Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/x4aksm8H5U_SoWV9w4ojBxWjtSw.roa
File: x4aksm8H5U_SoWV9w4ojBxWjtSw.roa (raw, json)
Hash identifier: DpLDxBcf+XBzD3AIM/0hCbVFFthMKuVEgRBA/YNYRu0=
Subject key identifier: C7:86:A4:B2:6F:07:E5:4F:D2:A1:65:7D:C3:8A:23:07:15:A3:B5:2C
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 01942368E3C42968C40DF85E86D50516A69D
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/x4aksm8H5U_SoWV9w4ojBxWjtSw.roa
Signing time: Wed 01 Jan 2025 19:47:44 +0000
ROA not before: Wed 01 Jan 2025 19:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57407
IP address blocks: 185.217.80.0/22 maxlen: 22
195.88.108.0/23 maxlen: 23
2001:67c:24f8::/48 maxlen: 48
2a0b:c6c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e3:c4:29:68:c4:0d:f8:5e:86:d5:05:16:a6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Jan 1 19:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c786a4b26f07e54fd2a1657dc38a230715a3b52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:33:d7:ba:91:b0:3e:d8:b6:40:be:78:4a:
64:89:f6:50:60:6c:0b:3a:61:76:a6:59:05:38:9c:
67:1c:15:03:fc:22:a1:b1:2d:5d:bf:2a:4e:58:06:
5f:ce:e1:0b:07:91:4e:c2:a2:1a:2e:61:fa:b0:00:
e3:6a:1c:89:d5:09:35:f8:7c:de:ab:49:c8:a3:9d:
e1:8e:ba:8f:fc:96:8b:a5:27:d0:fc:41:7a:d5:1b:
cd:38:2d:c5:6e:61:08:73:fe:5d:6f:3f:7d:3b:b1:
70:4e:fb:d4:67:98:18:6e:ae:2f:18:87:69:20:21:
c3:83:27:b5:c8:94:b1:53:1e:31:c3:f0:d9:70:2e:
31:ae:f6:00:41:2d:82:82:a8:14:36:a8:86:27:68:
03:3f:6f:0b:ec:2e:2d:2f:8e:bc:c8:4e:3d:d2:3d:
bb:5d:e7:6a:bd:43:ec:e2:73:83:8a:62:a0:92:53:
4e:c7:de:d5:ac:74:42:fe:14:1f:84:29:42:4e:2f:
ee:df:da:ee:41:6f:18:56:02:d8:1a:e6:ef:c9:92:
8d:74:55:d1:05:d7:ae:dd:9c:f0:69:67:37:b6:86:
e8:78:bd:5e:23:d8:c1:e1:50:d7:06:e8:10:d3:78:
56:5b:9c:bb:88:cc:eb:5d:dc:c5:bc:02:de:00:41:
97:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:A4:B2:6F:07:E5:4F:D2:A1:65:7D:C3:8A:23:07:15:A3:B5:2C
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/x4aksm8H5U_SoWV9w4ojBxWjtSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.80.0/22
195.88.108.0/23
IPv6:
2001:67c:24f8::/48
2a0b:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:98:d8:74:42:e2:d2:9e:5a:18:5e:50:ad:4d:14:8c:a2:d2:
70:a2:7f:35:b0:ff:69:c5:db:ab:93:61:2c:bd:47:25:60:88:
ee:be:fe:47:bb:f5:42:5b:da:ee:02:e9:5f:6e:17:54:27:30:
1c:7f:9d:85:4f:d3:94:2d:79:6a:3f:de:49:0b:41:37:7c:16:
aa:0c:be:6d:6c:bf:94:44:4e:16:0f:83:cc:80:b4:14:a5:7a:
ed:8f:03:eb:26:09:18:4d:20:05:6e:70:04:3f:1b:cf:ad:58:
8c:f9:a1:3b:e1:a4:03:f5:fd:ee:20:93:3d:2b:28:07:8f:b7:
1d:08:cb:1a:1c:92:ee:88:4f:2d:bd:fe:8a:b0:5a:05:8c:b6:
4b:22:cb:0f:f0:9f:32:fa:fc:fd:f1:3b:10:0e:7d:54:e5:a3:
5b:07:08:b4:26:f7:35:0f:57:08:77:aa:a3:82:04:d2:bc:8f:
01:1c:7e:78:6b:69:33:f2:79:1d:cd:54:58:8f:f8:97:af:fc:
4f:f9:5c:49:50:aa:62:ee:39:46:c3:cc:1e:19:d9:f8:ac:35:
c0:60:31:2f:71:f6:f6:cd:b8:dc:f0:85:32:6d:40:d9:34:88:
e2:30:c4:89:61:45:1f:17:1e:4e:f7:3e:14:6b:8e:00:9a:9d:
01:e3:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:55 2025 by rpki-client on console.sobornost.net