Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa
File: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (raw, json)
Hash identifier: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=
Subject key identifier: C6:A2:47:B4:1E:CD:BF:4A:D4:F2:70:31:B6:32:38:17:C4:AC:CE:2C
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 0194258F51A4EC8CA59B0C5D4702E877FA12
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42073
IP address blocks: 185.64.92.0/22 maxlen: 22
194.39.240.0/24 maxlen: 24
194.102.202.0/24 maxlen: 24
194.169.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:51:a4:ec:8c:a5:9b:0c:5d:47:02:e8:77:fa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6a247b41ecdbf4ad4f27031b6323817c4acce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:4c:f2:0b:32:ec:a1:38:53:77:e3:cd:a9:
20:98:3b:9b:61:6e:bb:a1:fe:35:8a:1c:38:0d:bb:
91:64:0c:d6:f8:c2:78:ca:71:d9:3e:ed:a0:f8:26:
47:c3:c1:e6:9b:06:73:b9:19:01:80:ac:71:98:41:
f8:7d:83:60:fe:f8:c4:67:16:b6:98:cf:a6:15:3f:
43:05:9f:bd:e5:d5:cb:eb:81:04:89:f3:57:ed:d5:
fa:ec:33:9d:77:d8:e3:21:5f:a1:cc:c1:8d:6b:db:
6c:9f:53:22:9a:3b:1e:22:49:6a:20:df:54:e5:1a:
f4:4e:43:2d:98:a8:ce:63:10:da:7b:73:c7:6c:82:
9a:2a:49:d8:82:0c:ae:23:eb:03:b9:6a:67:39:7c:
75:cc:ee:d8:f8:c7:8d:ff:e8:25:5c:d1:a4:0e:53:
85:2c:88:40:02:20:49:a6:52:e4:98:bb:24:e9:26:
a7:47:75:7d:da:a0:82:6a:44:2d:0f:7f:6b:54:4f:
bd:b4:52:b3:5e:7c:9b:c7:48:12:da:7d:1f:e7:28:
e0:4b:9d:3d:10:71:e8:36:df:ee:bc:8a:e9:8e:1f:
bb:56:d9:47:27:51:f7:4c:f4:10:5b:ad:f8:56:85:
cf:66:ba:f2:bb:37:f8:73:09:51:6d:aa:ff:c5:4d:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A2:47:B4:1E:CD:BF:4A:D4:F2:70:31:B6:32:38:17:C4:AC:CE:2C
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.92.0/22
194.39.240.0/24
194.102.202.0/24
194.169.233.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0e:bf:b0:4a:10:ef:85:8d:2a:f8:62:b8:9a:85:43:a7:83:
14:c3:24:8d:41:ad:35:81:46:c3:51:5c:c6:8a:d7:4c:d8:35:
a8:08:45:91:2a:9d:4b:8c:8b:61:11:e8:e0:3d:9d:ab:7f:68:
15:5f:cd:f8:f7:6e:ba:61:f8:ce:bb:80:ad:6e:4c:00:44:3a:
59:f8:1a:6c:9e:82:e6:15:e9:f2:23:b9:4a:e0:9c:dc:99:ef:
34:30:dd:f6:5c:77:41:d4:01:b7:2d:64:fa:87:ee:a0:f5:cb:
ad:96:c9:1b:32:52:e5:ef:df:15:d4:51:cb:82:25:eb:ce:c7:
10:d7:d0:55:1a:25:17:77:36:53:34:df:00:0e:47:19:a1:21:
51:cf:fe:23:55:b1:c8:9b:58:60:f1:a4:12:0b:4b:73:9c:3e:
54:82:49:9d:8d:fd:8b:32:93:f6:e1:d1:ba:77:84:a6:40:4d:
a8:9b:56:94:ab:a8:94:73:eb:bf:59:a0:1d:28:9a:8e:59:84:
f0:a5:a7:3b:f9:76:aa:09:9f:1f:70:4e:28:13:83:f7:0d:5c:
28:66:ad:7c:c3:51:a6:8f:72:21:3a:ef:85:9e:b5:cf:b3:64:
2f:76:66:1f:57:a3:4d:b8:9a:de:46:9e:2b:5d:ae:55:ea:b5:
29:3c:27:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:19 2025 by rpki-client on console.sobornost.net