Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/XiX2H6KV22GA3qGzZguRskRxlFM.roa
File: XiX2H6KV22GA3qGzZguRskRxlFM.roa (raw, json)
Hash identifier: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=
Subject key identifier: 5E:25:F6:1F:A2:95:DB:61:80:DE:A1:B3:66:0B:91:B2:44:71:94:53
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 0194258F27EC53D4F6D44B714D67DDA51048
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/XiX2H6KV22GA3qGzZguRskRxlFM.roa
Signing time: Thu 02 Jan 2025 05:48:46 +0000
ROA not before: Thu 02 Jan 2025 05:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202422
IP address blocks: 185.105.0.0/24 maxlen: 24
185.105.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:27:ec:53:d4:f6:d4:4b:71:4d:67:dd:a5:10:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e25f61fa295db6180dea1b3660b91b244719453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:a6:84:a1:1c:fc:57:26:ef:93:3a:c8:2f:
1e:cc:db:12:f7:6f:8e:3e:1a:11:d5:a9:08:91:34:
33:78:04:23:ac:79:33:23:e4:61:0f:63:08:45:4e:
f5:c9:62:6c:5b:4a:b5:d9:52:99:ce:a4:47:25:ef:
50:7d:e7:27:90:f2:60:8d:08:10:4e:a8:ae:00:2f:
4e:fb:8d:aa:11:fb:53:de:75:df:23:84:b2:c5:6d:
55:b3:8f:d3:ec:64:aa:1b:61:ca:5e:5e:01:b2:cc:
bf:e8:dc:0a:dd:03:bd:df:7a:5e:28:da:e4:c1:e0:
7c:f2:5f:7e:27:bd:79:7d:39:3d:6d:32:90:24:fc:
82:2f:e7:b6:95:6c:e8:d9:15:68:ee:7b:d4:9c:34:
35:96:a7:2a:c5:1d:ab:f5:0c:dc:37:46:19:f3:be:
d1:a1:cd:62:f8:48:08:05:d6:f3:e7:57:53:2e:6b:
a8:20:77:b5:b5:ae:64:e8:46:1a:13:b2:8a:46:6b:
6d:d7:99:e2:e5:b9:8b:fe:d5:8f:12:e2:f0:e2:68:
11:45:fa:f3:d7:20:c2:fa:5a:e1:7c:0d:ab:75:8b:
67:5b:24:cd:2d:19:31:ca:8d:9e:f4:af:51:06:9e:
31:5f:8c:4a:2b:d5:6b:ca:8b:96:ac:64:13:3b:44:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:25:F6:1F:A2:95:DB:61:80:DE:A1:B3:66:0B:91:B2:44:71:94:53
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/XiX2H6KV22GA3qGzZguRskRxlFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.0.0/24
185.105.3.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a9:b6:16:59:82:ee:82:61:97:50:9c:84:1b:dd:54:d7:8f:
e2:9a:0e:7a:1f:22:72:93:10:8b:0e:91:11:c8:ff:c1:70:57:
b2:80:9b:7d:5d:b5:7e:28:94:bd:9b:84:ff:09:7a:cc:f1:4c:
fb:f7:92:cf:6c:3c:cb:83:2a:84:bb:ad:29:89:ce:b7:68:a8:
0c:d2:50:8b:c1:40:35:c3:e3:71:bb:bf:bc:77:1e:57:7e:a9:
0b:94:99:67:5f:f2:0a:53:ee:af:1b:79:60:11:7a:29:2b:3b:
a8:64:62:ea:40:86:d0:18:95:54:dc:a0:55:c3:e6:bf:03:8d:
4e:2d:40:fc:f6:9f:d9:6d:37:37:47:b4:fc:d6:72:c2:b6:eb:
a7:4b:99:4a:03:dd:ad:18:49:3f:aa:24:d6:90:1a:73:e9:b0:
ce:e0:ac:f1:85:13:1f:10:58:8c:1f:69:a1:3c:16:54:bd:3d:
fe:67:22:6e:d3:b3:47:e7:97:40:4f:1a:b7:06:17:c6:14:9f:
04:30:d9:8c:ac:fc:27:66:65:e0:ec:8f:f6:3f:6c:c9:6b:d8:
23:1a:23:a3:67:cb:09:31:b8:06:8b:13:12:ba:04:f6:ad:86:
e5:44:c1:dc:3e:6f:56:3e:d5:0c:bd:d6:3f:29:43:cb:9a:e7:
27:61:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net