Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/icvpeXMS_uKCnWLkyn6UUzwB7s8.roa
File: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (raw, json)
Hash identifier: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=
Subject key identifier: 89:CB:E9:79:73:12:FE:E2:82:9D:62:E4:CA:7E:94:53:3C:01:EE:CF
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 019420D5B6CE11C282D9D7CFAAC2B51C1F6F
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/icvpeXMS_uKCnWLkyn6UUzwB7s8.roa
Signing time: Wed 01 Jan 2025 07:47:44 +0000
ROA not before: Wed 01 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206460
IP address blocks: 109.205.16.0/21 maxlen: 21
109.205.16.0/24 maxlen: 24
109.205.17.0/24 maxlen: 24
109.205.18.0/24 maxlen: 24
109.205.19.0/24 maxlen: 24
109.205.20.0/24 maxlen: 24
109.205.21.0/24 maxlen: 24
109.205.22.0/24 maxlen: 24
109.205.23.0/24 maxlen: 24
185.186.68.0/22 maxlen: 22
185.186.68.0/24 maxlen: 24
185.186.69.0/24 maxlen: 24
185.186.70.0/24 maxlen: 24
185.186.71.0/24 maxlen: 24
185.201.184.0/22 maxlen: 22
185.201.184.0/24 maxlen: 24
185.201.185.0/24 maxlen: 24
185.201.186.0/24 maxlen: 24
185.201.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b6:ce:11:c2:82:d9:d7:cf:aa:c2:b5:1c:1f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Jan 1 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89cbe9797312fee2829d62e4ca7e94533c01eecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:61:8c:73:11:1c:88:82:d8:01:85:88:35:
22:74:ce:e2:34:99:70:a7:a1:0f:6f:6a:5b:92:03:
87:40:30:f9:a5:36:a5:7e:71:1b:6a:12:35:e1:25:
13:b0:78:5c:ca:67:cb:ef:3e:e2:56:d3:a9:5a:7b:
f7:2b:63:22:38:db:0e:81:1e:fb:16:c8:6b:49:92:
4d:a0:54:b4:ba:89:c5:07:39:5e:11:2d:77:cc:53:
c6:04:b5:8e:ef:a9:88:14:3d:d5:f7:0c:fc:f3:2f:
af:50:94:f5:7f:59:71:34:91:42:73:d2:37:84:44:
31:91:fd:2d:b6:0c:71:d1:a4:89:29:bd:0d:f3:6a:
90:12:bc:79:6f:87:40:c5:5b:b8:fa:e8:b8:e5:08:
8c:69:53:42:a8:ff:b0:d9:6a:df:43:44:0c:b4:6b:
8e:bb:7f:79:16:e6:1f:3d:28:c6:ca:f0:4c:04:bc:
e0:af:15:10:f2:c1:05:2b:74:e3:ff:f0:99:ed:b9:
c3:38:12:3c:d6:2b:a6:e8:73:12:10:db:cc:3b:77:
37:40:83:61:22:74:a2:88:f4:2a:d1:b3:27:b9:14:
94:18:5d:95:55:0b:2e:2d:40:cc:01:41:6f:91:7f:
13:8f:5f:f8:94:31:7e:65:c5:de:67:c2:15:cb:12:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CB:E9:79:73:12:FE:E2:82:9D:62:E4:CA:7E:94:53:3C:01:EE:CF
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/icvpeXMS_uKCnWLkyn6UUzwB7s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.16.0/21
185.186.68.0/22
185.201.184.0/22
Signature Algorithm: sha256WithRSAEncryption
25:65:43:20:c6:b3:fd:59:3f:d6:fe:7f:bd:88:37:0a:d7:7f:
5a:25:da:6b:53:7f:b9:25:03:a6:42:d3:3d:86:92:a6:7c:06:
27:9b:0a:8a:e8:79:f6:03:42:7b:57:62:a8:7d:25:16:b4:04:
44:92:de:0c:d2:49:46:06:a5:d8:95:f2:f1:55:3f:e9:4a:42:
35:99:0b:72:49:b3:60:5c:b4:48:d5:cf:58:bd:53:f1:c3:43:
5c:c1:a2:71:aa:47:84:30:4e:94:24:84:9d:15:23:c0:1c:ae:
24:6b:3a:98:f4:10:54:4c:b5:96:9b:91:54:d4:04:42:36:ae:
d3:3e:64:c1:27:5f:db:8f:17:f8:5b:5b:4c:31:1e:24:6e:00:
a2:2d:b6:e4:96:ec:a0:39:82:08:cf:c7:87:96:49:15:ab:af:
9f:7b:52:ff:9e:14:5f:dc:4d:3c:e4:90:d4:7e:43:0a:d6:91:
04:e7:de:67:b2:ed:cc:e4:f1:e5:f1:29:53:ca:47:78:3c:6d:
6e:49:98:ac:8e:db:5c:33:98:1e:c7:e7:93:65:89:7d:b5:a3:
e6:1f:75:b5:6e:bd:c9:f5:d8:96:d1:b0:66:42:81:26:db:51:
b0:9f:56:86:61:a2:8e:59:33:dc:dd:97:60:9f:f5:67:d4:7b:
db:b7:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:43 2025 by rpki-client