Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/xvhaWBb3tvMQLpukd_f8RlDLU2Y.roa
File: xvhaWBb3tvMQLpukd_f8RlDLU2Y.roa (raw, json)
Hash identifier: gJd09VzBoAlOJJupvrvcJYxnf407SVcdEGocSp2sjqA=
Subject key identifier: C6:F8:5A:58:16:F7:B6:F3:10:2E:9B:A4:77:F7:FC:46:50:CB:53:66
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 019425FC3C392891E41BB3C4C82D5A91DC55
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/xvhaWBb3tvMQLpukd_f8RlDLU2Y.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50533
IP address blocks: 134.101.64.0/19 maxlen: 19
134.101.64.0/24 maxlen: 24
134.101.126.0/24 maxlen: 24
134.101.127.0/24 maxlen: 24
145.14.224.0/20 maxlen: 20
145.14.224.0/23 maxlen: 23
185.160.248.0/22 maxlen: 22
2a00:17f1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3c:39:28:91:e4:1b:b3:c4:c8:2d:5a:91:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6f85a5816f7b6f3102e9ba477f7fc4650cb5366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:16:0f:36:af:71:20:8d:07:30:bd:14:9d:
cd:11:3d:6c:8b:ac:ca:54:43:cb:d4:57:d9:37:c5:
79:96:ab:3e:66:52:3d:f0:ad:28:dc:a7:df:ab:a0:
d0:f3:3e:86:0b:f6:6e:64:73:0b:54:5b:6a:69:fd:
bd:f6:a8:b5:0d:51:6e:95:9e:e6:8f:9d:d8:b4:18:
7b:15:a7:ab:3b:f7:55:f9:f9:61:f2:c3:ea:5a:0a:
1f:97:1b:d7:ff:ed:b3:36:51:b6:25:9b:7c:28:62:
c6:ed:3d:0b:10:66:da:41:0b:0a:0e:86:88:bf:ba:
d8:2a:79:34:6c:2c:7c:e6:76:4c:df:c4:6a:e8:02:
00:65:c4:81:e6:91:22:f6:6a:52:d6:70:54:db:8e:
67:33:28:38:cb:a2:8f:71:db:fc:cd:3c:0f:0a:5d:
2f:c2:c3:6d:91:77:d9:7e:02:e7:cf:7f:2d:bc:e8:
37:31:7c:77:e9:79:d9:14:72:66:50:cf:12:68:ec:
0c:43:4b:99:10:73:d6:56:c6:f7:63:d0:39:9a:e1:
6a:17:11:b3:36:fb:8a:5f:d7:55:c3:ad:33:4e:0a:
d6:56:2e:2d:c7:39:fb:fa:f1:45:41:a0:4a:be:98:
c9:1d:66:2d:3c:4a:13:a1:0f:14:ea:ed:24:92:74:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F8:5A:58:16:F7:B6:F3:10:2E:9B:A4:77:F7:FC:46:50:CB:53:66
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/xvhaWBb3tvMQLpukd_f8RlDLU2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.101.64.0/19
134.101.126.0/23
145.14.224.0/20
185.160.248.0/22
IPv6:
2a00:17f1::/32
Signature Algorithm: sha256WithRSAEncryption
5a:d9:c2:59:ab:4c:a7:0c:ce:25:3b:b6:7d:ff:d8:19:17:ef:
89:d4:36:4a:08:48:4f:54:3f:01:32:26:4a:e2:bf:0c:02:c6:
53:b1:c9:11:ce:44:59:d4:62:54:a8:79:dc:20:10:fc:ed:c6:
1f:06:af:a7:ad:2a:64:b7:5b:b7:51:6e:96:a2:b7:b7:ec:53:
ff:81:b1:24:cf:ab:60:95:79:2b:4e:ee:b3:dc:88:ee:0c:c5:
c5:30:5a:14:f7:3a:60:21:ed:c3:9a:a0:21:6c:c1:e6:56:52:
22:bc:af:2c:d8:b0:87:bf:9d:10:2f:f5:e6:39:2b:f0:b9:ec:
af:1c:b6:22:17:18:2d:53:de:4b:50:fa:e6:11:4d:89:b6:f1:
7b:47:63:6f:79:4a:6d:47:ab:b0:10:70:43:25:bb:f0:91:8f:
9a:e6:79:9b:e7:eb:57:ef:ea:b3:14:be:9c:c4:0b:f8:a5:2f:
5e:c9:60:9a:d1:93:e1:9f:ac:6a:c6:bf:3e:8b:12:cb:85:a9:
d0:34:9d:cb:9b:83:b2:60:32:1a:06:29:54:e6:c1:d7:e0:85:
92:eb:c6:99:37:d4:d4:47:eb:d7:00:af:82:08:65:e9:21:35:
9b:9b:a1:c9:e6:e4:64:67:5a:56:e6:c5:26:30:73:75:a6:1c:
4b:64:ff:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:25 2025 by rpki-client