Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa
File: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (raw, json)
Hash identifier: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=
Subject key identifier: 52:C3:48:77:3F:F1:E6:62:05:E7:17:0A:11:51:95:97:FC:57:18:9E
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019420685EB6CD4A97CB3D4D2C0D8987CD41
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35523
IP address blocks: 193.239.216.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5e:b6:cd:4a:97:cb:3d:4d:2c:0d:89:87:cd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52c348773ff1e66205e7170a11519597fc57189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:69:69:9f:ea:42:04:8b:65:7c:93:f9:ec:
c7:49:36:a0:80:91:b1:06:67:e7:cc:69:0c:74:9e:
78:40:79:5f:d9:b9:8b:b8:12:46:c1:60:e3:6a:59:
67:6e:1c:4a:d9:3b:07:82:72:60:97:87:4d:dd:76:
9b:19:74:03:eb:18:33:a8:15:95:2e:e9:89:57:0d:
12:56:41:b7:e6:99:c4:a4:1c:9a:74:23:4d:fd:1f:
96:4c:30:a3:f0:65:c6:86:6d:ef:96:9e:10:88:03:
ec:01:82:7f:fe:48:a8:f8:83:96:5f:76:c0:85:62:
b9:6c:da:42:d1:fa:10:39:9d:98:ad:80:fc:d5:f3:
90:30:3a:e7:6d:5a:a2:ce:2a:c6:8a:60:79:be:45:
3e:fc:d1:f0:89:63:62:e2:22:db:c0:32:9a:63:d9:
32:89:94:e7:70:67:fe:17:82:0e:9b:bf:23:90:e4:
0b:49:41:ab:8f:db:ca:e6:f9:0d:9c:98:f7:cb:6c:
7a:a2:18:c6:d3:99:b8:83:00:2f:2f:e7:d0:ff:71:
6b:ab:4c:da:27:20:0f:19:5b:2e:03:0d:ee:70:a1:
8a:c4:81:6f:e2:cf:ca:0f:d0:a0:9b:bf:7a:08:c1:
7c:56:a4:18:f1:57:d7:de:2a:85:96:1e:10:8c:57:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:48:77:3F:F1:E6:62:05:E7:17:0A:11:51:95:97:FC:57:18:9E
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.216.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:e8:6e:4b:3f:e8:31:f4:58:0a:fa:37:55:e9:5d:58:7e:35:
db:b0:df:cc:40:d3:fc:69:64:4b:04:8f:6d:a5:7c:6d:b2:6f:
e1:9c:5a:e0:0f:8a:55:a9:e1:aa:40:e7:05:6a:08:c8:5a:9d:
0d:8b:af:0f:5e:cc:b8:37:0e:f3:21:4c:5a:1a:7b:d2:db:8b:
12:6e:1c:f1:8e:4f:2a:d3:4c:1c:65:8b:81:41:27:a0:21:4c:
6e:31:e3:31:91:59:e0:1f:61:86:fe:a1:32:b4:14:e1:17:68:
81:40:cb:e1:56:8a:20:9b:96:65:7e:2c:62:cf:24:55:07:4c:
45:5d:91:45:45:80:ea:97:76:84:95:27:85:26:3e:08:90:86:
9d:c1:6a:7a:e0:f7:f5:4b:44:83:66:90:3f:d4:39:f9:99:33:
92:0f:4c:8a:a7:a3:af:46:12:2c:56:60:f8:46:61:f9:c3:41:
1e:83:59:97:81:36:9e:1b:6f:f2:ab:13:ff:52:4b:86:e8:1c:
ec:a3:20:a8:2b:f2:32:d3:2a:9e:f0:a4:de:25:df:1a:9f:96:
de:75:24:5f:07:8b:d8:5c:e4:0e:e0:05:dd:f1:0f:43:40:26:
53:0e:74:57:d8:dc:a1:65:bc:fe:14:90:1a:80:00:e3:e1:33:
54:77:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:04 2025 by rpki-client