Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/X5XVqWgdEw3BemC13fzjf0fPePQ.roa
File: X5XVqWgdEw3BemC13fzjf0fPePQ.roa (raw, json)
Hash identifier: qs+9y7O5toIGLZI56PNRUO4vwR65yR7np8j1ISWn3P0=
Subject key identifier: 5F:95:D5:A9:68:1D:13:0D:C1:7A:60:B5:DD:FC:E3:7F:47:CF:78:F4
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B22AFDF57F19AC33ACD5E35E578BC0
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/X5XVqWgdEw3BemC13fzjf0fPePQ.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20551
IP address blocks: 194.177.216.0/24 maxlen: 24
195.251.8.0/21 maxlen: 21
2001:648:2590::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2a:fd:f5:7f:19:ac:33:ac:d5:e3:5e:57:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f95d5a9681d130dc17a60b5ddfce37f47cf78f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:68:85:2c:7e:e6:ea:81:e6:7f:9b:7c:5c:
d7:19:f4:3e:19:a0:14:fb:cb:36:72:f6:39:3f:70:
54:c9:53:36:6b:19:dc:db:56:85:08:25:94:98:e4:
17:4a:8a:4b:d1:df:dc:7f:53:37:c4:52:b9:0f:fe:
e1:ea:cb:b4:50:3f:f1:4d:e4:8c:dd:42:1a:ae:bd:
1d:06:77:69:90:ec:db:71:c1:55:19:24:a0:3c:38:
bd:03:39:19:91:81:06:b5:52:5f:e3:ce:92:69:03:
1b:86:51:37:83:38:f6:7a:00:d5:03:2a:f4:3a:f3:
22:09:cb:99:de:a3:07:18:1e:3a:58:91:40:5d:33:
57:c8:b7:ba:a4:93:6d:73:ee:df:5b:a9:53:e1:15:
35:28:d3:f5:2c:f5:a9:b3:e5:65:a9:02:23:b5:63:
79:4c:b9:ad:23:b9:fe:70:f3:e0:95:80:a1:df:3d:
b2:d6:4d:76:ba:36:0f:01:41:e8:36:28:8b:d9:26:
d4:3a:19:e0:f8:34:1b:4a:1a:4d:eb:cd:11:b7:e3:
fe:4f:21:2b:65:6d:65:3b:a7:e5:38:24:c2:b0:d9:
80:87:7b:f1:de:33:1e:6c:54:50:8f:25:72:2c:28:
ec:c1:85:29:ae:45:3e:85:e2:24:70:a8:03:3a:ff:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:95:D5:A9:68:1D:13:0D:C1:7A:60:B5:DD:FC:E3:7F:47:CF:78:F4
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/X5XVqWgdEw3BemC13fzjf0fPePQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.216.0/24
195.251.8.0/21
IPv6:
2001:648:2590::/48
Signature Algorithm: sha256WithRSAEncryption
99:e2:09:a3:e5:85:5e:86:b2:d8:78:2d:77:e9:85:4b:c7:9f:
c8:ed:07:94:45:7a:9d:0f:bd:5c:e1:12:7e:02:b9:d4:5d:fe:
e2:ed:7a:04:3f:7d:59:52:ef:18:3b:e6:75:40:16:cf:4e:60:
62:d3:32:48:29:2d:ac:7e:0c:41:85:52:95:9b:63:68:29:2b:
b3:32:eb:3f:3b:56:68:94:ac:4b:99:38:15:23:7d:ce:7c:b6:
65:30:a0:ea:52:d3:d7:05:fc:d7:ba:39:d7:c2:02:c1:a6:61:
ba:02:3a:03:22:dd:57:88:08:6b:ba:4d:27:67:80:e3:7b:3a:
87:7e:a0:69:04:03:2e:80:64:ac:25:67:07:4d:e5:55:93:bf:
7e:d0:41:d3:cb:4f:82:00:3b:7f:76:b1:f0:e2:46:58:e3:53:
6b:5e:6d:9b:75:d4:da:30:7f:86:de:c9:07:e3:fe:ca:d6:f9:
7f:13:fe:00:69:48:13:ce:87:10:97:81:43:ac:9b:5e:62:8e:
7b:eb:e4:b5:c6:b9:84:b6:fa:0e:63:bd:53:23:0a:57:f6:9d:
f9:55:b6:27:94:55:ea:87:52:07:99:5c:be:18:38:f3:a6:41:
f1:a6:eb:c0:50:7e:b6:14:f2:d9:62:f6:34:f8:41:22:73:c2:
ef:70:0d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net