a2:47:c7:c4:59:77:c5:9b:a0:9e:4e:87:6d:f9:0d:41:02:83:
5c:d3:ca:5a:94:35:9d:a3:df:25:db:f9:30:e1:0c:89:7b:cb:
ea:7d:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:26:57 2025 by rpki-client