Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/xp6MNRTZ7ifDhsOs42_iuvQQ0p0.roa
File: xp6MNRTZ7ifDhsOs42_iuvQQ0p0.roa (raw, json)
Hash identifier: YfTq4WUGhOngnSjNPmT2KUv9TWH0pWquUAJ4huZy0Xg=
Subject key identifier: C6:9E:8C:35:14:D9:EE:27:C3:86:C3:AC:E3:6F:E2:BA:F4:10:D2:9D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 01942521719C7C7092912B7153EFCF3D11C5
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/xp6MNRTZ7ifDhsOs42_iuvQQ0p0.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199290
IP address blocks: 185.79.4.0/22 maxlen: 24
185.196.16.0/22 maxlen: 24
185.241.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:71:9c:7c:70:92:91:2b:71:53:ef:cf:3d:11:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c69e8c3514d9ee27c386c3ace36fe2baf410d29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:7b:5c:06:7d:bc:a2:eb:47:93:95:e4:86:
51:2c:81:0c:b6:dc:52:67:20:61:14:03:86:aa:16:
14:c9:ef:44:61:4d:d7:cd:43:31:13:50:a3:87:c3:
5c:59:1c:5a:59:5a:b5:81:f7:56:d8:ac:6e:e8:e6:
cc:67:c4:fd:c9:6f:59:f7:01:6e:eb:3c:f1:a0:52:
ed:a6:55:e6:8c:a5:18:3f:83:ad:69:29:6f:f9:d4:
ea:7f:e0:41:58:97:a1:70:c7:da:2a:45:ba:0a:a9:
26:6f:83:31:24:6e:04:3a:2f:f9:77:3d:ab:7b:e8:
c4:d5:30:c1:f4:54:29:b5:06:1f:08:36:08:88:ac:
45:36:4c:83:23:1e:3d:c0:05:95:35:6b:6a:06:2c:
97:ac:8a:a1:c1:b8:c4:f2:48:c8:c2:dd:13:4a:55:
e1:e2:f5:19:06:09:e4:96:77:b0:32:57:21:f2:a3:
2d:c3:0d:a4:9d:72:18:90:1e:17:09:b3:ce:1a:3e:
7f:61:33:f3:e9:f8:80:1e:2f:ed:55:3c:d2:13:d5:
c3:dd:6a:8f:56:88:6e:ff:84:e1:01:93:ce:60:68:
56:48:6b:58:ee:45:70:68:06:ca:fa:b7:d5:af:af:
24:be:59:b0:10:bd:7b:47:d8:95:87:7a:0c:0c:84:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9E:8C:35:14:D9:EE:27:C3:86:C3:AC:E3:6F:E2:BA:F4:10:D2:9D
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/xp6MNRTZ7ifDhsOs42_iuvQQ0p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.4.0/22
185.196.16.0/22
185.241.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:d0:69:b7:26:f4:cb:ba:1e:fe:cf:c4:31:3d:74:79:b5:3f:
c1:11:48:7b:a4:53:78:91:2f:dd:f1:d6:73:93:6f:67:8f:ee:
e6:e3:97:b3:22:0e:83:68:f5:25:13:fe:0a:32:e5:15:aa:6b:
85:c2:92:c4:3f:da:95:72:ca:b3:5c:1a:c7:b0:d7:c4:48:1c:
ad:62:ae:95:34:27:b4:58:f4:4d:23:66:e7:26:97:bf:52:e6:
ca:b5:65:ba:cd:f2:86:3b:3b:7f:17:97:1c:3a:f3:c9:27:45:
f7:a6:86:99:c7:45:ca:af:1a:d4:b5:f5:e1:1a:6f:27:3b:63:
b8:3d:d0:b5:d2:7e:38:fb:bd:2c:63:42:c8:c7:6c:79:4a:48:
ff:d6:15:a7:b6:9e:4b:c9:49:ae:d8:f1:61:80:79:93:88:c0:
08:38:26:b2:58:d8:f5:89:9b:2f:4d:1a:15:25:e6:4f:c8:51:
e3:da:3b:c0:f3:a6:cc:7d:57:9d:1f:a6:ea:16:db:ac:d7:64:
86:80:11:26:ea:49:36:20:81:5a:38:67:5c:6e:2a:21:b0:e6:
b5:84:3d:6e:cf:f0:47:65:fd:35:a9:52:e3:1c:8b:46:3f:5d:
4f:ed:ca:a2:1a:33:df:db:40:e2:59:0d:b6:e7:c3:31:96:d3:
e7:f7:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:13 2025 by rpki-client