Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xu_1ZV-2GRSZv7y2JlqetG-nyGc.roa
File: xu_1ZV-2GRSZv7y2JlqetG-nyGc.roa (raw, json)
Hash identifier: sRVeun/ZGJXFSsuSf/U5vI3pT6TMQ3oFSPKVVVn/FWk=
Subject key identifier: C6:EF:F5:65:5F:B6:19:14:99:BF:BC:B6:26:5A:9E:B4:6F:A7:C8:67
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019622374E6F343DB85F94349665087AC2C7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xu_1ZV-2GRSZv7y2JlqetG-nyGc.roa
Signing time: Fri 11 Apr 2025 00:19:32 +0000
ROA not before: Fri 11 Apr 2025 00:19:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 89.144.34.0/24 maxlen: 24
94.103.172.0/24 maxlen: 24
94.103.173.0/24 maxlen: 24
94.103.174.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:37:4e:6f:34:3d:b8:5f:94:34:96:65:08:7a:c2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 11 00:19:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6eff5655fb6191499bfbcb6265a9eb46fa7c867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:4c:a0:ea:fc:51:e4:ae:01:e6:16:f6:75:
51:e2:b6:6c:72:5a:e2:0d:73:20:df:99:61:19:de:
85:2e:00:cc:cd:87:99:4c:cd:9b:cd:d6:05:bb:f5:
ba:3b:48:b1:2d:4b:97:55:19:43:e6:d0:89:74:23:
d2:5c:df:69:94:94:dd:08:fb:e7:af:7c:06:39:d4:
3e:5d:76:7d:ab:66:a4:92:b2:78:11:1b:05:ce:3d:
30:c1:e6:3d:1a:f9:68:1a:c0:bc:76:91:5d:d6:8e:
f7:f9:d0:56:05:05:4f:fc:3b:a5:19:5b:bc:8a:57:
68:79:c1:1b:34:fd:48:bd:a6:99:1f:5d:94:67:aa:
fa:ba:ea:1a:4b:06:57:00:6f:8e:4d:4e:e2:d1:8e:
ea:36:1f:cc:4c:e8:f7:f3:c8:58:94:9f:60:47:11:
72:ab:04:b3:9c:fd:1d:ed:7a:28:f0:19:26:7d:3b:
68:31:0d:30:30:3e:52:1e:d6:9d:15:97:c0:00:68:
87:2a:6b:55:46:c0:ef:26:5a:b2:90:bf:b2:4b:12:
e7:91:90:0f:b6:48:90:8b:b2:e0:7f:56:50:0c:7b:
6e:7a:50:94:ff:e8:53:c5:e3:41:11:35:5d:43:0b:
1e:fd:24:52:7c:02:40:1d:38:17:2c:3e:8c:8a:66:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EF:F5:65:5F:B6:19:14:99:BF:BC:B6:26:5A:9E:B4:6F:A7:C8:67
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xu_1ZV-2GRSZv7y2JlqetG-nyGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.34.0/24
94.103.172.0-94.103.174.255
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d9:9b:c3:17:5e:e9:a0:6a:84:e0:6e:6b:61:40:e4:9b:fe:
30:fd:cc:04:f0:0b:9a:8b:5d:25:19:3a:10:67:fb:a1:b2:93:
83:fe:e7:0b:ca:2c:86:ad:cd:6c:de:8e:9c:93:c2:41:21:50:
8a:6b:18:06:33:c7:0c:b3:fa:d8:30:d3:00:26:df:9a:e2:c3:
1b:fd:68:39:b7:6d:47:0d:51:65:8f:4a:28:a0:c2:3d:84:da:
3f:3e:dc:0f:ca:d0:36:1e:51:c8:f2:8b:d9:eb:8b:d1:45:7c:
ae:0b:e9:87:1b:e3:e0:e2:6e:2f:00:32:1b:71:f4:a3:da:f5:
3a:7b:95:5d:6d:02:e2:4e:ed:16:20:05:c9:6a:4d:82:c1:2f:
d8:49:91:a2:10:33:aa:aa:6f:fc:c3:84:46:2b:a4:5d:e7:ec:
28:ca:73:68:f0:70:e8:e8:a4:51:07:20:b8:22:76:cd:1d:6c:
18:c6:14:bf:5b:d1:47:c1:73:4e:3f:ec:19:73:d8:f8:49:ca:
48:5c:2b:cd:c0:10:a9:3e:c4:2b:38:09:20:cb:85:fc:da:83:
76:f3:0e:e7:62:ad:a1:31:fd:2d:d3:9c:9c:df:18:e9:2c:c9:
3e:41:c6:06:b6:dc:88:7d:b2:a5:91:84:cf:16:f5:5c:af:fb:
16:6e:68:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net