Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/XlwydODeF8gcZq2lEX8o8gcX3v8.roa
File: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (raw, json)
Hash identifier: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=
Subject key identifier: 5E:5C:32:74:E0:DE:17:C8:1C:66:AD:A5:11:7F:28:F2:07:17:DE:FF
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 0194266B99170A1DF12ACFACA75159A84D69
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/XlwydODeF8gcZq2lEX8o8gcX3v8.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201619
IP address blocks: 78.31.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:99:17:0a:1d:f1:2a:cf:ac:a7:51:59:a8:4d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e5c3274e0de17c81c66ada5117f28f20717deff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:f6:ee:5c:85:ef:00:83:c3:70:25:80:30:
09:cb:22:a4:05:fa:f2:7a:4e:01:4d:06:cb:2a:3e:
6b:cd:7f:fb:fc:31:9f:d2:76:33:fb:d4:65:1e:de:
7c:99:19:a3:11:44:9a:d7:e6:72:1f:c3:8c:f8:d3:
cd:67:a3:de:56:6f:b5:b4:5f:f1:73:58:2b:af:21:
61:17:00:8c:f0:7f:e4:38:cb:1b:67:f0:30:ea:50:
01:7c:71:92:58:40:24:e5:c5:d8:84:5a:62:bb:6f:
46:f9:cf:d8:d1:92:64:30:76:1d:40:a6:88:90:aa:
ee:02:59:de:df:f3:a7:b5:3f:a5:5c:1a:d8:d7:18:
29:73:b7:a4:d2:de:30:b2:76:32:29:f3:78:d3:9b:
f4:7d:d6:2d:a7:32:33:23:24:10:5d:b4:f4:b4:b1:
86:05:5e:52:00:75:80:a3:85:78:0e:f6:51:76:2e:
f1:40:47:6f:2f:2d:fa:f3:62:55:8a:78:52:a8:43:
d6:b1:be:f9:81:f1:4d:01:99:fc:00:ab:e0:d7:9a:
b2:9b:d8:24:99:ba:c2:24:4e:bf:31:d7:6f:17:d3:
bc:ba:84:a2:69:b9:80:a5:83:26:5f:84:18:f7:07:
b5:4d:0d:de:ca:a8:e6:00:9d:58:43:ff:91:55:4c:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5C:32:74:E0:DE:17:C8:1C:66:AD:A5:11:7F:28:F2:07:17:DE:FF
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/XlwydODeF8gcZq2lEX8o8gcX3v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fa:62:36:01:af:a7:d6:fa:8e:7b:6c:0d:82:5b:90:5d:cb:
b8:f2:06:f8:00:91:c2:df:e6:26:d7:d9:8c:b5:3b:28:43:0b:
89:46:ac:b3:70:d2:56:23:37:72:a3:12:3d:b1:6f:58:b7:84:
ad:2e:6d:12:2d:fa:b9:67:81:6e:76:d3:d7:9f:72:15:93:85:
e2:85:62:61:46:99:fa:31:c7:a7:1e:19:dd:8e:7b:4a:5f:c8:
30:4f:15:17:dd:ad:f4:c8:a4:00:dd:52:ff:b1:3c:cc:80:ae:
1c:7d:b3:40:43:1c:ee:ac:ea:11:e1:61:14:10:03:f8:8c:43:
3b:4a:48:5a:76:cc:1d:b1:f1:fe:dd:4d:0d:d1:eb:80:da:06:
d9:c4:5d:80:ae:fa:c7:5d:03:71:64:b9:c2:8c:72:87:2e:67:
3c:ed:fb:5f:42:fb:92:ce:b0:40:e3:ec:aa:9c:df:ea:72:cd:
c0:9f:db:84:91:5d:2f:2d:58:ef:2d:a4:0e:22:f7:73:3b:84:
0e:07:52:83:25:25:d5:63:6a:6d:42:22:dd:b1:31:c8:82:31:
b1:d2:e1:99:76:92:e9:34:21:2d:28:aa:fb:03:16:da:9c:2b:
eb:fd:34:e1:e3:ab:af:c5:ad:6b:e6:05:ee:3f:60:5f:70:af:
45:3a:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:05 2025 by rpki-client