Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa
File: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (raw, json)
Hash identifier: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=
Subject key identifier: C6:AD:F0:F1:6C:FF:84:E8:EA:2D:A8:05:46:1F:EB:52:9F:65:0B:03
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 0194282734BF9B7DFC479C5B789206228CE7
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa
Signing time: Thu 02 Jan 2025 17:54:05 +0000
ROA not before: Thu 02 Jan 2025 17:54:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41589
IP address blocks: 81.25.128.0/20 maxlen: 20
91.142.48.0/20 maxlen: 24
185.118.100.0/22 maxlen: 24
195.34.86.0/23 maxlen: 23
217.171.176.0/20 maxlen: 20
2a02:4d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:34:bf:9b:7d:fc:47:9c:5b:78:92:06:22:8c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Jan 2 17:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6adf0f16cff84e8ea2da805461feb529f650b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:1a:9c:6e:9a:2c:7a:19:e1:49:12:2d:68:
0a:5d:c8:bf:a5:ea:35:48:01:f4:2a:4f:d2:a7:4f:
d1:2c:d4:21:5a:15:3d:6f:f3:45:3a:de:46:62:d6:
3e:08:05:ef:48:36:78:11:6a:44:2e:66:ee:ab:f3:
f1:0a:96:76:d6:bc:79:76:c8:67:4f:19:bc:46:8c:
fa:8b:71:47:a9:7e:fb:7c:13:ee:d4:ad:4b:c0:60:
42:43:c0:1a:c5:f9:12:ed:cb:9e:1e:8b:fd:b0:f3:
55:f3:a5:b3:32:ef:fd:47:c6:27:35:d8:de:23:bd:
25:0e:3f:f8:1b:c2:f5:84:91:7b:75:70:d3:55:de:
7e:d1:b0:17:83:f8:f3:3c:17:06:04:27:b4:f8:03:
09:86:5b:69:6c:36:24:63:e0:b2:ae:9d:10:c6:e1:
7f:5c:cb:3e:77:a0:0e:9c:d1:f3:f6:de:99:e8:38:
58:29:42:03:90:cd:15:4d:44:e5:22:c0:e2:c3:6d:
00:71:22:4c:ca:06:88:87:d9:0e:1c:0b:cc:4d:63:
e3:6f:81:a8:a4:81:0d:c9:b7:95:b8:58:93:75:73:
45:b0:a2:12:8f:a0:16:a6:ec:70:a6:06:f7:e3:48:
1f:3e:27:79:ce:fe:9c:2b:fa:89:80:0f:02:52:d8:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AD:F0:F1:6C:FF:84:E8:EA:2D:A8:05:46:1F:EB:52:9F:65:0B:03
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.128.0/20
91.142.48.0/20
185.118.100.0/22
195.34.86.0/23
217.171.176.0/20
IPv6:
2a02:4d8::/32
Signature Algorithm: sha256WithRSAEncryption
42:47:0c:fa:bc:a5:43:15:87:d1:f9:19:3d:f1:28:7e:32:69:
f7:58:49:6c:1d:30:c3:53:39:a5:bd:fa:b5:16:28:76:a2:cb:
b9:52:26:94:81:16:d4:3b:95:53:17:4c:06:0e:4b:f2:62:4d:
47:e6:e6:bf:63:13:c3:5a:14:76:2b:bc:63:cc:a9:7e:06:e2:
52:a9:04:1c:2b:82:c1:1b:aa:f2:1c:5f:f0:d8:22:21:68:54:
c5:87:de:fe:31:25:53:2f:4b:82:28:3f:f6:81:17:1a:7d:37:
19:b6:79:c5:40:c5:09:df:fb:24:dc:8d:66:b6:96:29:fe:b2:
9e:44:34:59:6c:f3:c8:ec:c7:84:64:a8:76:2b:f3:b1:f6:e8:
94:18:86:8d:32:e8:75:27:89:2a:83:cb:b3:2e:c5:7c:c0:28:
4c:c8:4b:a3:1f:ea:41:f3:d8:32:19:b5:61:0c:79:7b:26:28:
c4:23:21:6f:ea:96:2f:c8:0c:2c:76:47:26:7d:1f:91:83:fe:
4a:60:5e:c9:5c:f4:12:16:ca:5c:cc:23:0e:ae:3f:f7:36:be:
0e:de:c7:ef:cc:4b:aa:2b:d8:7f:dd:87:47:50:47:ca:57:59:
6a:01:b3:bd:a6:49:7c:9f:cb:39:ae:97:c6:49:e7:c5:96:cd:
41:da:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:50 2025 by rpki-client