Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/X5jYbn-h_3ZrymXeQcutqUSQLI0.roa
File: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (raw, json)
Hash identifier: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=
Subject key identifier: 5F:98:D8:6E:7F:A1:FF:76:6B:CA:65:DE:41:CB:AD:A9:44:90:2C:8D
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019425215E860A039AD9403D1DEBC209A188
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/X5jYbn-h_3ZrymXeQcutqUSQLI0.roa
Signing time: Thu 02 Jan 2025 03:48:51 +0000
ROA not before: Thu 02 Jan 2025 03:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48964
IP address blocks: 91.204.120.0/22 maxlen: 22
91.204.120.0/24 maxlen: 24
91.204.122.0/24 maxlen: 24
91.204.123.0/24 maxlen: 24
91.212.80.0/24 maxlen: 24
193.19.241.0/24 maxlen: 24
193.19.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5e:86:0a:03:9a:d9:40:3d:1d:eb:c2:09:a1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f98d86e7fa1ff766bca65de41cbada944902c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:af:9f:0a:37:8f:d3:46:c0:7a:e1:28:aa:46:
4b:ab:14:00:ef:6f:62:2e:b8:e4:95:63:e1:4a:ed:
3e:08:28:3c:f9:24:56:ae:4f:5f:f7:30:34:54:76:
a7:cc:e5:f9:4d:66:50:69:41:d9:86:d5:76:d4:6b:
80:1a:ee:50:74:10:c8:60:d1:4f:90:e1:2d:a5:1a:
1b:9e:4f:32:59:8f:84:5b:1d:83:da:b9:74:04:81:
ba:61:74:5a:4d:c9:5d:93:b4:86:e0:07:1b:0a:41:
b1:b0:9c:1b:4a:ed:ed:6c:31:1d:85:f7:17:fb:2d:
13:31:6a:89:78:7c:d5:73:4e:b5:24:8d:fb:e8:15:
04:21:30:63:66:a4:ad:17:10:5a:64:26:24:ad:12:
08:d7:c2:c9:a9:0f:fa:17:f1:79:52:33:ba:4c:52:
f1:32:86:79:5e:c4:55:4c:fa:00:60:4a:c9:e8:d5:
45:8d:df:77:70:b0:47:0b:e3:dc:fa:40:59:34:b9:
33:42:c3:ac:c1:af:41:5b:7a:33:db:8b:9a:12:16:
3b:af:fc:c3:5a:f2:97:b8:eb:40:3e:c0:6c:19:cc:
f9:68:e5:e0:93:b0:54:b9:c1:f9:21:90:26:a4:be:
ae:18:3a:f0:5d:17:78:4a:30:f1:a1:74:6c:86:89:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:98:D8:6E:7F:A1:FF:76:6B:CA:65:DE:41:CB:AD:A9:44:90:2C:8D
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/X5jYbn-h_3ZrymXeQcutqUSQLI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.120.0/22
91.212.80.0/24
193.19.241.0/24
193.19.243.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4d:73:2d:b1:a5:29:2f:b5:be:32:2a:ab:d4:7f:f7:16:10:
7f:87:e5:d2:31:e9:36:9d:07:a4:d6:0b:ca:80:8e:cf:d1:96:
5a:55:69:6c:9d:12:9b:ef:e5:9a:7f:f6:12:bc:d7:b2:68:ad:
be:57:02:82:57:f8:d6:ec:d3:af:0a:da:bc:4c:dd:2d:c0:0f:
01:1f:29:9e:30:56:43:9a:5a:ac:c3:87:65:e5:25:fa:3e:e4:
5b:f6:80:d1:dd:39:fe:82:eb:ab:db:82:9b:69:c5:2e:30:73:
82:2e:83:8e:6a:cf:f4:4b:3b:9c:1a:96:a6:6d:db:fc:8d:4f:
5b:a0:5c:59:94:cb:bf:cc:33:23:ea:0f:1d:8e:a9:5f:d3:c2:
5e:8d:16:5a:1c:76:ae:5e:50:c2:0e:58:e7:40:a6:5f:3f:73:
28:5d:91:81:f7:dc:7f:79:39:19:bc:d6:97:d7:61:0a:cc:65:
c8:ee:8e:85:e6:3d:9b:42:f7:7f:4b:ff:51:b5:45:cb:c1:5f:
22:2f:cc:fe:cf:22:f5:bb:cb:00:5d:b7:e6:7f:ba:e2:5f:8e:
71:c5:c4:5b:52:4b:c3:a9:0c:34:25:e5:aa:d6:6c:9e:5c:e3:
68:1d:02:c5:1a:88:47:af:21:cc:84:69:61:72:bd:69:5c:ed:
48:d7:46:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:23 2025 by rpki-client