Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/xCnT23Rn0GW_J69HKTBn0CbUrEg.roa
File: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (raw, json)
Hash identifier: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=
Subject key identifier: C4:29:D3:DB:74:67:D0:65:BF:27:AF:47:29:30:67:D0:26:D4:AC:48
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 01942826D0F662D88A67D015FCB323F179AC
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/xCnT23Rn0GW_J69HKTBn0CbUrEg.roa
Signing time: Thu 02 Jan 2025 17:53:39 +0000
ROA not before: Thu 02 Jan 2025 17:53:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198682
IP address blocks: 45.88.140.0/22 maxlen: 24
109.71.136.0/21 maxlen: 24
109.205.0.0/21 maxlen: 24
185.220.72.0/22 maxlen: 24
185.230.96.0/22 maxlen: 24
193.176.64.0/22 maxlen: 24
2a00:1f10::/32 maxlen: 32
2a0b:f1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:d0:f6:62:d8:8a:67:d0:15:fc:b3:23:f1:79:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Jan 2 17:53:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c429d3db7467d065bf27af47293067d026d4ac48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:3c:42:fb:5f:a7:e7:2c:a3:f6:54:24:1a:
0a:da:97:a2:03:d9:8b:bb:e2:72:ae:13:4b:d2:62:
23:0b:0c:38:f0:20:b2:36:eb:2b:95:3b:d5:cc:de:
6f:52:c8:68:cc:5f:86:22:90:96:f4:04:07:d6:fe:
b1:f7:9d:3c:92:64:2e:67:de:3f:41:c2:0e:5c:b5:
22:c5:17:a1:47:3d:6a:c0:b9:44:e8:ff:10:9f:6c:
82:97:8a:f7:96:a2:6d:c4:01:b9:0f:17:bc:27:47:
39:11:d9:b1:a4:ab:11:94:d7:01:2b:ef:e8:aa:5a:
82:23:a2:a5:24:a5:5f:a8:a3:36:73:ba:b3:bc:d3:
c9:63:07:96:c3:66:a5:da:2d:c5:59:46:7e:7a:ef:
19:9f:3b:75:c5:0e:f6:ef:f0:10:af:58:b3:f8:6c:
98:14:f5:4d:34:f7:9a:c0:f1:6d:3a:5e:0a:52:c9:
c1:1a:ee:42:de:33:7f:3d:e2:7c:9e:c6:51:4b:e6:
6b:d1:d6:7e:a1:0a:8d:db:72:4c:dc:7d:c6:c4:62:
89:35:a4:c5:18:5b:36:08:87:4a:98:b6:5b:8a:8f:
43:b9:61:a7:72:fa:2b:12:09:2a:81:ef:a5:b2:a7:
0b:d8:09:a2:05:bc:da:35:b4:a5:2a:5a:00:71:e5:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:29:D3:DB:74:67:D0:65:BF:27:AF:47:29:30:67:D0:26:D4:AC:48
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/xCnT23Rn0GW_J69HKTBn0CbUrEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.140.0/22
109.71.136.0/21
109.205.0.0/21
185.220.72.0/22
185.230.96.0/22
193.176.64.0/22
IPv6:
2a00:1f10::/32
2a0b:f1c0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:5c:76:bf:c0:7f:39:55:5e:91:41:9a:08:57:de:3c:3c:92:
5f:63:73:e1:5e:d4:4e:4b:fb:ee:41:bb:6b:5b:5c:4c:d9:c5:
5f:2d:c4:f1:d0:49:31:60:7a:cd:e6:42:7e:c4:b1:5d:e3:4a:
71:2f:0d:97:d4:d2:9d:bb:10:a2:cc:80:ea:76:11:20:00:bf:
36:aa:4e:0b:bd:39:c2:90:ea:25:8e:53:06:b7:e0:7b:6c:31:
3a:34:da:b6:f4:76:28:f6:ab:78:89:d4:ca:11:60:57:53:2a:
0d:ea:8a:d4:eb:63:b0:3a:f7:e0:c7:cb:8d:c0:6b:7d:ce:8e:
57:89:fb:8f:18:47:ce:97:7d:03:43:42:c4:07:f1:97:a0:73:
3c:6f:c3:96:65:07:d9:96:7c:98:6b:d3:fd:04:5d:af:06:c9:
6e:34:f7:c9:c4:90:d8:a0:d8:4a:2e:7f:2f:fd:27:40:87:18:
69:65:ef:60:f6:0a:e4:8e:48:8d:ed:be:19:31:25:02:a6:49:
47:e2:2a:bb:93:12:b4:f9:c4:49:10:92:31:d5:e9:54:79:a1:
0d:6f:28:e6:27:41:ff:d9:4a:81:09:41:2b:d5:19:21:9e:51:
a7:ab:55:b5:b9:fd:4c:48:1a:68:a5:2a:21:dd:f5:17:3b:85:
16:6f:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:54 2025 by rpki-client