Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/xLPeUXX4RJLZxnIKieLVdJS8YbU.roa
File: xLPeUXX4RJLZxnIKieLVdJS8YbU.roa (raw, json)
Hash identifier: mvKw4bOKAr0IQga6Tr8TKhcYkp3wZjkszS2x0xRvaBg=
Subject key identifier: C4:B3:DE:51:75:F8:44:92:D9:C6:72:0A:89:E2:D5:74:94:BC:61:B5
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 019425FDB1440027E2816893C3DFB77D9307
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/xLPeUXX4RJLZxnIKieLVdJS8YbU.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62381
IP address blocks: 185.37.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b1:44:00:27:e2:81:68:93:c3:df:b7:7d:93:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4b3de5175f84492d9c6720a89e2d57494bc61b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:a2:c0:40:9a:82:c4:32:b3:b7:67:ad:24:
7c:e7:ed:f4:79:d1:72:79:03:78:d3:df:e3:58:1c:
cf:c3:d0:88:7d:03:e1:fc:49:d0:ea:19:de:fa:ae:
78:64:71:57:62:c7:89:25:fd:09:ca:86:b4:5a:79:
7f:9e:dc:d5:57:8b:60:43:28:b2:83:40:05:28:17:
f6:c8:0d:83:92:ec:70:cb:1f:9a:3c:56:d0:0f:fa:
77:4c:94:72:88:8c:18:2c:6b:38:86:47:dd:8e:34:
22:91:9a:e6:a7:30:3c:a1:56:9d:6c:ee:86:5e:c2:
fb:b3:d7:e5:9f:8c:22:1e:b7:52:43:e0:c5:8d:3f:
eb:a2:2e:81:eb:ac:4c:1a:2a:83:b1:2e:59:1f:f9:
77:cf:62:60:05:ea:03:0b:8f:16:6c:e5:ac:14:b7:
03:bf:2d:a3:e7:97:f3:6c:2e:51:96:ef:a2:a1:cb:
86:51:9a:ec:9c:70:af:b0:ad:08:43:92:26:b6:00:
8e:60:91:ac:b0:d8:00:64:46:fe:73:16:19:a1:1c:
fc:42:80:1e:f1:4d:02:54:e4:de:84:ac:63:e7:48:
aa:4b:54:48:a6:84:ff:9f:e5:8b:56:4c:4d:4e:d7:
59:af:21:a8:47:cf:63:47:74:35:ab:0b:0c:35:7b:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B3:DE:51:75:F8:44:92:D9:C6:72:0A:89:E2:D5:74:94:BC:61:B5
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/xLPeUXX4RJLZxnIKieLVdJS8YbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.80.0/22
Signature Algorithm: sha256WithRSAEncryption
01:a3:d9:7e:e9:70:97:e9:a8:a5:2e:0f:3b:54:2d:8e:c9:79:
f2:5e:9c:a1:05:42:d1:00:35:25:20:d0:9e:31:38:75:63:dc:
4d:43:98:7d:e3:92:27:2b:c9:3f:c7:b8:52:ef:cd:8b:4a:f9:
4a:ca:bf:58:93:19:2b:33:64:29:1b:6a:f0:44:f0:3b:39:6f:
f9:95:8b:0a:ff:f9:91:99:fa:b9:be:e9:6a:10:ee:c7:3a:43:
46:7e:65:8b:f6:41:71:e5:19:b1:16:2a:dc:f3:44:ce:1e:21:
27:61:21:fd:96:e6:09:b8:3b:12:bc:2b:03:f9:f2:c6:f3:a0:
b8:5c:b7:4c:30:c5:0c:94:64:b0:80:2d:1c:f8:93:45:db:b3:
44:92:8b:b7:5f:1a:f4:fe:19:23:99:c9:eb:a0:7d:e7:00:5e:
1c:02:8e:48:3c:2e:27:45:69:5c:6a:67:ca:6a:14:b0:cb:74:
20:d4:2a:4e:44:fa:0d:db:b7:2b:24:51:d1:a5:6f:64:c3:10:
51:0c:e1:b6:3d:cc:ae:70:6f:fa:dc:ba:7c:a8:8a:75:2c:85:
dd:bd:d4:e8:28:be:26:0e:d1:a2:f6:ee:3c:c9:fa:73:16:91:
a3:eb:99:0c:35:8e:38:76:d7:d5:d2:51:ad:94:a0:ff:c9:1a:
83:dc:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:23 2025 by rpki-client