Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/X4DubSDeypBjb9FARyGcX09Bu8c.roa
File: X4DubSDeypBjb9FARyGcX09Bu8c.roa (raw, json)
Hash identifier: pRASSMct3Kq0D8Ie9Q8CVfXnY4rDbH6956YaM7KC3n8=
Subject key identifier: 5F:80:EE:6D:20:DE:CA:90:63:6F:D1:40:47:21:9C:5F:4F:41:BB:C7
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 01942067E7BF11528B9F6C8ED1FD000CC40D
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/X4DubSDeypBjb9FARyGcX09Bu8c.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207990
IP address blocks: 91.132.114.0/23 maxlen: 32
91.199.253.0/24 maxlen: 24
103.240.180.0/22 maxlen: 32
193.19.206.0/24 maxlen: 32
193.28.182.0/24 maxlen: 32
193.28.191.0/24 maxlen: 32
193.28.202.0/24 maxlen: 32
193.28.237.0/24 maxlen: 32
213.217.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e7:bf:11:52:8b:9f:6c:8e:d1:fd:00:0c:c4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f80ee6d20deca90636fd14047219c5f4f41bbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:cd:10:0b:3b:d1:58:75:a6:52:98:9e:e6:
fb:1d:b5:96:5c:ff:c6:7d:cd:8b:ad:26:ff:30:cd:
49:0e:07:cc:83:35:cb:6a:28:43:da:6b:16:60:85:
ad:1f:4a:5d:1c:3d:db:18:71:36:7e:b0:6c:81:56:
b2:58:b4:54:a2:de:5b:ea:69:2e:0e:30:2e:17:08:
75:ca:b3:3a:ac:1a:f3:ac:ed:42:aa:bf:d7:8d:c5:
94:c0:a1:b8:c8:15:ca:37:03:d9:8d:4c:2b:59:86:
0c:0c:46:59:a3:b5:ca:4f:a8:76:7f:6f:ad:b1:b1:
0d:49:89:4a:fb:50:98:ac:97:a1:11:af:50:c1:65:
ed:41:e2:d3:64:6f:e4:4c:e8:8d:d2:3b:4f:19:ed:
08:f4:bf:d3:cf:f8:85:74:05:0f:d2:29:76:21:a9:
a6:86:cb:35:19:80:99:2d:7c:be:c5:4b:af:96:8f:
11:8c:e2:99:88:60:0f:8f:b2:cc:d6:43:47:d1:d9:
39:40:9c:25:6d:79:77:25:f7:aa:5c:59:54:8d:d8:
b0:9a:7c:75:15:b7:02:2c:41:57:15:39:0b:27:dd:
a3:e6:e5:f6:d2:cd:7f:fb:dc:39:7e:e0:22:6d:45:
4c:42:1c:e3:bf:19:fb:36:70:dc:f3:e4:1f:fe:a1:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:80:EE:6D:20:DE:CA:90:63:6F:D1:40:47:21:9C:5F:4F:41:BB:C7
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/X4DubSDeypBjb9FARyGcX09Bu8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.114.0/23
91.199.253.0/24
103.240.180.0/22
193.19.206.0/24
193.28.182.0/24
193.28.191.0/24
193.28.202.0/24
193.28.237.0/24
213.217.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b5:fb:18:9a:7d:04:e1:83:bb:66:56:f7:b0:e5:44:96:8f:
33:90:83:14:17:bf:6f:38:fa:55:d8:34:24:f5:95:69:68:2d:
cf:2f:69:bc:cf:d8:ae:69:59:61:6c:77:42:dd:03:a4:68:4d:
06:51:73:10:25:6b:d9:92:ea:e7:dc:d4:ff:62:fb:13:9c:4d:
f6:9b:71:ff:5d:52:f9:4e:ea:69:d9:a3:b8:91:4d:e5:8d:95:
6a:ef:96:8c:cf:d5:ae:17:d9:63:6e:2a:8f:cf:61:d9:96:c8:
45:63:1f:4b:27:da:71:27:d4:19:67:6c:18:d9:31:4f:35:5d:
16:ba:36:ee:53:1f:2f:c5:5a:a1:ea:1d:a5:c6:34:55:46:33:
7b:a3:cb:21:e4:02:f5:19:77:0a:42:bc:f9:f1:81:91:84:57:
27:4f:0c:2f:b6:8d:fb:b5:55:ca:09:01:b4:b8:70:4a:14:10:
df:37:b6:86:1d:63:23:bf:9e:e8:78:49:6d:ce:7c:69:fb:fc:
82:80:70:d5:9f:9f:8c:89:cd:1d:78:0b:c6:9b:b9:1a:ef:27:
20:5f:7d:12:63:12:58:00:17:c5:67:6f:14:68:9e:c8:d3:83:
5e:dc:cb:7a:43:68:d1:f6:b2:7c:69:38:a1:8c:16:bb:6d:86:
45:47:f4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:09 2025 by rpki-client