Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/xyAqUo1cBCxwcVbYVeKIYjCComY.roa
File: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (raw, json)
Hash identifier: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=
Subject key identifier: C7:20:2A:52:8D:5C:04:2C:70:71:56:D8:55:E2:88:62:30:82:A2:66
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 019423D7E4861F00F8442C0B1DC026EA6F58
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/xyAqUo1cBCxwcVbYVeKIYjCComY.roa
Signing time: Wed 01 Jan 2025 21:48:58 +0000
ROA not before: Wed 01 Jan 2025 21:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209810
IP address blocks: 85.92.96.0/22 maxlen: 23
89.190.128.0/22 maxlen: 22
176.118.170.0/23 maxlen: 23
194.31.188.0/22 maxlen: 22
2a09:1980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e4:86:1f:00:f8:44:2c:0b:1d:c0:26:ea:6f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Jan 1 21:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7202a528d5c042c707156d855e288623082a266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:96:17:70:1c:c1:0f:99:f4:67:02:83:9f:e0:
9e:32:88:5f:da:ea:c1:31:79:80:8e:22:76:46:19:
ec:11:03:68:81:7d:74:65:76:08:3f:00:1e:06:35:
24:69:e8:73:7c:52:9d:52:7e:80:c3:f1:9d:6e:b6:
c7:f5:29:2e:a6:c3:53:ec:7a:6e:e6:5a:39:1e:b6:
e7:93:f0:16:ce:66:9c:34:2f:fb:96:eb:a8:20:28:
56:ae:c7:48:e8:c1:d9:64:bb:8a:6d:c2:dc:54:b3:
56:b8:e6:c2:50:78:47:0d:81:b4:3f:58:df:20:9a:
fe:31:7e:17:7b:20:87:07:63:1e:12:2f:b6:6a:28:
c5:c0:41:5f:5c:3d:3c:53:e6:02:87:c7:81:45:e5:
bc:96:01:b6:7f:5b:1d:e2:1b:41:9a:6a:4e:f5:d0:
dc:3a:8e:c5:a3:87:31:df:1a:b7:06:de:b3:5f:e8:
d5:39:50:09:c2:b7:67:52:a2:b1:e8:1b:59:0d:68:
85:92:c0:82:fa:f9:45:02:a8:e7:df:60:d4:28:c2:
a3:bc:90:e6:1c:e6:0e:41:81:d6:57:fe:7b:65:9a:
6c:c2:9d:ec:7b:78:a4:a6:21:b4:51:e1:aa:bc:ac:
79:d1:8e:4e:66:6b:dc:4f:2e:25:f7:0c:fa:2c:4c:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:20:2A:52:8D:5C:04:2C:70:71:56:D8:55:E2:88:62:30:82:A2:66
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/xyAqUo1cBCxwcVbYVeKIYjCComY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.96.0/22
89.190.128.0/22
176.118.170.0/23
194.31.188.0/22
IPv6:
2a09:1980::/29
Signature Algorithm: sha256WithRSAEncryption
24:c7:23:71:58:9e:7e:8d:e7:49:13:d8:9c:23:a0:07:30:7a:
eb:e0:50:7c:1a:97:13:c4:cf:35:69:d6:8c:6c:13:a1:24:eb:
f6:04:28:69:30:e2:fb:d4:44:3f:ec:88:4d:da:5f:a3:7d:80:
b3:08:42:2b:7f:8e:20:03:c3:93:08:f1:4d:14:98:11:1c:b0:
e9:e0:83:2d:15:2e:4a:90:c1:e7:e2:65:59:d0:06:56:d2:db:
ae:60:6a:b9:38:0a:2f:88:5e:84:14:34:d4:0f:0e:09:51:bc:
35:98:c9:1d:dc:f5:f9:a9:3b:84:5a:62:a0:82:02:82:b0:69:
4c:38:e1:31:c6:f9:df:a1:af:39:b6:e4:48:d6:fe:15:a4:6c:
a0:81:d2:2b:85:18:ad:23:50:28:50:d3:40:55:ee:75:94:84:
d8:62:f0:cb:87:4d:78:cd:77:d4:18:85:c5:eb:ea:3b:66:dc:
60:56:85:69:e5:d2:00:5b:c6:3d:61:84:bb:31:e0:50:87:2a:
47:f7:54:64:0d:2a:67:9e:e6:41:c9:8a:5e:f9:99:38:11:0d:
96:c7:a3:52:0f:bd:74:d8:55:1c:5e:a9:6e:37:74:7b:01:54:
e6:03:4e:73:a8:cd:6d:94:ac:45:04:33:72:8b:e0:9a:05:6a:
21:9c:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:13:01 2025 by rpki-client