Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xvd4BQAaFIQNecfP9MFF9HZWetY.roa
File: xvd4BQAaFIQNecfP9MFF9HZWetY.roa (raw, json)
Hash identifier: H4hv0g1B0Bpd/V9ce40NED2EMiktUs80+ZWeEUAJRVk=
Subject key identifier: C6:F7:78:05:00:1A:14:84:0D:79:C7:CF:F4:C1:45:F4:76:56:7A:D6
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 019421441E4C15981181DD34A809DBDC20CE
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xvd4BQAaFIQNecfP9MFF9HZWetY.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44942
IP address blocks: 92.63.228.0/22 maxlen: 22
92.63.232.0/21 maxlen: 21
92.246.104.0/22 maxlen: 22
92.246.108.0/22 maxlen: 22
92.246.108.0/24 maxlen: 24
92.246.109.0/24 maxlen: 24
92.246.110.0/24 maxlen: 24
92.246.111.0/24 maxlen: 24
185.114.116.0/22 maxlen: 22
185.157.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1e:4c:15:98:11:81:dd:34:a8:09:db:dc:20:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6f77805001a14840d79c7cff4c145f476567ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:40:2d:5c:e7:a3:1a:51:ee:47:d9:bf:0b:
b1:e8:b7:74:24:d8:8e:2b:0e:06:f6:2d:6d:7e:d3:
83:d8:5a:73:c5:b0:d5:a6:4f:92:5a:47:b4:dc:a8:
e4:34:c7:cc:69:f0:12:e2:d6:2c:7c:e3:18:1b:6b:
fd:76:40:cd:1b:d2:5e:7b:f7:96:37:9a:00:9f:ed:
d6:df:ec:85:df:19:7b:b9:18:d6:97:4b:28:d3:c8:
07:82:74:e7:3c:a1:f2:bb:48:6a:27:d7:5d:7e:af:
0a:75:f0:98:3c:41:86:54:df:f3:cd:54:92:fb:3a:
97:1e:10:38:de:b5:9c:12:83:fd:16:ff:3b:fc:e2:
f8:0c:25:10:98:38:ef:ae:a5:d4:52:b9:c1:3d:88:
9d:c9:c3:b7:aa:bb:b8:ed:7e:cd:da:81:33:52:73:
e1:f7:fe:f0:c1:68:99:92:ac:42:e0:4f:3b:65:01:
b2:0c:15:4e:2d:58:e1:86:ef:75:ab:ba:f5:f8:2c:
75:a1:78:10:77:05:57:ed:5b:a9:7b:81:5e:f3:4c:
60:d7:45:31:a5:87:63:9f:d0:b5:3d:09:4b:80:3a:
f9:b3:f2:4e:16:cd:9e:b1:e8:ce:c5:68:19:57:3b:
02:b9:61:2d:69:2e:93:84:26:c0:cd:be:96:5d:36:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:78:05:00:1A:14:84:0D:79:C7:CF:F4:C1:45:F4:76:56:7A:D6
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xvd4BQAaFIQNecfP9MFF9HZWetY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.228.0-92.63.239.255
92.246.104.0/21
185.114.116.0/22
185.157.216.0/22
Signature Algorithm: sha256WithRSAEncryption
57:71:bd:cc:7d:9c:b7:a5:90:d3:2f:4d:a7:2b:c7:1b:9a:76:
fd:ce:e6:5e:64:7f:87:d9:aa:29:21:0b:f4:e6:99:f7:4a:cb:
bd:cb:92:0e:55:e6:94:b2:37:e6:18:66:3e:78:6b:fc:7f:e1:
75:eb:32:2f:4f:fa:f5:f7:18:1e:e8:46:8d:d0:65:fb:85:a9:
aa:2b:83:5d:d0:21:5f:8e:ae:75:0b:8c:ed:aa:47:cb:5e:71:
d2:00:93:40:ad:23:18:e9:1e:37:2e:97:55:94:57:6d:11:f5:
7c:1f:be:f4:0e:75:48:77:29:99:cb:38:58:70:1a:04:a2:07:
5c:62:ec:8f:03:d5:04:6b:a6:0b:06:32:6b:7e:5c:98:cf:ef:
d8:17:e3:0a:73:5d:a8:07:7e:11:db:14:18:4b:9d:46:6a:e8:
b8:d2:6d:39:81:8c:84:82:03:f5:b3:d6:74:ef:3b:e2:d1:cd:
c3:78:3d:3b:01:af:77:88:1f:2d:a1:50:fe:47:42:79:ef:58:
81:70:6c:62:87:59:58:88:4b:30:e3:92:64:2a:c0:7b:30:62:
48:4a:3a:cc:c7:05:dc:e8:ab:9d:3e:92:5d:8d:d7:7b:5b:06:
e5:00:04:31:50:b8:17:2c:6b:d3:7b:7c:0b:d0:13:a3:0c:9d:
05:70:44:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:03 2025 by rpki-client