Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/xspPEiEQGiUUjQNMRrR4LTirJ8g.roa
File: xspPEiEQGiUUjQNMRrR4LTirJ8g.roa (raw, json)
Hash identifier: ij24ceO8VLn5TPnpgS1+UFG8iPy5YqTgJqLC4WCf/eM=
Subject key identifier: C6:CA:4F:12:21:10:1A:25:14:8D:03:4C:46:B4:78:2D:38:AB:27:C8
Certificate issuer: /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial: 0194266C13D9A87B7346E31C06406905CBB0
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/xspPEiEQGiUUjQNMRrR4LTirJ8g.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206720
IP address blocks: 185.187.244.0/24 maxlen: 24
185.187.245.0/24 maxlen: 24
185.187.246.0/24 maxlen: 24
185.187.247.0/24 maxlen: 24
193.56.32.0/24 maxlen: 24
193.56.35.0/24 maxlen: 24
193.56.36.0/24 maxlen: 24
193.56.39.0/24 maxlen: 24
193.56.40.0/24 maxlen: 24
193.56.44.0/24 maxlen: 24
193.56.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:13:d9:a8:7b:73:46:e3:1c:06:40:69:05:cb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6ca4f1221101a25148d034c46b4782d38ab27c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:89:14:db:35:77:be:b6:f4:2c:34:af:14:
aa:4d:e4:f5:24:21:1e:17:d5:f7:3d:56:d1:c8:25:
31:f3:43:60:42:df:9d:12:db:6d:0c:85:94:bd:ae:
bd:1e:b1:bc:84:af:a8:fe:bd:8c:fd:92:e4:04:37:
c0:db:04:fb:87:7d:21:21:b8:bf:1e:f5:4c:79:58:
33:d5:78:6a:f4:8f:c5:39:e3:55:ce:ba:55:83:20:
e6:2f:2a:05:74:6c:2e:82:3c:4a:e2:29:75:49:57:
b6:97:9d:06:e4:a8:4f:d6:7c:ab:87:58:43:3e:fa:
db:66:85:2f:2b:2d:4e:b2:d5:c6:2a:d6:a7:ef:02:
9f:22:58:10:7e:ee:bf:30:da:08:9e:51:eb:bf:96:
8f:dd:d5:29:30:5b:57:2d:02:6d:d8:88:53:87:2b:
fd:8c:af:e8:da:05:e5:4c:b0:6a:44:de:36:d3:98:
b7:f5:75:03:e6:80:59:78:8d:65:0b:4d:bf:54:d5:
d6:7e:74:c0:f7:01:58:5b:c5:27:01:b5:58:d2:76:
69:0b:cb:39:96:b6:4b:fc:18:6e:cb:eb:4e:34:cf:
46:d9:ad:d7:d2:8b:39:29:c5:28:e2:34:a3:25:b4:
ba:4a:f1:e8:4c:d4:ec:bf:f9:35:df:9f:86:c3:09:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CA:4F:12:21:10:1A:25:14:8D:03:4C:46:B4:78:2D:38:AB:27:C8
X509v3 Authority Key Identifier:
keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/xspPEiEQGiUUjQNMRrR4LTirJ8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.244.0/22
193.56.32.0/24
193.56.35.0-193.56.36.255
193.56.39.0-193.56.40.255
193.56.44.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:82:08:f0:ed:b9:dd:58:58:34:fe:c4:8b:6e:9f:45:11:e2:
66:73:8e:5b:f1:c8:2c:33:f4:e2:25:a3:46:72:6f:2f:6c:fc:
9d:a7:f0:ae:01:bd:1d:ae:29:63:c3:54:51:b2:a1:6b:e2:5c:
1f:4b:bc:b0:97:a0:fe:d5:f8:15:10:9f:ef:91:a8:26:2d:34:
00:4c:34:da:0c:7a:86:72:6a:a2:01:d0:d8:e9:2c:cf:3d:58:
87:d7:e0:e0:41:ed:c6:b0:8a:e7:f2:7b:cd:d5:38:be:62:4b:
71:36:12:b5:16:a4:16:20:67:d7:19:cc:35:df:ef:9a:27:2e:
5b:b9:f8:51:85:b9:06:29:b2:cd:6b:1e:d9:02:3f:c8:7b:9f:
3e:e4:7f:b4:a7:16:25:7c:5d:2a:af:99:c2:6e:5b:26:57:6e:
da:0d:53:3a:bb:64:1b:14:4f:ac:3f:d9:ec:50:0b:b7:d8:dc:
1d:3d:16:83:fe:20:ca:80:05:a3:bd:31:31:ca:15:da:46:7f:
d2:74:90:25:2b:f9:9d:8e:2c:47:92:72:4c:77:bc:14:eb:3c:
8b:35:59:c6:26:fb:f5:0e:55:3f:51:e9:b4:2f:4e:23:e3:64:
09:25:8d:30:9c:75:f0:3c:d6:05:4b:ba:96:4a:69:e1:86:d7:
74:f1:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:23 2025 by rpki-client