Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/X4Z-v2DjsEUNaJu74fV0VmppsH4.roa
File: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (raw, json)
Hash identifier: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=
Subject key identifier: 5F:86:7E:BF:60:E3:B0:45:0D:68:9B:BB:E1:F5:74:56:6A:69:B0:7E
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 0195B83B0209075AE511D779A37521E6B012
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/X4Z-v2DjsEUNaJu74fV0VmppsH4.roa
Signing time: Fri 21 Mar 2025 10:23:49 +0000
ROA not before: Fri 21 Mar 2025 10:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49163
IP address blocks: 62.93.96.0/21 maxlen: 24
85.13.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:3b:02:09:07:5a:e5:11:d7:79:a3:75:21:e6:b0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Mar 21 10:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f867ebf60e3b0450d689bbbe1f574566a69b07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:48:c8:8d:94:f5:b4:38:fc:d9:89:76:40:
cd:3e:2a:22:47:34:c3:81:1f:03:cf:ca:1e:fc:8b:
31:d0:48:c5:38:83:fb:35:f7:6d:e0:1d:10:49:93:
d3:96:23:5f:b7:4d:98:51:12:82:1e:15:61:8b:44:
38:0e:99:af:e7:30:f5:1c:15:b1:8d:9e:5b:00:3f:
3a:ad:29:4a:d1:03:d2:5a:07:69:22:f8:3e:e4:c4:
68:ee:d4:8f:a3:57:16:47:c3:7f:54:2e:c1:97:84:
13:23:04:cf:91:bc:f8:3f:cf:b7:dd:00:94:fd:41:
5c:45:cc:ff:a0:4d:26:5c:9f:b8:f8:22:93:73:44:
44:79:9d:25:a7:c9:82:be:8f:60:d9:c4:ca:8d:4f:
ad:c6:91:c1:e1:92:73:bf:7b:41:7f:a1:84:b3:c5:
87:cf:44:98:97:14:1a:18:69:6f:6e:79:bc:93:df:
62:99:11:ad:d3:3b:88:4e:f4:80:a7:e3:d0:e9:bc:
e1:73:18:4a:41:fb:07:bc:89:2b:16:8d:a1:44:6d:
fc:12:58:d9:1f:90:d9:ad:70:ed:32:bd:aa:e1:3b:
85:af:2d:a4:d2:fc:3e:45:8a:b9:0b:7c:e9:b3:ca:
7e:02:e2:3f:41:18:cb:55:1a:98:b8:76:a4:d6:3a:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:86:7E:BF:60:E3:B0:45:0D:68:9B:BB:E1:F5:74:56:6A:69:B0:7E
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/X4Z-v2DjsEUNaJu74fV0VmppsH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.96.0/21
85.13.24.0/23
Signature Algorithm: sha256WithRSAEncryption
36:85:d6:a5:53:b4:50:ea:19:b8:86:a1:4e:51:e6:61:b1:aa:
10:6b:4e:d0:20:f3:0e:34:5b:18:65:30:d7:ca:a1:da:9e:dc:
db:46:26:32:a9:17:08:dd:76:e5:38:03:be:20:c5:a9:d7:b7:
3e:b0:2f:36:c4:76:99:07:a4:63:c5:c7:e6:af:be:32:68:18:
51:7d:0d:e3:04:8b:08:d0:56:d6:53:9e:40:de:d7:bc:a9:b6:
8a:97:c5:b5:05:60:e5:4e:bf:70:ab:4f:1f:07:52:7c:51:90:
9e:9f:8d:84:2c:a8:bc:69:23:36:41:b2:e9:ad:ea:ae:7f:4b:
e1:96:a8:fb:4d:8e:96:89:25:75:7a:1f:9f:d4:75:f1:2c:cb:
eb:54:47:b7:f6:2a:5c:a8:86:2a:16:8c:75:ea:79:85:08:4c:
1f:5b:12:7d:70:b1:d6:3e:70:8c:bb:da:20:c1:05:89:e7:d3:
1c:e7:ec:26:98:68:e2:85:23:87:f4:65:9b:f5:d7:74:be:46:
fd:3b:24:3a:6f:41:66:83:02:92:5a:52:2f:09:a9:73:ec:e5:
fb:cc:e2:55:2e:ca:40:64:d7:98:f7:99:43:0a:1e:e1:47:8a:
7c:d3:a1:d8:e8:a5:46:94:db:b4:5f:65:29:6f:ed:d5:32:37:
04:6e:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net