Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/XCHPvb-EkH1zGNPsBprEZBKSmdE.roa
File: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (raw, json)
Hash identifier: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=
Subject key identifier: 5C:21:CF:BD:BF:84:90:7D:73:18:D3:EC:06:9A:C4:64:12:92:99:D1
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 0194258F400FED1DFE64C747B34B12FF1A03
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/XCHPvb-EkH1zGNPsBprEZBKSmdE.roa
Signing time: Thu 02 Jan 2025 05:48:52 +0000
ROA not before: Thu 02 Jan 2025 05:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204591
IP address blocks: 193.22.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:40:0f:ed:1d:fe:64:c7:47:b3:4b:12:ff:1a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: Jan 2 05:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c21cfbdbf84907d7318d3ec069ac464129299d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:f7:7b:f6:c8:48:bf:07:83:1c:ba:86:bd:
b9:97:6d:8c:e7:c8:20:c5:ad:7f:dc:89:7a:e8:3d:
cd:98:8a:56:1e:74:a9:33:0b:87:29:34:ca:9a:c5:
60:44:a5:ab:e5:4e:23:51:79:a1:95:4c:22:d6:4a:
9e:5f:ca:1d:b8:de:b2:63:a4:12:b7:04:16:96:24:
fd:87:92:3a:91:df:40:92:a7:ee:41:31:4d:f0:90:
97:ae:1b:35:1f:ab:9e:47:1f:92:71:7d:db:49:aa:
5e:81:f9:5c:ad:44:30:3e:9b:01:a5:20:78:fe:e4:
a5:b3:b8:49:37:f1:e2:19:a3:ab:93:19:2d:04:e6:
76:0a:4f:f0:d2:b5:aa:4c:17:b5:ce:ae:1e:a0:eb:
77:86:7e:a9:cf:03:fa:97:5a:f5:d1:0f:49:5a:e4:
3b:8a:c4:db:25:54:b5:af:77:83:ef:fb:b6:1a:ed:
47:90:2c:dd:f0:67:4d:49:6c:95:66:16:71:69:4c:
d0:74:b7:d5:94:12:fa:a3:0d:36:67:13:34:f4:94:
38:e8:8d:38:fd:16:53:37:07:47:89:6c:e8:1d:0b:
1d:bd:06:45:5e:99:6c:30:d7:ff:74:3e:c8:76:08:
ff:f2:e1:bd:57:90:b8:00:29:f1:2e:38:df:83:dc:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:21:CF:BD:BF:84:90:7D:73:18:D3:EC:06:9A:C4:64:12:92:99:D1
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/XCHPvb-EkH1zGNPsBprEZBKSmdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.232.0/22
Signature Algorithm: sha256WithRSAEncryption
04:d0:28:44:e1:65:b0:94:2d:f1:16:16:89:63:e2:30:9a:a0:
ad:c2:34:4c:3e:81:ee:65:9b:e7:1b:ad:17:0b:16:57:54:c9:
05:17:da:31:e4:69:82:b1:e3:ed:97:c8:c4:31:b4:4e:3d:5b:
c4:b3:ce:74:7a:2c:e4:16:fd:91:e4:8f:4c:3b:14:45:00:20:
71:a0:5a:a2:3c:e8:ba:48:1e:8e:e3:dd:79:ac:65:5b:fb:bf:
f9:7e:0a:a1:38:84:44:8c:6b:e1:5a:33:63:d1:92:be:f0:46:
14:b3:a1:89:6b:5b:ed:db:be:34:7a:cd:0c:ae:dd:72:b0:df:
00:ac:74:c8:6a:f6:b2:2b:4e:f2:1b:82:f2:ce:de:5c:b4:0d:
cf:af:f8:75:a5:e6:95:bd:1e:db:e2:cc:89:d1:40:fd:79:aa:
62:da:76:f8:42:f6:fc:93:05:9e:6a:e3:06:cd:94:d7:8c:60:
61:ae:6c:15:75:c8:45:09:7f:6b:60:50:31:0f:58:d6:52:e0:
8c:e2:f5:9b:e5:98:3e:91:88:cd:5a:c8:e1:c7:f2:6d:59:f2:
d0:3f:7a:32:28:e7:4d:67:d1:04:5c:0e:5b:73:3e:8a:50:ba:
05:ea:3a:5e:bb:1f:02:92:c3:bd:9e:8f:47:3f:1c:c9:3f:67:
0b:ea:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net