Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/xBCmHDQdfHeyTzhklHfbHAtEjac.roa
File: xBCmHDQdfHeyTzhklHfbHAtEjac.roa (raw, json)
Hash identifier: v4hxG9/eDV05pt8qFpOVheOZJs0ehEmajsKsd5Fgmbc=
Subject key identifier: C4:10:A6:1C:34:1D:7C:77:B2:4F:38:64:94:77:DB:1C:0B:44:8D:A7
Certificate issuer: /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial: 019420681F43CF4F086E2EFAC40B75EE381B
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/xBCmHDQdfHeyTzhklHfbHAtEjac.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47957
IP address blocks: 91.208.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:1f:43:cf:4f:08:6e:2e:fa:c4:0b:75:ee:38:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c410a61c341d7c77b24f38649477db1c0b448da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:54:9d:ba:85:61:b4:72:f1:fc:33:0e:6e:
fe:5a:26:ed:45:62:91:71:3a:4e:8b:fe:99:04:f5:
cc:03:55:c9:0d:f9:a1:9d:92:67:d1:3e:1c:bc:9b:
65:2a:4e:dc:4f:ff:45:f3:ec:6c:c0:c6:ed:c0:29:
38:c8:67:ba:38:1c:7e:70:83:a9:41:53:1e:2f:7f:
84:02:75:45:1b:cc:b1:35:af:a3:72:cf:fc:31:0e:
09:cc:09:7a:89:5a:dd:da:1e:e6:a3:15:73:52:0e:
b2:d6:e4:68:cc:a0:22:ce:57:c0:1d:9c:c2:fc:7f:
f8:de:31:ff:a2:80:21:61:19:f3:a6:9d:d6:2c:34:
b1:50:6a:3b:8f:95:b4:ba:7d:a5:d8:16:bf:19:93:
df:61:1d:c8:1f:30:48:6b:4a:62:6c:e4:19:c1:39:
0d:65:1f:1c:fb:9a:24:14:1e:e6:0a:d0:63:f1:fa:
46:e7:e0:07:2d:34:8a:ec:78:69:c6:6c:54:2b:89:
f1:d1:f0:32:77:07:8f:0d:88:39:73:15:d3:ad:73:
10:cc:9e:24:a5:50:47:68:1a:05:a0:65:7b:b7:8d:
f5:73:8f:f0:69:7b:cd:2b:c3:85:ce:0e:31:90:b2:
2d:1e:7b:84:7d:42:57:c7:eb:d0:de:9a:bc:92:57:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:10:A6:1C:34:1D:7C:77:B2:4F:38:64:94:77:DB:1C:0B:44:8D:A7
X509v3 Authority Key Identifier:
keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/xBCmHDQdfHeyTzhklHfbHAtEjac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2f:60:fa:22:70:1b:1a:12:76:6e:23:81:07:7b:06:78:ce:
10:5a:7d:2d:18:35:7a:52:f5:54:6f:b8:42:8c:5e:e5:ee:95:
71:fd:36:13:89:60:c4:18:5b:cc:e5:35:d1:38:09:28:2f:e8:
28:44:fe:c8:63:34:fd:ef:4a:2a:d6:99:8b:25:2d:3f:88:06:
d9:2d:5b:36:7d:0f:70:37:91:e7:ba:8f:04:6c:9a:02:d5:29:
a5:f1:b4:5e:c1:a8:5b:5c:38:6c:20:56:9c:9f:af:ac:af:22:
ba:e0:17:eb:ac:29:0d:bf:55:26:75:a3:67:a6:62:1d:38:e6:
b6:7c:72:36:d6:0e:27:5f:99:b8:6f:17:df:94:b0:7d:d3:ef:
30:5e:c1:cc:b4:2d:11:ba:61:b5:6f:08:1d:6a:2c:74:e9:25:
ca:a6:32:29:43:90:a1:7b:b0:f5:be:10:7e:6d:1c:5b:60:99:
23:ca:ce:e7:9f:fe:f4:78:86:1e:2e:dd:7b:9c:0e:05:81:b6:
c6:ae:d3:a0:94:8a:05:e2:24:89:fb:0f:46:36:d3:ae:a8:01:
55:98:65:d8:aa:6a:fb:ed:de:26:e8:f0:b1:1c:35:27:ef:22:
7f:43:54:83:8f:ce:39:c4:f1:92:aa:0a:da:3b:da:d9:7f:55:
36:65:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:54:07 2025 by rpki-client