Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/xbbxTo9rn50nwhGlFUGMbwhSzbo.roa
File: xbbxTo9rn50nwhGlFUGMbwhSzbo.roa (raw, json)
Hash identifier: zFleJFRgd2evTBBfHWP3ENqdzORcbjMKg0D2r2qzukQ=
Subject key identifier: C5:B6:F1:4E:8F:6B:9F:9D:27:C2:11:A5:15:41:8C:6F:08:52:CD:BA
Certificate issuer: /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial: 01942143A2DCD287320DB4E59E661F5FA08D
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/xbbxTo9rn50nwhGlFUGMbwhSzbo.roa
Signing time: Wed 01 Jan 2025 09:47:48 +0000
ROA not before: Wed 01 Jan 2025 09:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212536
IP address blocks: 194.8.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a2:dc:d2:87:32:0d:b4:e5:9e:66:1f:5f:a0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
Validity
Not Before: Jan 1 09:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5b6f14e8f6b9f9d27c211a515418c6f0852cdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:f7:a4:2f:45:3f:fe:1c:75:f0:10:fa:d5:
27:12:d2:8b:70:ef:5a:82:3f:c7:cd:ab:ad:3e:c4:
60:36:f9:bd:9e:40:7f:18:84:39:03:fa:84:61:44:
6e:c3:62:6c:47:f7:e7:64:60:be:b6:fa:30:4f:a6:
b1:84:7b:d6:30:62:0c:01:9e:5c:82:ec:5a:39:7d:
30:f6:8c:f3:d9:c8:bc:d3:cd:4a:5d:c6:1a:d6:28:
19:4d:41:12:9d:9e:20:ca:90:60:1d:08:a8:a0:c0:
fa:44:ca:a6:4d:56:3b:0f:7c:44:9e:27:64:64:b0:
83:fe:aa:ce:32:66:c6:c4:ce:c8:13:fa:53:c5:11:
a6:81:4f:b4:d4:e8:f6:c5:66:4d:e5:04:c6:17:3a:
4b:12:c9:57:42:b2:a5:59:17:ac:ee:46:4d:04:0c:
52:b3:4b:ef:65:ba:27:cd:3c:7f:5c:b3:c3:9d:13:
92:30:5e:35:f2:93:c5:a8:73:58:d8:5d:bc:19:42:
16:f7:40:bb:1d:5f:39:d6:c1:93:64:39:b7:16:a4:
20:a9:f6:3f:2d:ef:32:d9:cc:32:78:bf:58:9c:47:
9f:91:54:1e:6c:bf:06:ce:bf:18:9d:ea:6f:0e:2a:
3d:29:87:74:af:29:3c:e0:a7:ef:9c:8b:02:99:6d:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B6:F1:4E:8F:6B:9F:9D:27:C2:11:A5:15:41:8C:6F:08:52:CD:BA
X509v3 Authority Key Identifier:
keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/xbbxTo9rn50nwhGlFUGMbwhSzbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.74.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4a:42:fa:17:df:25:17:81:b2:15:ca:0f:e9:92:74:b7:c5:
02:78:a0:dd:66:e8:2a:31:eb:fc:6b:17:d4:96:93:04:2c:38:
3f:5b:1e:42:2a:f1:f8:c2:45:21:4d:98:68:7d:a7:36:2c:3f:
b1:de:00:f8:c6:16:5f:38:b1:ac:cb:f3:4b:58:22:06:7c:b1:
17:1c:b0:4c:90:d4:3f:f6:39:38:e1:be:25:2c:82:2f:d2:ec:
28:d8:66:ae:84:f9:eb:ae:88:1c:1e:23:c4:6b:f2:74:d9:ac:
fe:16:a6:63:f2:8b:d3:20:03:e8:dc:73:4e:fd:f2:b1:b3:c6:
6a:ff:60:2f:35:2d:54:10:c1:c2:c0:c3:6b:c1:8f:d7:76:9c:
02:4a:99:0b:79:ee:3b:83:3c:87:c9:29:b3:30:e4:61:f9:e6:
2b:33:7a:fb:cb:f9:56:86:02:f3:05:ab:76:a4:6c:0b:ee:20:
da:49:9e:a5:24:69:5b:df:3e:73:b8:55:af:66:5a:16:f6:8f:
87:b0:d0:d7:c2:52:b6:80:d5:eb:2f:14:94:d9:ef:60:c6:e7:
f0:f8:d7:d4:47:22:57:60:7d:f9:88:83:8f:04:95:a7:db:d8:
f2:7a:fe:18:d9:43:c2:67:b5:45:89:f4:94:b1:fa:ed:63:12:
8a:d5:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net