Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/XTDP1iTUwbl9_VNfprJ5-b7FccA.roa
File: XTDP1iTUwbl9_VNfprJ5-b7FccA.roa (raw, json)
Hash identifier: hbFvA3zrQD4+sz6PohvBqA8EDsczFtls3uDWYkBAdIA=
Subject key identifier: 5D:30:CF:D6:24:D4:C1:B9:7D:FD:53:5F:A6:B2:79:F9:BE:C5:71:C0
Certificate issuer: /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial: 01857042ABD61546A732A5A47740238DD0FB
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/XTDP1iTUwbl9_VNfprJ5-b7FccA.roa
Signing time: Mon 02 Jan 2023 02:14:55 +0000
ROA not before: Mon 02 Jan 2023 02:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57747
IP address blocks: 188.227.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:ab:d6:15:46:a7:32:a5:a4:77:40:23:8d:d0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Validity
Not Before: Jan 2 02:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d30cfd624d4c1b97dfd535fa6b279f9bec571c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:fa:60:56:85:be:14:a7:9e:7c:74:6b:e0:
16:b1:6a:4f:c6:e4:69:1c:3a:23:54:15:22:5b:bb:
fb:dd:56:eb:70:6b:e3:59:19:0e:bc:d4:70:0a:01:
b4:05:29:7c:73:1e:2f:5b:22:09:c6:33:e8:b7:a9:
94:0e:25:02:b6:35:b3:94:a2:b6:0a:07:48:c7:50:
cb:ef:bf:e2:69:6a:ba:63:00:32:a1:62:1c:1a:68:
82:63:4a:46:26:6f:e6:d9:0c:1b:47:26:14:24:37:
6a:21:55:d4:3b:e6:08:07:7c:af:20:1c:72:ad:93:
d6:fd:e6:0b:b1:4f:e9:6b:a4:c7:8a:41:bb:91:06:
ed:7f:f9:84:d8:c3:dd:34:2d:bc:4c:28:09:c7:d0:
a5:f6:43:8d:27:1b:6d:2d:a0:16:78:80:03:e8:ec:
6a:93:b6:30:6c:ed:a7:27:0a:f8:e9:00:f7:70:8a:
14:a2:44:38:f0:c9:f5:a2:b9:87:b4:33:f9:d7:77:
19:53:af:b3:16:52:2a:af:55:08:98:92:5a:7e:d4:
4f:91:82:24:40:04:1c:e3:6b:d3:cb:dc:f1:31:11:
fe:5c:70:6f:a7:c9:2f:cb:ac:e1:c0:9d:43:68:41:
3f:a1:8d:7d:24:05:9c:09:8b:07:06:42:e7:11:64:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:30:CF:D6:24:D4:C1:B9:7D:FD:53:5F:A6:B2:79:F9:BE:C5:71:C0
X509v3 Authority Key Identifier:
keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/XTDP1iTUwbl9_VNfprJ5-b7FccA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.228.0/23
Signature Algorithm: sha256WithRSAEncryption
47:b9:f5:9a:87:50:68:4c:64:01:26:ab:46:f2:6c:45:60:27:
90:f9:6c:47:af:b1:7b:f5:95:67:6a:2e:5e:76:f9:e9:62:98:
94:e3:e6:5a:e0:fe:bb:5b:9b:de:b7:69:d8:fc:38:5a:80:6e:
21:ce:40:b0:43:12:4f:1c:31:43:d0:db:51:50:73:ad:3a:31:
5d:e1:0f:35:31:53:c0:d1:1a:50:bb:b4:09:88:88:0b:d8:67:
f3:6a:e8:8a:2a:67:ba:0e:16:6f:ed:65:40:b6:aa:58:94:79:
8e:ca:92:45:e9:5a:35:7c:8f:5f:94:c1:a7:c2:d3:dc:6a:86:
04:14:3e:8f:67:18:9f:64:ba:91:35:fc:73:33:18:fd:b0:ab:
b1:69:96:55:53:de:f7:e5:f6:f3:1a:16:18:be:70:e0:48:4b:
2b:91:ee:c6:ff:cb:9c:98:4b:5f:17:14:90:4f:b8:3c:9a:07:
38:86:a5:27:99:3c:3e:74:34:3b:d2:77:8e:94:44:8a:b5:5a:
e9:63:c5:b8:73:5b:a8:ab:41:84:88:ef:8a:16:43:2e:27:89:
06:65:f0:61:33:ec:bf:56:79:73:97:08:64:f8:ab:0c:70:b5:
f5:7f:58:47:af:b7:c2:6d:59:ca:48:b1:c0:a2:34:93:aa:c7:
29:fc:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:24:05 2025 by rpki-client