Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/xouPf0QMMTAL1EjtGFEB8zKRaaw.roa
File: xouPf0QMMTAL1EjtGFEB8zKRaaw.roa (raw, json)
Hash identifier: RP5CrDZJxrGj2kXL8u1z5sEk/FoXNQ43FbO4Ypi7J9o=
Subject key identifier: C6:8B:8F:7F:44:0C:31:30:0B:D4:48:ED:18:51:01:F3:32:91:69:AC
Certificate issuer: /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial: 0195D20C8EA7706B0E0C2F339BA78F9D65F8
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/xouPf0QMMTAL1EjtGFEB8zKRaaw.roa
Signing time: Wed 26 Mar 2025 10:43:12 +0000
ROA not before: Wed 26 Mar 2025 10:43:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39032
IP address blocks: 87.237.232.0/21 maxlen: 21
89.236.216.0/22 maxlen: 22
94.141.68.0/23 maxlen: 23
94.141.76.0/24 maxlen: 24
94.141.81.0/24 maxlen: 24
94.141.92.0/24 maxlen: 24
217.30.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:0c:8e:a7:70:6b:0e:0c:2f:33:9b:a7:8f:9d:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Validity
Not Before: Mar 26 10:43:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c68b8f7f440c31300bd448ed185101f3329169ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:25:31:ae:45:a4:13:30:e5:2f:db:fa:65:
79:a5:bd:d8:7e:f3:85:20:40:07:29:24:5e:9d:a6:
14:16:6b:77:bf:98:4f:92:e7:d6:6c:96:17:d2:73:
a4:0c:35:29:c1:47:17:62:89:dd:23:46:d5:e3:e6:
43:e7:7d:fe:83:eb:c3:b4:94:96:f3:cd:0a:e5:a2:
db:98:60:05:d6:d5:83:f3:eb:2c:dc:7b:b1:18:da:
7f:ac:04:0f:67:b5:ad:53:ca:8e:74:94:ab:df:19:
77:9d:d9:81:42:fd:2e:b2:5f:be:f1:0d:ec:d4:aa:
39:6e:5f:ab:53:10:5f:c2:67:9d:94:eb:91:e9:66:
5f:aa:31:14:e5:c4:ee:2a:a4:b7:58:c9:5e:29:da:
ff:27:a2:3c:53:3f:76:8e:f3:3b:c0:ad:e8:44:98:
65:47:bb:ca:a6:a4:bb:f7:e6:e3:e4:da:6b:4d:f7:
79:5c:55:94:7d:98:b2:89:0c:92:e5:f1:2c:2c:66:
72:61:3f:e8:9c:39:cc:dc:97:c2:7e:bf:c4:ce:ad:
a6:6b:a7:48:c0:8f:9b:89:9a:9b:54:14:19:31:82:
d0:7e:38:f3:88:24:9d:70:7e:16:58:f6:83:73:85:
64:ae:d2:c2:3f:09:06:ca:ac:89:ce:f1:6b:aa:87:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8B:8F:7F:44:0C:31:30:0B:D4:48:ED:18:51:01:F3:32:91:69:AC
X509v3 Authority Key Identifier:
keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/xouPf0QMMTAL1EjtGFEB8zKRaaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.232.0/21
89.236.216.0/22
94.141.68.0/23
94.141.76.0/24
94.141.81.0/24
94.141.92.0/24
217.30.160.0/20
Signature Algorithm: sha256WithRSAEncryption
97:69:d4:cb:93:d1:07:32:51:42:a1:41:d7:b0:0d:62:d0:b0:
0d:e5:43:d7:6a:12:da:24:83:24:1f:3a:fc:49:6d:a5:d0:c4:
68:fb:47:28:d2:70:7d:0c:ee:e2:12:ae:a0:bf:b0:ea:a4:3b:
7a:4f:72:03:41:f5:f6:6c:10:60:75:54:85:3b:1f:b8:d8:e5:
d6:c2:fe:35:da:2d:80:e3:cb:77:4c:fa:2d:13:ec:fa:87:e5:
02:be:d6:97:2d:1f:40:d4:35:60:b4:34:a8:c6:85:03:35:11:
e0:e3:44:57:aa:9f:30:32:e4:f0:87:d9:68:21:7e:ae:ce:05:
aa:72:af:98:6f:a6:74:4a:4d:a3:05:a6:4d:04:23:49:b3:0f:
cd:08:8f:7b:ed:f9:40:a9:17:a0:93:fd:f6:ac:7a:2e:73:82:
51:03:db:c7:e1:1b:69:0c:e6:e7:bf:66:4a:34:ce:37:b9:1f:
cc:fa:2b:49:b2:42:79:9d:1b:d3:ea:e9:17:1a:db:d8:26:05:
cc:72:f8:1b:95:b7:f5:eb:36:02:69:4d:48:23:2d:aa:38:45:
20:97:7d:c7:06:84:fd:ea:12:43:3b:86:26:75:fc:5b:b3:2a:
bb:2a:1e:14:52:67:18:d2:7a:f0:d7:a8:56:b6:42:b4:1e:ce:
ef:e5:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net