Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/XZ2L7tby58uG7r0ttQk5HwT9l8k.roa
File: XZ2L7tby58uG7r0ttQk5HwT9l8k.roa (raw, json)
Hash identifier: oQ6DroqRbFL+VaKJERXvf6dbj57Lt/0NRTKEGy5wXFQ=
Subject key identifier: 5D:9D:8B:EE:D6:F2:E7:CB:86:EE:BD:2D:B5:09:39:1F:04:FD:97:C9
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 0194282690AE4E926AA325CEB56C424344DB
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/XZ2L7tby58uG7r0ttQk5HwT9l8k.roa
Signing time: Thu 02 Jan 2025 17:53:23 +0000
ROA not before: Thu 02 Jan 2025 17:53:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208414
IP address blocks: 45.138.104.0/24 maxlen: 29
45.138.105.0/24 maxlen: 29
45.138.106.0/24 maxlen: 24
45.138.107.0/24 maxlen: 24
185.8.236.0/22 maxlen: 24
2a0e:acc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:90:ae:4e:92:6a:a3:25:ce:b5:6c:42:43:44:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Jan 2 17:53:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d9d8beed6f2e7cb86eebd2db509391f04fd97c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:71:33:4f:70:b1:bb:48:cb:eb:a1:a4:88:
a8:24:9a:1b:f8:9f:fc:7c:b1:55:5d:3d:41:60:63:
aa:a4:db:44:0f:2b:74:7c:66:23:77:fd:bf:d1:f9:
be:46:91:07:f0:c7:0f:80:c1:80:36:21:4d:12:f7:
53:17:19:b3:3c:90:f5:63:15:5a:6f:34:4f:d2:f6:
85:b0:75:ef:01:97:b5:6c:46:8e:9b:0f:04:b2:b8:
07:5f:d8:bf:38:da:90:05:de:fb:9d:84:8b:d5:67:
52:d7:db:63:d8:90:ff:a6:3e:e1:86:10:f1:d8:9e:
8c:68:3b:55:ef:76:4a:90:07:95:0f:33:36:57:36:
c7:9f:eb:77:f1:75:01:96:81:bd:ae:2b:bc:7f:7d:
b8:5b:b9:b6:27:3e:89:f7:90:58:cb:03:52:1a:7a:
b8:cd:78:57:6c:2a:5f:66:4d:c1:5f:db:56:16:eb:
56:43:a2:07:af:92:f5:ef:12:d5:c5:25:33:5a:f4:
a3:86:a3:70:24:02:6e:b4:49:0a:bd:42:72:3a:20:
fe:58:61:17:fa:bd:da:d7:77:98:d5:72:dd:95:c7:
48:2c:da:91:7d:e1:49:b4:f4:b2:1d:65:f6:1a:1b:
ac:77:dc:e4:f2:78:e8:c6:0f:d7:73:1e:92:87:86:
6f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9D:8B:EE:D6:F2:E7:CB:86:EE:BD:2D:B5:09:39:1F:04:FD:97:C9
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/XZ2L7tby58uG7r0ttQk5HwT9l8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.104.0/22
185.8.236.0/22
IPv6:
2a0e:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:52:27:7e:95:0e:b5:9e:ef:fd:98:e4:e4:d0:99:5a:85:27:
ec:e0:46:cf:ec:46:8e:6d:e1:f6:45:2c:85:6e:24:a1:4e:6d:
66:96:61:7e:ec:14:43:bb:14:73:4a:21:7b:96:00:19:c0:78:
34:12:7c:04:90:81:fe:66:fb:ee:13:aa:a6:16:81:70:72:1b:
0c:f4:2f:24:c1:f7:10:7f:33:cb:2b:82:53:ed:62:b5:f7:26:
e0:32:b4:c2:41:8e:b2:4c:28:0c:22:db:57:d0:ca:2d:d7:de:
8c:bf:c4:1d:9f:8a:12:77:99:f2:19:00:a9:15:2e:4b:ea:7f:
3d:ce:78:35:4e:f1:81:b5:bc:0f:88:ee:4a:f2:19:6c:a1:3a:
32:3b:43:ae:12:2d:90:3d:88:d4:3f:66:9f:bc:0c:78:af:80:
98:90:18:2f:fa:7a:07:85:91:2e:8a:3a:a9:de:66:c3:4c:c4:
61:8f:b2:66:80:dd:5c:03:c7:c9:81:6e:79:52:50:14:b6:ef:
66:45:84:90:eb:20:23:ba:9d:1a:c7:37:71:55:20:46:ff:b5:
53:e7:0e:02:f7:75:e8:39:67:ea:af:12:f7:f9:fc:1c:9d:cb:
c1:e4:78:d1:63:4d:04:ce:95:79:f5:8d:55:df:92:df:1b:e3:
98:ab:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:06 2025 by rpki-client