Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/XYTo8--GaI1zkSFfPzeY28AGPAA.roa
File: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (raw, json)
Hash identifier: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=
Subject key identifier: 5D:84:E8:F3:EF:86:68:8D:73:91:21:5F:3F:37:98:DB:C0:06:3C:00
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 01942143D9FAD98B1D2774A68253330EF418
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/XYTo8--GaI1zkSFfPzeY28AGPAA.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9100
IP address blocks: 193.247.208.0/24 maxlen: 24
193.247.209.0/24 maxlen: 24
193.247.210.0/24 maxlen: 24
193.247.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d9:fa:d9:8b:1d:27:74:a6:82:53:33:0e:f4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d84e8f3ef86688d7391215f3f3798dbc0063c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:33:aa:e0:f9:f3:07:92:58:f4:bc:45:87:
59:d2:3c:ef:89:ef:03:d8:e9:dc:b0:36:4d:80:42:
ca:ce:d9:dc:e6:86:1b:ee:59:73:ce:4b:57:59:95:
6a:1c:26:49:7c:07:3d:9c:65:d9:38:61:40:2f:1c:
d4:1e:8b:70:cd:42:48:3f:c8:0b:80:7f:1f:6c:90:
39:56:cc:6d:24:6f:c4:a9:7b:4d:aa:a1:5d:dc:d8:
2e:bd:c6:36:df:29:7d:15:6a:00:62:3a:3e:e0:6f:
36:a6:66:44:64:25:5d:11:3d:d9:70:f1:f5:4b:ce:
82:76:57:26:d4:fa:56:f8:ed:e7:31:91:48:66:45:
a6:1e:97:1c:a0:fa:b5:05:ec:fe:fd:8a:71:c0:ed:
0c:35:2e:c7:a5:3e:86:3e:75:2a:b1:80:1e:14:96:
98:64:c6:c1:5c:0a:58:d6:49:10:ff:7b:02:ae:9e:
29:4f:e7:7d:01:ab:37:dd:ed:30:94:c2:03:3a:42:
ea:2d:0e:1a:b3:85:58:9d:ad:2c:7b:4a:15:ef:e6:
92:ed:67:4a:10:5d:2f:d1:14:ce:1f:ff:99:67:0c:
50:00:6a:f0:db:a8:bf:22:ff:34:e0:4b:04:53:19:
2a:d1:71:01:9f:21:ec:d1:e7:44:0a:a8:ae:91:9d:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:84:E8:F3:EF:86:68:8D:73:91:21:5F:3F:37:98:DB:C0:06:3C:00
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/XYTo8--GaI1zkSFfPzeY28AGPAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.208.0/22
Signature Algorithm: sha256WithRSAEncryption
77:ae:7d:f9:df:a3:e7:7d:72:ab:46:e9:70:74:32:b8:95:c9:
33:4a:94:8c:3f:e1:a0:58:53:20:79:a4:c0:31:e1:66:c5:f6:
2f:50:f3:df:43:73:99:e1:5c:06:e4:f5:43:6e:28:d2:e3:d7:
5e:d0:44:08:fb:4f:7e:db:55:7a:61:e1:c2:ae:a2:d6:25:f9:
47:2a:23:57:eb:c7:a2:90:7f:13:4c:2b:dc:28:1f:fa:f8:a4:
5f:77:1b:39:eb:8a:4f:51:cb:38:cb:8b:97:fb:26:5b:43:87:
2f:08:28:69:8e:b1:55:ee:bf:b4:df:43:8f:6b:e0:0c:29:c7:
8f:7a:fc:4f:fd:41:9b:4e:79:66:70:e8:20:54:f5:30:84:4f:
7a:85:06:26:0b:bc:e9:b7:54:9f:71:de:f3:b6:d3:68:78:8e:
00:5d:66:b9:e3:75:8f:42:aa:5b:e3:ba:17:53:c5:96:d5:77:
99:0e:b0:4e:aa:12:c1:aa:3c:71:20:c6:0e:49:45:c0:77:de:
8f:72:41:67:75:2d:73:91:0b:89:a1:29:dc:02:f2:ca:4a:ae:
27:d4:ab:34:2e:08:05:0e:fb:5d:f2:13:84:48:d7:b8:12:a1:
79:49:27:18:1e:f8:ce:ab:f6:0e:47:7b:5e:ca:76:e4:52:ce:
de:dd:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net