Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/Xh1bBljM71iO_oPVnAiexaSjqeo.roa
File: Xh1bBljM71iO_oPVnAiexaSjqeo.roa (raw, json)
Hash identifier: ejNr43+KNV38s1i2sDwqEp2C8gdCzF3rTEIHrYa15TU=
Subject key identifier: 5E:1D:5B:06:58:CC:EF:58:8E:FE:83:D5:9C:08:9E:C5:A4:A3:A9:EA
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 0194282308D0498BA92028C5510C479B602A
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/Xh1bBljM71iO_oPVnAiexaSjqeo.roa
Signing time: Thu 02 Jan 2025 17:49:32 +0000
ROA not before: Thu 02 Jan 2025 17:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 79.137.133.0/24 maxlen: 24
85.192.48.0/24 maxlen: 24
85.192.49.0/24 maxlen: 24
89.208.137.0/24 maxlen: 24
89.208.142.0/24 maxlen: 24
92.38.240.0/24 maxlen: 24
92.38.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:08:d0:49:8b:a9:20:28:c5:51:0c:47:9b:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Jan 2 17:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e1d5b0658ccef588efe83d59c089ec5a4a3a9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:82:23:b9:cc:2f:0f:fc:dc:4c:08:5a:d2:
97:42:37:c9:e1:96:32:b9:d1:00:1e:7b:b7:a0:2a:
18:d5:7c:e0:f5:e8:47:95:ae:59:f6:17:c0:18:b5:
9f:ac:6b:d3:8f:19:d0:4b:76:ca:ad:b1:30:de:99:
a4:13:ca:29:07:5f:28:8b:a5:9f:3d:00:ab:71:76:
4e:cd:ea:d3:f3:af:12:92:96:6f:d3:55:d6:d6:2b:
21:a2:1c:5e:f2:38:86:9b:87:d1:2d:ee:3a:e0:6e:
3e:b0:b6:74:40:f5:ef:81:91:66:16:f2:8a:8b:5d:
85:de:fe:cc:75:cd:8d:07:7a:04:17:9d:eb:0c:0d:
15:c1:81:51:5f:1d:18:1b:b0:e7:c7:8d:d4:96:c6:
6c:58:de:69:2b:98:81:7a:c0:89:1c:1c:ad:8e:0e:
a2:9d:9f:75:d7:aa:1d:03:fa:54:ce:4c:c4:95:00:
ee:63:78:e1:ff:ba:b4:42:97:43:37:27:10:a3:20:
9c:3b:6f:29:a8:73:bc:ca:04:ea:7e:c9:f2:c4:4e:
3f:8d:37:d4:d0:ab:c5:ce:7b:26:8f:84:de:70:fe:
7b:a9:1c:ce:3a:f6:8c:b8:2a:37:84:9b:95:cb:19:
fa:e1:cf:7a:99:94:d8:91:2d:3f:a3:50:ea:40:e1:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:5B:06:58:CC:EF:58:8E:FE:83:D5:9C:08:9E:C5:A4:A3:A9:EA
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/Xh1bBljM71iO_oPVnAiexaSjqeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.133.0/24
85.192.48.0/23
89.208.137.0/24
89.208.142.0/24
92.38.240.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:70:b6:c6:b5:30:44:a6:53:73:48:4d:b9:90:cd:1a:d1:8b:
4d:67:c6:3d:45:8c:0d:17:f2:08:88:5c:e4:55:8b:79:09:4c:
d6:01:0d:30:5d:6f:eb:03:3a:14:69:25:c4:08:ee:d0:11:d6:
f0:34:f1:a4:36:a8:ce:6a:53:67:9a:74:63:55:cd:eb:1f:f2:
e3:15:08:9c:ec:e5:ef:9d:50:c6:70:65:68:fe:bf:c2:41:ad:
a0:12:3c:fd:a1:89:58:8a:d1:f2:74:60:f7:73:a4:1b:49:8a:
1c:e6:1c:81:af:8a:8f:a3:7f:5d:65:86:8e:24:b2:4a:61:5a:
ab:a5:1c:ee:ae:4e:ac:bb:03:8d:b6:f5:d9:cb:26:f3:1b:f9:
10:a0:d2:1a:81:67:7e:8c:be:88:2d:8b:5d:48:b3:7c:a6:97:
9c:c4:c7:59:18:41:98:ac:32:e4:09:1d:ea:d6:0a:2f:19:cd:
a8:86:c8:0b:b8:f4:c0:c7:48:6d:b0:ba:60:b9:2c:da:36:ca:
0f:83:d3:37:44:d2:4a:3d:3e:c3:6b:bc:81:4d:9a:e5:2b:a5:
e0:a2:b0:84:df:a0:6b:0a:cc:c9:e6:12:a4:f4:42:50:bc:5b:
e6:1f:f4:44:92:ad:95:80:be:77:bd:64:4b:60:2f:d3:7d:cd:
f4:3a:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:21 2025 by rpki-client