Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/xQvw96YsBggpZWCMaHwX9DtK_i8.roa
File: xQvw96YsBggpZWCMaHwX9DtK_i8.roa (raw, json)
Hash identifier: IyrcXeoQh+atYLYkLXH6rE0dL5Be39eF+FzxQzEG5Cs=
Subject key identifier: C5:0B:F0:F7:A6:2C:06:08:29:65:60:8C:68:7C:17:F4:3B:4A:FE:2F
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 01941FFA3606190E283A592EDE517382519A
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/xQvw96YsBggpZWCMaHwX9DtK_i8.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57256
IP address blocks: 193.30.96.0/24 maxlen: 24
193.30.97.0/24 maxlen: 24
193.30.98.0/24 maxlen: 24
193.30.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:36:06:19:0e:28:3a:59:2e:de:51:73:82:51:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c50bf0f7a62c06082965608c687c17f43b4afe2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:2f:06:34:fa:c6:6b:00:8b:de:f1:5a:51:
c8:fe:48:7d:eb:d6:1c:0b:1a:51:c9:af:58:23:b7:
17:6c:1e:f9:c4:cc:e0:f1:5c:9b:1f:03:f2:4b:99:
e4:f0:f8:f8:6d:5f:4d:57:e5:8f:b8:cc:b3:69:4d:
fe:52:a2:29:5c:a5:c8:c2:d5:1e:ad:70:a8:3f:51:
76:df:36:d3:a3:cd:00:1f:84:fe:c2:80:06:ed:7c:
01:b6:be:2f:51:b1:90:2b:ba:cb:1c:4c:bd:73:66:
99:74:ca:05:86:ce:70:d5:31:83:c1:6d:53:80:25:
23:5a:89:fb:d9:fd:08:d4:b6:ed:7c:dc:4f:6e:23:
fd:07:6c:e5:cf:37:d7:66:18:ce:6e:fd:f6:75:02:
f8:8c:1d:4a:8c:0d:d1:7c:6c:34:d3:57:fa:2c:2c:
60:b4:8e:52:48:cc:e2:4c:dc:3c:40:1f:9d:d2:0a:
1e:ae:cc:5e:c1:64:96:d6:db:3a:26:ed:45:06:7a:
e4:b8:fa:ec:37:06:75:e5:4f:28:49:14:d6:5b:a2:
8f:48:7f:04:4b:1d:3c:3d:eb:56:61:87:5f:36:de:
0d:f9:a3:de:84:a3:5f:75:fb:73:d6:39:01:3a:7e:
4c:43:80:87:84:7e:0b:ab:47:44:06:5d:14:b3:32:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:F0:F7:A6:2C:06:08:29:65:60:8C:68:7C:17:F4:3B:4A:FE:2F
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/xQvw96YsBggpZWCMaHwX9DtK_i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.96.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:62:fa:a1:d1:9f:52:6d:60:09:d2:2c:94:e5:ab:6b:50:a4:
c3:7e:28:28:c9:99:1e:0d:d9:a1:2c:92:86:50:6b:47:a8:80:
0f:55:cf:a7:2a:e4:18:2c:52:54:bc:47:a9:93:39:51:1d:6c:
1d:85:3d:d5:10:c6:2f:9d:55:1a:7e:05:f4:7d:93:97:c1:b5:
e9:9e:f9:b7:17:05:ae:00:f0:bd:65:a8:40:25:d4:43:c9:b9:
7a:7a:29:66:30:98:3b:69:e3:69:46:10:00:67:dd:f3:17:96:
90:70:07:30:b9:e9:56:07:f0:e2:e8:ac:41:6e:fa:af:51:38:
e7:fe:42:d4:86:e1:b4:3c:63:49:40:fe:9f:16:a1:97:05:42:
c0:3b:8d:44:98:dd:15:c6:7b:8d:35:99:7f:19:b7:45:97:e1:
8e:77:66:03:db:e0:a1:f4:1a:ab:a5:4e:88:31:c1:de:49:5a:
5a:8f:9f:b2:62:7f:33:47:79:90:17:ce:4b:09:00:6b:42:01:
89:7c:21:8a:4e:3d:0d:e3:77:0e:0e:ec:0c:e0:8e:0d:b4:42:
b3:69:0d:5e:c6:b2:68:1b:cd:ae:09:85:64:33:1d:a8:fc:3e:
76:2a:a7:61:73:3e:12:14:13:98:22:d9:d8:27:9c:da:6f:1a:
40:7d:02:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:10:04 2025 by rpki-client on console.sobornost.net