Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa
File: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (raw, json)
Hash identifier: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=
Subject key identifier: 5D:85:A9:74:FC:C6:A0:18:05:E0:D8:89:70:14:A7:98:A1:65:16:50
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 0194244498EFEF04139BDA5D3E330383BCC4
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8639
IP address blocks: 185.121.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:98:ef:ef:04:13:9b:da:5d:3e:33:03:83:bc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d85a974fcc6a01805e0d8897014a798a1651650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:df:f6:3f:10:4e:1f:62:f1:4b:11:87:71:
d3:2a:93:f6:4f:c0:bf:db:19:4f:b0:a7:a0:e6:51:
0a:32:50:59:06:fd:71:46:57:bd:28:64:eb:6c:f7:
6d:c2:02:a0:f0:4d:48:58:b2:bb:61:2b:c4:9b:64:
2c:ad:8b:e3:13:ed:1d:7d:45:69:c5:06:8a:9e:91:
e3:a6:5b:f7:d9:71:6a:53:d3:e4:db:e8:76:ae:1f:
76:33:57:b9:15:84:62:1d:1c:e2:8f:7e:87:5a:16:
ef:24:11:8c:90:d6:61:3c:79:4b:b3:15:bd:36:71:
09:63:54:75:72:40:8b:19:88:07:06:e6:80:2b:92:
40:bc:68:41:30:27:be:95:ef:76:c2:36:fa:56:b6:
61:e8:e9:98:e7:1a:82:b8:38:b3:f0:2e:b4:b7:03:
f1:ac:78:23:a9:89:37:e0:5e:80:fe:fe:48:ec:2c:
7e:1f:13:71:9d:68:e7:8f:7a:3f:5a:0e:69:a6:27:
83:35:45:64:7a:33:2e:45:05:ec:ee:59:53:65:f5:
03:51:37:b8:df:5f:85:86:bb:8e:46:b0:68:ed:52:
37:8d:72:9c:76:4d:ea:32:4a:56:4f:d5:b5:37:76:
8b:33:3f:5c:d7:40:84:70:c1:28:de:79:2b:9f:ea:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:A9:74:FC:C6:A0:18:05:E0:D8:89:70:14:A7:98:A1:65:16:50
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.20.0/22
Signature Algorithm: sha256WithRSAEncryption
41:06:1b:51:ae:a3:3a:8a:5e:a9:55:01:67:1e:d7:97:2d:f5:
18:a5:5b:77:5c:8f:9c:b0:6c:5d:ef:b7:1f:aa:55:5e:30:7b:
94:d6:d1:f8:24:29:5c:08:ab:57:18:29:a5:d9:4d:ff:e0:58:
f4:51:f3:84:99:f3:08:bf:6a:66:09:f0:d2:35:30:de:24:fb:
a2:08:25:2c:61:bb:0a:9a:31:5e:2a:f9:05:15:1c:6a:9a:91:
26:be:51:f2:53:23:03:ec:7c:a4:40:43:02:34:3f:ef:af:b6:
2b:a9:83:26:0e:1a:31:2f:d9:dc:f5:60:2a:a4:e7:90:60:72:
93:36:06:6a:02:78:80:6c:b8:e5:85:47:ea:fd:b4:88:b5:a2:
9d:62:c9:b1:85:9e:c0:ef:e6:3d:35:9f:70:c7:9a:75:26:a1:
02:cc:38:7c:07:92:34:1f:6a:8b:0c:29:e1:6a:0a:c5:6a:db:
f4:56:69:cd:46:bd:6d:8b:73:5b:7f:e4:bb:e0:aa:57:87:bd:
a9:d1:43:85:1b:32:d2:a4:0d:2f:2b:a4:f1:e0:7f:e4:f6:89:
49:3e:c1:8b:8e:97:ef:5b:f1:e1:63:b5:33:97:b2:2a:f5:7a:
ce:63:e5:72:38:10:c5:ed:29:22:53:36:5c:29:18:e2:43:2f:
26:b1:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:51 2025 by rpki-client