Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa
File: XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa (raw, json)
Hash identifier: xjEc3UgcuslMKxGxfh1ksiSKMzapldmW9N+WDd88oT0=
Subject key identifier: 5C:58:3D:50:1E:20:4C:82:FC:C0:9F:43:50:94:E9:39:FB:32:99:E6
Certificate issuer: /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial: 01941F8C49E9056D0641020102B34BC6E6E4
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50357
IP address blocks: 193.106.124.0/22 maxlen: 22
193.106.124.0/23 maxlen: 23
193.106.126.0/24 maxlen: 24
193.106.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:49:e9:05:6d:06:41:02:01:02:b3:4b:c6:e6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c583d501e204c82fcc09f435094e939fb3299e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:ac:30:04:b0:a1:49:5c:ed:8f:73:5d:3f:
49:54:3a:33:4a:4f:ce:1f:01:a9:66:91:2f:b3:a1:
cb:23:5f:cf:07:a7:e5:53:01:8a:06:01:72:c2:b4:
d4:f3:f9:98:8c:ac:49:2b:f5:19:0a:61:13:d4:71:
4c:f4:11:5e:5d:3f:f3:95:1a:e5:9d:50:db:a9:95:
f2:51:be:21:56:da:cb:47:f0:9d:fb:ed:2d:73:bf:
5e:d0:f6:03:a7:02:bd:15:8c:14:15:dd:53:3c:a7:
a6:7c:76:a0:7a:7d:d0:9f:a5:6a:f2:40:b3:a3:7a:
05:2b:6a:da:44:2b:bf:84:0b:27:ed:58:6b:a3:6b:
36:ee:fa:68:62:1b:ab:10:51:44:08:db:02:7f:a7:
47:c5:60:03:93:68:63:a3:e3:75:c8:a3:10:e6:30:
83:3e:93:45:64:73:3c:6f:20:6b:c0:b0:76:74:45:
94:e4:bc:11:b1:33:cd:e6:b2:eb:3a:2f:3b:d0:d0:
ac:ed:32:ad:78:1f:50:d1:d7:12:21:d4:fe:f7:9d:
d0:2e:e8:6f:e7:77:9f:ae:04:b4:14:0d:19:15:ea:
66:a8:58:cb:7e:32:63:86:96:bf:a0:dc:c1:50:98:
61:f0:6d:f1:95:42:ac:79:09:3a:a9:5b:39:8c:c8:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:58:3D:50:1E:20:4C:82:FC:C0:9F:43:50:94:E9:39:FB:32:99:E6
X509v3 Authority Key Identifier:
keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.124.0/22
Signature Algorithm: sha256WithRSAEncryption
01:4e:4e:b7:35:bf:32:1a:67:7f:9b:63:f5:da:fa:c5:36:29:
f9:6f:17:ff:f9:a2:11:6a:b9:fd:49:2f:8a:5c:13:c4:58:32:
04:68:6a:8b:ae:e0:01:8d:da:5c:c7:ad:3d:53:0c:e6:31:f4:
70:12:a0:4d:aa:b8:0c:ce:12:f8:66:5f:e4:ab:a6:74:f2:14:
49:06:a9:31:9c:32:f3:94:ca:c2:39:d7:e4:b3:e7:ee:2a:5e:
ed:e1:ad:fd:85:b3:bc:66:34:70:33:06:da:50:a6:a6:e0:aa:
bc:54:21:64:19:15:ab:ff:16:21:d5:50:2a:e4:e1:52:58:20:
d2:7b:78:3f:ab:f4:b2:4e:3e:37:a4:9d:0d:48:1f:e5:a9:52:
ab:cc:45:a9:9a:bf:14:2c:57:2d:6c:4b:51:fb:3d:27:60:83:
49:74:3f:a9:9b:77:33:31:92:fb:c9:6c:b8:11:94:c1:09:c2:
f9:b4:62:18:79:ac:74:de:76:9a:2a:2d:14:43:87:d5:63:ff:
7c:0e:18:9a:e3:20:3b:bb:dd:08:73:42:ff:0d:28:68:65:18:
2a:39:3e:08:89:6b:a5:1c:58:dd:ed:b8:3c:ca:16:16:33:8e:
bb:ce:58:4c:1a:7d:fd:26:49:7e:ea:58:f8:91:ef:06:6e:2c:
43:8c:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:43 2025 by rpki-client