Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/xcgrVEVNR034pAL11nSBol-inkQ.roa
File: xcgrVEVNR034pAL11nSBol-inkQ.roa (raw, json)
Hash identifier: xuXfwqL3OUFa929810oL2hj0wfesNWI/08xrLmyOytY=
Subject key identifier: C5:C8:2B:54:45:4D:47:4D:F8:A4:02:F5:D6:74:81:A2:5F:A2:9E:44
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F9CAAB7C2ACA22AAC844C7684DD4
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/xcgrVEVNR034pAL11nSBol-inkQ.roa
Signing time: Thu 15 Aug 2024 09:35:00 +0000
ROA not before: Thu 15 Aug 2024 09:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20492
IP address blocks: 193.149.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f9:ca:ab:7c:2a:ca:22:aa:c8:44:c7:68:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c82b54454d474df8a402f5d67481a25fa29e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:de:ad:85:c6:00:a1:fa:bc:15:66:13:de:
0f:4e:a3:be:6b:36:ae:36:f7:c3:1f:21:34:db:18:
04:ce:91:f8:44:c7:0b:a7:75:66:68:28:26:b0:f8:
50:f6:d1:18:1f:5b:d8:2a:90:7c:23:3b:bd:64:78:
32:99:77:18:72:af:dc:a2:81:8b:02:b6:59:6d:f5:
79:9c:ff:d3:d8:4c:14:29:08:32:6d:dd:12:88:7b:
7d:8b:6f:fc:8d:41:3a:62:90:9a:f2:cf:82:0f:6c:
cb:8e:68:fd:7c:e5:b7:96:b8:a1:d4:f8:f5:e7:9b:
6a:a4:09:00:b3:3c:c1:9c:96:5c:ce:ef:ce:32:3a:
a4:32:fa:c3:46:5d:15:0f:2f:b3:8b:40:5a:c9:62:
06:32:f2:8a:5a:0f:76:0b:f6:b4:2c:b0:45:5a:73:
8d:24:36:17:ef:cf:64:7f:4d:4e:22:e7:e6:b7:2c:
2c:1f:63:f3:4f:54:7d:29:5e:c6:10:cb:94:4d:58:
10:a9:84:b1:de:38:c3:68:be:54:d8:0e:b3:0e:70:
0f:80:ea:83:d9:90:61:94:5e:aa:39:1f:f5:2a:ea:
34:4e:8a:0c:93:bd:7f:18:97:b8:58:17:88:d6:11:
9b:27:11:6a:00:2c:ea:2b:c7:f7:58:be:a6:26:1c:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:2B:54:45:4D:47:4D:F8:A4:02:F5:D6:74:81:A2:5F:A2:9E:44
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/xcgrVEVNR034pAL11nSBol-inkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.193.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e6:6f:c2:56:d1:9d:31:16:9e:49:71:0d:ae:41:bb:8f:bd:
3d:4a:ba:4d:7f:30:46:b3:26:fb:0f:dc:77:1c:ae:7d:1f:53:
5c:3e:bf:84:93:cb:6e:38:43:7e:14:bb:8e:9d:af:43:cb:55:
22:9f:7a:37:b3:a1:f4:de:ce:d5:be:f9:6e:1d:4f:98:0e:23:
22:aa:dc:c0:3e:c4:e0:c7:f3:a0:e8:f4:50:c4:3b:cd:6c:3d:
8c:57:cb:ec:97:22:a9:7b:e2:18:0f:21:36:d3:6f:8b:ef:2b:
cb:a9:77:3a:3a:77:cf:4b:8a:55:9c:24:12:e7:73:ea:37:b6:
a1:96:a2:13:5c:54:e1:60:49:5c:78:11:d4:1e:89:03:4f:2a:
e9:ba:c1:24:1d:27:ba:44:a4:8a:c2:d4:ed:ed:33:30:d8:83:
52:a7:75:3b:68:bc:5d:81:b2:e9:10:a3:d4:8f:f0:09:b4:26:
b4:cb:44:1c:81:5f:61:b8:5b:33:5f:57:88:c1:1c:80:50:a8:
e0:4a:e3:b5:91:e0:15:2d:0f:81:96:cf:37:a2:90:40:40:0b:
fd:8a:a1:ee:31:3d:16:76:26:12:8e:b8:80:9d:f7:67:5a:a7:
1f:b7:54:2e:21:d9:bf:8f:b5:92:c7:7b:d7:b8:4f:d0:bd:3e:
33:f6:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:26:01 2025 by rpki-client