Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/Xm1AhSsg2vOubYaeD1ITPvBz9bg.roa
File: Xm1AhSsg2vOubYaeD1ITPvBz9bg.roa (raw, json)
Hash identifier: qfuDRPdUSZ0Gbwdt+mKtq21NPHCDyPYaQ94U3NymPdM=
Subject key identifier: 5E:6D:40:85:2B:20:DA:F3:AE:6D:86:9E:0F:52:13:3E:F0:73:F5:B8
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563FDD22DEF362915DB6BE657168076
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/Xm1AhSsg2vOubYaeD1ITPvBz9bg.roa
Signing time: Thu 15 Aug 2024 09:35:02 +0000
ROA not before: Thu 15 Aug 2024 09:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44940
IP address blocks: 193.41.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:fd:d2:2d:ef:36:29:15:db:6b:e6:57:16:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e6d40852b20daf3ae6d869e0f52133ef073f5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:6e:4c:a5:2a:38:26:63:95:80:2f:7a:a7:
37:c7:0a:79:b9:33:ca:9e:f8:d9:ba:3d:aa:03:f2:
ca:71:33:4b:1b:42:0f:8a:77:c5:7a:15:8d:97:58:
1e:84:1d:d4:a3:5f:b9:b6:f1:b7:84:b8:cc:49:4f:
48:1c:d8:04:30:0b:21:08:b7:50:34:7a:d3:5f:21:
c1:db:e5:db:6c:68:5c:18:cd:42:60:ee:ee:85:b0:
0c:b1:9a:14:5e:b5:6f:9f:d6:fa:8d:49:5c:cc:d0:
64:50:97:a0:1e:7b:e6:ff:42:5d:87:1f:48:d6:88:
13:c2:b5:1a:c5:cf:95:dc:4a:18:f4:76:0c:2c:5f:
48:f8:18:91:58:e3:90:57:e9:70:9b:ed:82:83:0e:
58:cf:3d:5a:33:fb:f8:4f:3e:78:b1:1c:a0:0c:c9:
d9:94:19:b8:70:d0:d8:fc:e6:db:a7:70:0a:94:bb:
e7:61:80:a8:eb:eb:7f:8b:88:42:66:fa:e2:34:54:
af:56:4a:bb:2c:fd:24:bd:ba:b9:9f:5a:a2:8d:45:
39:0b:60:34:2b:2a:f2:c1:64:15:75:d1:bc:10:ae:
fa:15:e0:d8:c2:18:d0:44:b9:86:11:bc:c7:34:19:
8b:9e:0f:80:3c:8d:c7:71:eb:24:e4:a5:c2:12:8b:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6D:40:85:2B:20:DA:F3:AE:6D:86:9E:0F:52:13:3E:F0:73:F5:B8
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/Xm1AhSsg2vOubYaeD1ITPvBz9bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.104.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d7:e9:96:8d:4e:94:70:51:a6:db:7c:b0:64:d3:9b:f3:3a:
f2:bd:e0:df:cb:26:18:6d:1f:be:00:ad:63:dc:d0:8e:a2:48:
41:f6:aa:44:0f:4c:53:df:36:47:a0:26:59:cb:1f:5a:90:e5:
19:65:1f:3e:b1:c1:bc:b6:58:86:59:7a:c4:c2:b5:04:3b:b8:
a6:ec:b4:40:a5:09:11:bd:25:fd:7e:26:d2:20:c8:d0:e7:6d:
51:6d:3f:90:eb:1b:fe:04:99:73:62:bd:55:32:38:1e:1f:92:
fd:24:32:fa:b9:49:78:7c:01:ff:e6:30:bd:86:78:b4:6d:c8:
20:4f:bd:d7:06:1b:4a:7a:c2:fa:cf:d9:ee:b4:f8:72:53:69:
8f:64:59:ac:2e:88:a7:b0:40:a3:72:87:9d:f3:19:5f:b6:e8:
e9:21:c6:0f:67:a1:f2:b6:f6:fc:8d:e2:86:bd:94:be:d8:f1:
95:1b:8b:d0:c4:c3:22:f7:c8:eb:b9:bc:30:3f:1e:2d:de:27:
00:6f:7c:f0:2c:34:3e:52:a8:16:f0:75:29:10:f6:b4:fd:40:
43:f7:77:a1:86:6e:bf:45:30:0f:75:7f:66:bb:58:e3:f2:00:
64:b3:e4:a4:1e:c4:cf:a5:ca:14:14:b5:90:7a:05:cf:1f:b3:
6d:41:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:17:43 2025 by rpki-client