Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XHv2XVCaLlWTD4R5DLGOUz8nE00.roa
File: XHv2XVCaLlWTD4R5DLGOUz8nE00.roa (raw, json)
Hash identifier: 7RSl5T2fdhffYd6O3TNaO8kSPpr+S/D+lz5YuPjvJos=
Subject key identifier: 5C:7B:F6:5D:50:9A:2E:55:93:0F:84:79:0C:B1:8E:53:3F:27:13:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194A830051B5AA5C905A87B516183021141
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XHv2XVCaLlWTD4R5DLGOUz8nE00.roa
Signing time: Mon 27 Jan 2025 14:35:06 +0000
ROA not before: Mon 27 Jan 2025 14:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199959
IP address blocks: 45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:30:05:1b:5a:a5:c9:05:a8:7b:51:61:83:02:11:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 27 14:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c7bf65d509a2e55930f84790cb18e533f27134d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:a1:fc:14:ad:f4:29:58:97:bc:6f:a1:71:
9a:10:d0:df:a8:0e:86:fc:08:db:59:a2:bc:45:6b:
97:43:7c:ae:db:19:58:3e:22:4d:35:b7:43:4f:b6:
fc:c1:3d:3d:5e:1c:3f:30:c2:73:28:a6:bc:35:a2:
a6:fa:bf:92:a0:b6:27:a1:a0:ad:58:ed:99:1d:f0:
80:0e:b6:7c:23:02:57:76:b2:60:90:aa:5e:cb:35:
8c:78:38:77:7f:65:14:54:6d:98:31:e8:e6:49:ec:
66:00:93:f2:67:74:21:df:e8:5f:8e:53:72:6d:86:
20:49:18:f9:cd:14:bf:21:16:c2:ab:1f:78:44:5d:
c6:86:10:f8:9a:77:65:a3:e0:fc:c3:bd:f5:ae:e4:
1f:af:de:4d:d8:7e:1c:62:1a:50:3d:ef:41:12:e8:
99:6b:3b:1e:cd:00:70:b8:2f:39:bb:45:5e:77:2b:
ea:00:ad:6b:63:c4:33:56:9b:e5:11:27:37:46:44:
c5:a3:50:75:62:0f:fd:94:6f:5e:f9:c3:be:95:19:
fd:40:2a:d0:7b:66:1b:01:87:3d:9c:47:13:8f:c3:
65:c2:ae:f7:5c:a7:85:cf:45:96:44:e9:a8:4e:42:
57:90:c7:e6:b0:82:6d:d1:03:e5:34:21:b2:8c:f0:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7B:F6:5D:50:9A:2E:55:93:0F:84:79:0C:B1:8E:53:3F:27:13:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XHv2XVCaLlWTD4R5DLGOUz8nE00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.123.0/24
91.92.67.0/24
94.156.152.0/24
185.252.177.0/24
193.47.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:82:ee:73:36:bd:36:99:63:20:56:e6:a0:3e:39:6c:a1:31:
1f:c9:25:21:3e:22:53:22:3d:bc:19:da:ef:17:e5:ad:78:f6:
68:50:11:54:88:b5:3a:89:89:cf:5b:28:b4:b7:c1:a2:0e:d4:
65:9b:f8:5e:91:9b:bc:67:0e:2a:de:ac:64:96:e2:80:7f:77:
4d:ef:d1:2f:63:30:df:8e:a7:0b:68:19:d4:32:e0:89:25:f0:
3e:43:c1:9d:ac:d6:8d:41:db:5e:c8:f7:1d:21:33:93:04:e5:
50:63:09:01:72:35:aa:a3:5f:70:05:04:87:8f:05:4c:e7:e4:
23:c5:83:3f:32:c9:43:39:76:6a:7a:43:5a:66:38:52:a2:e8:
de:22:8d:6f:2b:0f:41:54:7b:fd:6a:b9:e5:8f:64:a9:93:60:
5c:9b:6c:60:18:5f:a7:01:77:ab:f2:0e:60:ae:61:d9:61:3c:
3d:97:59:9b:27:75:a9:50:fb:5c:e0:2b:cf:31:e4:12:a1:e3:
64:5f:bd:83:8b:83:85:fe:61:e6:10:e6:7f:a0:9f:75:5b:63:
0a:e9:fb:ee:12:1a:14:5b:33:52:38:1e:91:40:3d:4c:37:13:
83:63:40:ee:d8:b2:89:9f:f5:08:f2:9c:b7:85:1d:f7:fe:81:
b1:d3:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:33 2025 by rpki-client