Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa
File: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (raw, json)
Hash identifier: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=
Subject key identifier: C6:0F:25:C6:32:4F:09:52:36:42:3C:C7:5F:1C:70:FF:87:07:5D:2A
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 0194258E877AC38E27EF6C9BF5665543E3E7
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa
Signing time: Thu 02 Jan 2025 05:48:05 +0000
ROA not before: Thu 02 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21473
IP address blocks: 93.190.248.0/21 maxlen: 21
109.233.144.0/21 maxlen: 24
185.28.4.0/22 maxlen: 24
212.65.0.0/19 maxlen: 19
2a00:1e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:87:7a:c3:8e:27:ef:6c:9b:f5:66:55:43:e3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Jan 2 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c60f25c6324f095236423cc75f1c70ff87075d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:53:cd:65:23:e2:0f:02:b8:bc:07:06:da:b7:
0a:18:fa:25:14:b4:b3:a6:46:17:66:de:0a:8d:57:
9d:e4:73:21:10:ea:e1:8e:db:e1:4a:e2:95:df:9c:
cb:f5:de:bf:88:75:6f:93:c9:38:63:31:4f:65:19:
6b:f0:1e:27:c1:33:16:9d:6b:50:8c:ef:0a:80:1b:
53:6c:54:3c:b9:ed:1d:ba:6b:be:56:f9:ab:fa:5e:
ae:5d:82:c5:53:20:3b:7b:33:d2:c5:9f:29:3f:79:
71:c8:d3:5e:8a:fd:c1:bc:c7:52:cf:0e:36:c0:c1:
a4:14:7b:a6:02:12:f9:69:f0:28:cf:c7:94:a9:6c:
ba:2b:56:ee:bc:6f:9d:d2:96:43:18:db:0b:61:31:
3a:7c:d5:65:35:c8:bb:ef:d6:12:15:ba:ce:42:ee:
fb:7e:a6:08:70:b2:c7:67:a8:84:5c:e6:d8:d6:f6:
7d:ad:0e:f1:12:1e:9e:90:d8:a0:a9:6e:ce:03:4f:
de:4e:c1:34:0c:35:09:b4:3d:d3:65:17:45:21:01:
ab:b8:1d:0c:8d:ab:b5:a7:34:f8:fd:9b:ad:e6:9c:
f5:a5:7e:12:7a:ee:b7:50:2c:9b:4f:f7:b6:41:eb:
bc:fb:09:2a:50:00:38:f5:fa:3e:68:c0:97:c5:95:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0F:25:C6:32:4F:09:52:36:42:3C:C7:5F:1C:70:FF:87:07:5D:2A
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.248.0/21
109.233.144.0/21
185.28.4.0/22
212.65.0.0/19
IPv6:
2a00:1e80::/32
Signature Algorithm: sha256WithRSAEncryption
a7:11:4a:dc:66:fc:3f:33:88:11:53:99:2f:ef:4d:0a:54:b4:
e9:4e:ca:32:da:f8:2d:86:79:b1:3d:8c:17:b9:c3:55:48:3c:
4f:19:5c:d1:7b:28:1f:a7:88:77:81:1c:df:63:c9:76:60:56:
b5:9e:7c:15:e7:53:9c:e7:40:73:63:1a:b1:05:b3:3f:d9:8c:
35:1b:11:56:65:a4:d3:76:45:67:19:d8:c1:e6:b7:cd:b6:76:
e2:9a:c7:d2:66:94:f5:c2:75:ca:0d:d0:6c:b5:99:93:9a:63:
c7:80:d1:6d:45:79:83:67:8d:8c:5c:75:7c:3e:52:c9:46:11:
35:87:ac:5b:51:87:62:f5:b3:c9:89:89:2a:35:cf:eb:23:4a:
07:e0:73:dd:2d:3f:5e:7c:8a:0f:c1:27:61:d7:6b:36:1a:a5:
d3:9b:c4:14:f0:ab:03:26:ad:92:5d:ff:4b:55:9a:5e:1c:b9:
b7:47:7b:e5:39:1b:32:9e:d4:9a:52:e0:ce:05:1e:43:2e:89:
77:01:6d:9d:8b:12:09:22:80:c9:98:d1:e7:a1:97:d2:43:b5:
96:d5:e6:d8:51:ca:b8:21:4b:c6:21:94:3e:62:3a:79:a5:fd:
1a:53:df:e6:25:1b:f8:20:10:da:bb:4c:79:ed:5a:1c:8d:52:
cf:63:e7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:36 2025 by rpki-client