Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa
File: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (raw, json)
Hash identifier: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=
Subject key identifier: C7:0B:4F:19:2D:72:31:E3:7E:1C:CD:C3:1D:9E:19:9F:5B:DA:83:B6
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 0194266B314711619F46B34D6F6AEBDEAAA4
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29266
IP address blocks: 159.20.0.0/21 maxlen: 21
195.85.253.0/24 maxlen: 24
195.137.194.0/23 maxlen: 23
2a03:2180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:31:47:11:61:9f:46:b3:4d:6f:6a:eb:de:aa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c70b4f192d7231e37e1ccdc31d9e199f5bda83b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:93:9d:88:ad:af:8a:b4:67:d6:e8:fd:9c:
7c:e6:79:6f:81:1d:f2:1f:86:df:37:6b:95:0e:9b:
1a:8d:25:94:a6:07:39:fa:95:9f:25:4b:94:e2:aa:
12:60:19:fb:e3:e1:a1:a7:9c:f8:7f:32:83:a9:8f:
3d:28:52:d3:db:ad:36:0d:4c:b8:a0:b1:30:11:a6:
03:b3:c4:a0:48:95:be:a4:16:03:f3:90:7e:f8:e4:
d4:91:c9:c2:6b:60:ac:52:37:64:db:d5:4d:fe:e1:
77:00:3a:e7:80:99:e8:b8:ab:0f:48:17:f1:40:d6:
50:47:bc:f5:3f:d2:6b:79:fe:4e:d4:8c:7a:86:40:
4e:4b:fd:d6:da:7a:05:f9:c4:27:07:43:b3:e8:de:
7c:75:0d:29:1f:25:39:e2:a4:5f:ea:82:29:fc:f4:
d9:20:d5:59:81:f9:e4:9a:71:e3:04:85:9d:74:46:
a0:15:ab:51:04:8a:f3:36:e8:cb:66:96:29:b5:1e:
56:68:36:8a:13:ff:36:d0:60:32:6d:8c:e3:b9:c3:
be:05:6d:6e:00:e7:a7:11:9a:d1:8b:3b:73:3e:d1:
d1:bf:31:5c:02:42:9f:09:8e:cc:39:b9:ea:46:e1:
b8:c6:aa:04:a9:f3:1d:18:6c:d0:d8:ef:f9:81:f0:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0B:4F:19:2D:72:31:E3:7E:1C:CD:C3:1D:9E:19:9F:5B:DA:83:B6
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.20.0.0/21
195.85.253.0/24
195.137.194.0/23
IPv6:
2a03:2180::/32
Signature Algorithm: sha256WithRSAEncryption
95:8f:6e:5f:da:51:4a:8d:4e:7f:1a:21:3f:97:4f:23:cd:e3:
b2:34:8e:bd:b2:84:cb:18:d6:e3:f2:d7:f9:b4:f8:68:5e:58:
df:8d:0d:8b:65:e7:2e:fb:44:01:22:e1:77:07:b4:c8:45:30:
1f:f5:45:ac:60:0c:11:e7:1d:44:32:20:3b:55:de:55:88:43:
66:9c:1f:f5:6e:81:02:c8:a0:cb:54:ac:6e:be:cb:98:52:cf:
15:d7:ed:66:62:a2:db:a3:7c:82:d5:f8:c0:27:b1:50:94:4c:
f9:2c:cd:c2:da:75:89:32:78:fc:43:27:23:95:44:69:79:05:
a5:f8:bb:7b:e9:f8:fa:f6:9a:2b:0c:7a:95:6a:b9:e6:27:32:
a7:3b:3c:c0:2c:78:21:f4:93:1a:bd:47:68:ae:82:08:f9:8c:
c8:1e:d1:e0:b2:49:e9:fb:bb:9c:f8:5b:36:55:ee:99:1e:e1:
08:7f:67:34:8e:5f:ac:4e:3a:0b:15:d0:88:fa:f2:21:49:25:
5b:0b:eb:d0:0c:7e:98:2a:b9:c0:8d:ef:ff:93:18:96:0f:05:
2e:97:3d:b1:d2:90:35:c3:8b:fc:cb:01:80:54:d9:4c:a9:3f:
36:14:8c:5a:6f:b9:80:34:2b:aa:43:bb:53:7b:7b:eb:c0:3c:
34:f3:e0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:49 2025 by rpki-client