Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/XEdeUqJtGvf3nuw3JhTcNjeaswY.roa
File: XEdeUqJtGvf3nuw3JhTcNjeaswY.roa (raw, json)
Hash identifier: dWEpXPSMYLWolJCKQgqJKX5Frojz6fYc/emv0J+yYog=
Subject key identifier: 5C:47:5E:52:A2:6D:1A:F7:F7:9E:EC:37:26:14:DC:36:37:9A:B3:06
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 019425218020C1696205E89A4083E4AF40B7
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/XEdeUqJtGvf3nuw3JhTcNjeaswY.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200596
IP address blocks: 85.184.228.0/22 maxlen: 24
91.212.42.0/24 maxlen: 24
135.84.148.0/22 maxlen: 24
147.12.16.0/20 maxlen: 24
185.101.196.0/22 maxlen: 24
2a00:5ea0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:80:20:c1:69:62:05:e8:9a:40:83:e4:af:40:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c475e52a26d1af7f79eec372614dc36379ab306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:f3:9f:ce:bb:c7:ec:a9:74:63:f7:10:52:
2d:4e:7b:e0:9f:e8:1d:18:97:47:c7:82:09:93:3f:
c1:9a:87:26:c0:7e:6d:88:4a:00:38:5c:15:b9:8c:
6f:38:4d:cb:3a:6d:65:9b:26:e4:6d:6d:43:8e:fe:
08:98:b1:cf:d4:aa:7f:a9:71:6c:f1:4a:b6:4c:7b:
2d:77:9a:f6:52:70:24:9c:ab:e3:7f:04:c2:d8:52:
79:a9:a5:02:fc:41:85:d6:3c:c3:5d:26:6b:59:d0:
aa:31:28:b5:08:29:4b:0f:0c:1f:25:d9:c4:fe:bd:
8b:77:b6:1f:62:69:b5:3c:0e:e4:91:b5:2f:49:b2:
ea:a8:b9:58:48:63:be:10:65:69:d4:30:d6:8f:f2:
43:e6:67:ff:de:0e:04:54:7f:52:85:d5:38:2d:c6:
b7:3e:59:a3:d7:4f:85:a1:27:7b:f0:66:b0:59:b5:
07:fa:14:b5:c7:13:ae:02:86:68:b3:12:7b:2c:7c:
d7:07:63:ef:93:16:60:09:74:ed:28:70:17:8c:d1:
4d:4c:fa:98:e3:aa:04:b5:16:a9:e0:65:67:67:0f:
a7:2d:40:b7:b4:8e:a9:f5:18:24:27:ec:fb:c8:5c:
f5:b6:09:14:b3:71:b4:dc:25:ea:ed:52:81:b8:77:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:5E:52:A2:6D:1A:F7:F7:9E:EC:37:26:14:DC:36:37:9A:B3:06
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/XEdeUqJtGvf3nuw3JhTcNjeaswY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.184.228.0/22
91.212.42.0/24
135.84.148.0/22
147.12.16.0/20
185.101.196.0/22
IPv6:
2a00:5ea0::/29
Signature Algorithm: sha256WithRSAEncryption
31:3e:3a:41:49:b5:a2:f7:3b:36:de:1f:a9:2e:8f:bb:23:8d:
17:68:8b:0d:f2:ed:43:8e:3c:55:31:b1:c1:9c:62:96:0a:1c:
35:0b:71:c6:a0:58:fb:75:a6:d7:69:78:b9:5d:b8:83:07:1c:
df:90:1d:bb:c6:75:7b:42:f8:27:6b:3b:2a:00:10:10:5c:24:
44:a1:09:70:80:20:b7:67:98:77:e3:84:12:eb:d0:80:0d:7b:
bc:7d:54:fa:f7:1e:d6:70:cd:fc:55:85:b9:e5:a3:d4:6f:4d:
45:d7:26:2a:15:72:bc:42:53:81:d6:64:da:97:fc:f4:70:01:
4a:d5:d6:c5:c4:7c:06:62:1c:e3:e7:76:f9:c7:b4:86:93:71:
27:90:1b:e7:83:25:6c:31:80:36:04:ac:3b:91:75:7a:16:dc:
3e:ff:af:fc:9f:c1:fc:87:03:5a:a9:15:12:c4:11:57:99:ad:
23:b1:02:0e:75:52:a6:a8:3a:c4:de:c8:6e:62:f0:cc:67:55:
55:25:a4:e9:bf:89:5e:4e:0d:ef:94:aa:6d:4f:fc:18:c2:ee:
90:62:b3:d0:d1:db:76:2f:be:5b:d3:24:e4:be:bf:f3:8e:f6:
9a:db:98:cd:14:58:e3:99:96:f6:09:7f:bd:47:f7:42:6f:ea:
c8:71:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net