Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa
File: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (raw, json)
Hash identifier: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=
Subject key identifier: 5E:B8:6F:34:26:10:9F:DB:FF:66:D1:0D:74:A5:59:DD:52:DD:B8:97
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019421B1C30883154D1D8B9648A93873FF83
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43958
IP address blocks: 91.195.246.0/23 maxlen: 24
193.143.8.0/21 maxlen: 24
193.143.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c3:08:83:15:4d:1d:8b:96:48:a9:38:73:ff:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5eb86f3426109fdbff66d10d74a559dd52ddb897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:fc:bf:1c:3f:6e:7d:f3:25:be:81:42:5e:
4e:7e:78:5e:9d:b8:a7:da:6c:f4:fd:3b:80:b2:a2:
b1:43:23:e8:ec:4a:1e:d1:39:f3:ba:ef:4f:a5:58:
f8:65:6d:84:b0:00:56:8d:8e:d9:89:7e:84:e9:3d:
ac:04:70:e6:c4:e1:be:eb:4d:b9:bc:3a:d1:52:35:
90:a9:52:04:ee:4d:52:d0:31:3a:ce:3e:38:71:4f:
ae:f5:59:84:5b:f1:8a:1e:f3:91:be:97:22:c7:93:
67:3c:d6:5f:73:d1:d2:03:7e:53:16:6d:f8:a7:63:
b0:e2:ce:fe:7f:5f:27:03:d0:b9:78:3a:71:46:f6:
26:9d:38:f5:55:ba:b1:c5:1a:69:8f:0a:c3:6b:6f:
e7:76:ce:0f:8c:aa:89:37:29:64:64:d1:b8:bb:f3:
5c:34:15:f1:b9:ad:9b:26:37:52:1f:82:d5:58:a0:
b1:0f:a8:6b:d8:8b:0c:59:0e:64:f1:97:4e:09:1b:
1c:44:51:4d:00:32:b3:a8:5b:d7:3e:d6:ec:74:94:
4c:4f:4e:ef:62:ea:d5:34:97:04:e6:af:e9:e5:45:
53:d3:f5:22:c9:5a:e0:92:f2:88:16:d8:21:63:68:
db:1c:5c:97:a1:44:da:59:56:32:b9:d5:05:c7:0a:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:6F:34:26:10:9F:DB:FF:66:D1:0D:74:A5:59:DD:52:DD:B8:97
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.246.0/23
193.143.8.0/21
193.143.240.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:7a:a0:90:68:3b:f3:a3:d5:44:7a:d7:3e:8b:8f:3e:08:e5:
50:40:0f:d2:3b:4a:37:4c:6e:59:64:01:87:93:f7:d0:30:74:
ce:46:66:2e:c3:56:67:89:a9:7b:b9:6f:a5:52:4f:59:fc:e1:
e3:da:fb:0a:d5:8d:b2:e8:e6:fd:7c:6a:b4:b6:73:3e:07:e1:
07:b9:9f:7c:95:30:d9:6d:fe:65:76:25:2e:20:81:82:6d:41:
e8:bc:20:f0:fe:54:3d:69:46:e5:4d:f6:8f:3c:db:45:a2:4b:
f6:16:06:fd:2f:7c:04:db:ea:f0:4d:51:5e:cc:97:c8:a1:68:
60:01:5d:cc:e7:9f:65:f7:30:be:cd:f3:25:d6:50:8f:66:45:
c9:7e:91:f3:ee:c6:b5:92:9d:14:cb:92:00:42:58:7d:21:cb:
68:70:15:54:34:98:74:4a:86:9a:6c:39:f1:67:a4:4a:61:91:
1b:7b:db:72:dc:f3:01:74:4a:a3:31:b8:6d:a9:01:5d:df:10:
3f:50:99:c8:07:5d:62:c0:11:28:82:a0:f0:45:ae:40:2a:bb:
7e:11:b0:52:b8:55:e6:14:8b:24:d8:c0:44:40:fc:52:ea:92:
01:c8:0f:cb:a5:27:30:5b:9d:55:39:a4:00:d4:30:ee:37:38:
54:df:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:52:08 2025 by rpki-client