Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/XvSqa1PF0nx9rdnf-qHYXXmj-t4.roa
File: XvSqa1PF0nx9rdnf-qHYXXmj-t4.roa (raw, json)
Hash identifier: 6D9O10hjXxh7sEXhihEUoyls7053T5SpuEJHdN4TtnE=
Subject key identifier: 5E:F4:AA:6B:53:C5:D2:7C:7D:AD:D9:DF:FA:A1:D8:5D:79:A3:FA:DE
Certificate issuer: /CN=c0c9413f076a782110c14490d890f1b3e98e0785
Certificate serial: 01941F8C1F5B599A61CF81C0738116BC5041
Authority key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/XvSqa1PF0nx9rdnf-qHYXXmj-t4.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51177
IP address blocks: 45.128.116.0/22 maxlen: 22
84.234.96.0/22 maxlen: 22
91.235.116.0/24 maxlen: 24
188.214.30.0/24 maxlen: 24
188.241.58.0/24 maxlen: 24
193.29.187.0/24 maxlen: 24
193.201.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1f:5b:59:9a:61:cf:81:c0:73:81:16:bc:50:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c9413f076a782110c14490d890f1b3e98e0785
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ef4aa6b53c5d27c7dadd9dffaa1d85d79a3fade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:19:9c:66:d7:77:c4:6b:fa:03:78:bf:6b:b6:
1a:e2:60:b0:b3:77:fa:95:35:bc:6a:86:5a:93:c3:
e9:83:80:d1:5b:d7:33:16:67:0b:6c:54:9b:e9:7a:
bf:5d:64:cc:f1:e1:b4:e5:5e:a6:97:a1:11:83:46:
d8:ee:4c:a4:9f:41:05:81:0d:92:ba:b1:23:ce:46:
00:cd:a2:ff:72:de:f9:b6:03:ae:f0:98:63:2c:9c:
a0:9d:9d:2f:c5:dd:63:79:a2:84:19:e4:98:96:70:
11:33:7f:ab:ea:ff:e1:27:1a:79:a4:00:26:d7:a0:
f1:e5:b3:1e:01:15:3b:64:31:84:30:a1:c4:33:96:
7b:bf:5f:71:c4:44:54:e2:0f:ae:8c:5d:f1:1d:9b:
76:99:6e:bf:df:35:cb:9f:b8:4c:72:bc:22:a3:37:
e6:a6:92:fb:0f:47:9f:7b:60:34:d6:c4:7d:e2:d6:
5f:d4:7d:c9:47:bc:89:94:42:c2:fa:da:01:88:e2:
e5:96:e8:71:9b:70:79:50:0d:71:78:06:f7:ce:d9:
2a:7b:5a:f0:aa:86:f9:65:3e:a8:8a:e8:1d:da:97:
a3:ca:e3:de:68:f9:bd:3b:fc:c4:20:d4:6b:dc:7c:
37:d1:85:c8:a7:34:d5:37:c8:cc:e6:0a:09:28:a0:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:AA:6B:53:C5:D2:7C:7D:AD:D9:DF:FA:A1:D8:5D:79:A3:FA:DE
X509v3 Authority Key Identifier:
keyid:C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/XvSqa1PF0nx9rdnf-qHYXXmj-t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.116.0/22
84.234.96.0/22
91.235.116.0/24
188.214.30.0/24
188.241.58.0/24
193.29.187.0/24
193.201.82.0/24
Signature Algorithm: sha256WithRSAEncryption
75:fb:f4:80:b2:a3:91:9f:c7:d1:30:87:d9:1f:77:81:4a:44:
62:c2:ea:09:d1:45:d2:0e:21:24:4a:e5:2c:29:0a:d3:95:1e:
54:d9:7d:14:ad:8d:91:e3:98:c3:62:58:b0:a7:82:39:da:ba:
d9:98:55:1f:52:2d:64:85:62:00:60:79:3c:ee:e0:9e:67:bf:
74:d9:5f:da:a5:dc:be:3d:ee:c4:15:b1:38:dd:2f:47:c8:20:
7f:b7:a2:02:9b:97:e6:3e:0b:91:15:b7:20:51:71:29:0c:2e:
51:9b:87:d2:b8:b3:7f:8f:77:0e:c0:cf:90:0d:e9:3c:e1:43:
ef:fb:ef:d5:ca:cd:c3:c4:17:e9:a3:a1:c9:97:36:16:a4:65:
35:0a:a7:c6:08:d2:69:91:8e:f7:7d:51:35:60:d8:47:e9:31:
ef:4b:43:83:72:b9:71:4a:99:e8:32:47:93:a4:6e:5b:5a:f9:
05:af:51:13:bc:5a:2e:8c:0e:a1:d6:b8:54:ba:9d:22:57:62:
2e:c6:15:d6:5e:26:dc:8d:87:1e:a3:f9:cd:eb:b2:b3:38:8a:
09:3c:4d:93:43:90:55:e1:d0:ff:ab:34:b3:02:0f:61:91:50:
87:0f:cb:7d:05:26:a7:9d:3d:83:c6:f2:01:6b:6b:6a:1e:24:
6d:e8:46:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:17 2025 by rpki-client