Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/xQJtsPu4XjJPpok_xM8iveF2WjU.roa
File: xQJtsPu4XjJPpok_xM8iveF2WjU.roa (raw, json)
Hash identifier: uOpq92mVZM0bRt0Br5tU9GRVlZXJhQNtj23gea9OYEs=
Subject key identifier: C5:02:6D:B0:FB:B8:5E:32:4F:A6:89:3F:C4:CF:22:BD:E1:76:5A:35
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0194221FC94D24F1DB0ABC4CD9B5E2C5A960
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/xQJtsPu4XjJPpok_xM8iveF2WjU.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50149
IP address blocks: 62.122.216.0/22 maxlen: 22
89.104.107.0/24 maxlen: 24
89.104.119.0/24 maxlen: 24
89.104.125.0/24 maxlen: 24
94.154.128.0/22 maxlen: 22
185.228.88.0/23 maxlen: 23
185.228.90.0/23 maxlen: 23
2a00:ab01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c9:4d:24:f1:db:0a:bc:4c:d9:b5:e2:c5:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5026db0fbb85e324fa6893fc4cf22bde1765a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:de:1b:7f:85:6f:30:d2:78:f7:4b:af:05:
94:d1:2f:86:04:2e:c2:f1:ec:1a:74:90:e6:e8:9a:
ad:87:9f:3e:93:5d:94:55:e5:dc:5e:f6:50:5e:41:
3b:30:f4:27:4d:81:1b:89:91:a2:cb:80:3d:8e:a2:
74:e5:05:82:de:23:09:32:a6:02:b5:10:7e:ee:89:
67:db:1c:6f:99:2d:aa:bc:61:85:5d:7f:46:a3:ec:
eb:ed:6d:85:6a:32:1f:1f:a4:a7:4c:72:aa:ea:5e:
d6:c0:f4:6a:05:4b:80:61:ab:0f:19:e2:27:68:11:
c9:54:11:be:e9:a5:40:26:85:ee:a8:f4:c2:63:b5:
31:ab:a5:eb:21:db:27:7d:e2:6a:73:4d:a8:5a:34:
9e:4e:cb:76:e2:cf:7d:2e:75:5a:a1:99:3e:5f:f0:
87:fe:bd:f9:30:2a:4b:11:33:2d:92:8a:21:21:13:
58:6e:d9:c7:97:8d:65:b9:85:72:75:5f:24:ef:be:
10:55:b4:d1:ad:4f:94:96:d1:9f:69:74:58:0b:dc:
eb:89:2b:97:a1:1a:c1:4a:10:35:49:37:98:52:c0:
16:16:ff:3a:37:db:49:aa:97:b5:62:d5:f9:e1:be:
34:e3:91:9a:a0:bd:bd:84:18:c6:bf:09:6c:71:30:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:02:6D:B0:FB:B8:5E:32:4F:A6:89:3F:C4:CF:22:BD:E1:76:5A:35
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/xQJtsPu4XjJPpok_xM8iveF2WjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.216.0/22
89.104.107.0/24
89.104.119.0/24
89.104.125.0/24
94.154.128.0/22
185.228.88.0/22
IPv6:
2a00:ab01::/32
Signature Algorithm: sha256WithRSAEncryption
37:77:72:20:e4:72:53:59:86:aa:c4:70:ba:a0:ad:ef:cf:06:
fd:b6:01:5b:db:5e:aa:84:c8:5f:75:44:54:90:08:12:6d:90:
98:86:8a:61:ab:93:84:66:b7:62:7f:0c:21:58:e6:85:b8:56:
30:94:ee:e9:f1:cb:07:f1:26:8a:9d:2f:52:16:14:7b:ad:c6:
84:cc:62:27:0a:56:d3:ac:ff:19:d6:8d:8d:56:01:68:17:1c:
d0:9d:ba:78:67:e5:98:b8:ee:ee:c1:99:ed:0c:fd:89:62:ae:
e3:49:bb:af:59:32:2b:b5:52:e7:cf:2e:0b:08:e2:0a:15:80:
16:f2:ac:40:48:ba:4d:9d:1d:6b:44:ff:91:dd:8f:5d:21:9c:
b7:5c:5a:12:81:02:76:aa:c0:0e:5d:83:d2:34:65:6d:06:a6:
c5:49:a7:cb:fd:4c:92:31:8e:53:43:92:2c:8f:8b:0b:f1:6d:
34:25:c7:8d:bf:77:8e:5e:46:6f:67:5d:be:0a:a1:37:03:97:
68:20:79:6d:6c:bc:c5:4d:fc:41:ff:d0:5b:21:fe:2a:36:87:
a5:8b:c5:cf:6e:2c:fe:53:d0:89:2a:f8:69:10:cd:8f:4c:ae:
9d:b2:84:54:a5:1d:67:bc:52:ea:b3:01:c8:35:9d:e1:99:6b:
2d:ed:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:53 2025 by rpki-client