Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/XpjE8bYBAcZcftI7y41i3rctDAE.roa
File: XpjE8bYBAcZcftI7y41i3rctDAE.roa (raw, json)
Hash identifier: 66wXEUmvBw0qNiIlax3TdNLczHMr0GQI6DaDmp4Xizk=
Subject key identifier: 5E:98:C4:F1:B6:01:01:C6:5C:7E:D2:3B:CB:8D:62:DE:B7:2D:0C:01
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 019421B1C89AF9C7C939ED5160947EAE2905
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/XpjE8bYBAcZcftI7y41i3rctDAE.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51964
IP address blocks: 149.238.0.0/19 maxlen: 24
149.238.32.0/19 maxlen: 24
149.238.64.0/19 maxlen: 24
149.238.96.0/19 maxlen: 24
149.238.128.0/19 maxlen: 24
149.238.160.0/19 maxlen: 24
149.238.192.0/19 maxlen: 24
149.238.224.0/19 maxlen: 24
192.77.114.0/23 maxlen: 24
192.112.208.0/24 maxlen: 24
193.33.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c8:9a:f9:c7:c9:39:ed:51:60:94:7e:ae:29:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e98c4f1b60101c65c7ed23bcb8d62deb72d0c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:08:53:1d:70:89:33:94:f4:69:fe:2c:69:
b9:32:02:85:93:f6:7b:39:37:33:03:1a:db:93:34:
d0:b9:2d:7b:11:d1:a8:34:f4:b6:3d:fa:a7:3e:a7:
c5:54:b8:26:78:4c:fc:f0:a1:d6:fa:7f:c2:2d:b4:
83:7f:b0:8d:f3:b7:3a:83:6a:f9:07:19:f4:76:0f:
d8:e7:da:98:29:15:16:a0:3b:e7:34:5f:7e:f7:11:
44:89:e2:88:44:f5:08:c1:80:7d:75:7e:5d:7e:1e:
0d:7c:01:a8:09:71:4e:fd:c4:e6:df:57:f0:93:2c:
ac:27:bd:68:3c:39:12:91:15:d2:92:64:5d:77:14:
12:12:2f:1e:39:ff:f7:78:e7:73:11:80:7a:30:a0:
b3:b6:db:20:01:e8:81:44:8f:d6:63:c8:81:31:13:
d0:7e:c6:dd:00:7c:f0:9d:03:f1:d7:6d:d6:5a:78:
b5:3b:f3:d6:1c:0c:af:a2:00:fa:82:3c:d0:96:87:
5e:1b:cc:85:cd:68:30:cb:1a:7d:9a:25:a7:8a:33:
fc:05:9a:94:10:5a:6b:6f:88:1c:e5:dd:39:d9:f0:
53:72:7b:7d:3e:f0:29:be:73:56:66:b4:b6:0a:c1:
70:ca:78:b2:7e:0a:f8:24:8d:3f:24:e9:86:ba:7e:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:C4:F1:B6:01:01:C6:5C:7E:D2:3B:CB:8D:62:DE:B7:2D:0C:01
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/XpjE8bYBAcZcftI7y41i3rctDAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/16
192.77.114.0/23
192.112.208.0/24
193.33.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:e9:17:12:62:c4:7a:9a:8c:dd:0d:46:55:cf:1b:73:23:57:
4c:30:3a:43:b0:da:fc:d3:f0:fa:90:1b:e0:df:92:d3:9f:aa:
be:ff:8e:56:a9:c4:b0:0b:60:d9:c3:9d:ab:64:e0:ea:d2:55:
1b:d0:7a:cb:44:91:3f:b6:44:74:bd:7c:94:66:84:58:0c:0b:
b6:d0:14:83:0e:71:73:27:80:38:74:5c:d6:de:0e:97:87:3b:
d5:3c:f5:1c:9c:65:e2:70:df:b8:9d:5a:2a:05:78:46:95:e5:
97:27:2b:53:cc:94:d0:f5:5a:89:86:61:5a:5c:dd:eb:06:92:
7e:1f:60:be:a4:58:d3:e8:c4:e3:12:2f:3a:24:da:b3:e4:8a:
b0:cc:e9:4f:00:93:c2:8f:15:35:8b:46:35:87:84:7b:e2:ff:
cd:cc:bf:52:e9:b4:d3:ac:3c:a1:36:12:bb:56:47:0b:27:48:
c2:d9:6f:66:29:a2:69:2a:52:79:80:ce:9b:41:70:a1:e0:f0:
b7:97:32:22:c4:38:8c:b5:fe:ba:69:14:94:49:9a:47:40:b0:
03:fb:20:35:93:f7:b5:6a:07:31:b7:9d:48:4d:ca:22:4a:af:
ca:50:ae:5b:07:94:7a:26:ca:a3:36:dc:e4:cf:4b:99:54:97:
d2:a9:d1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:14:09 2025 by rpki-client on console.sobornost.net