Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/XxQYUuyDfDmvEH-_h4xcYdCTTls.roa
File: XxQYUuyDfDmvEH-_h4xcYdCTTls.roa (raw, json)
Hash identifier: sOyHTNSLK1nXbLPuDkiUpZ37v4YFW/N/3OvLA+CjJUA=
Subject key identifier: 5F:14:18:52:EC:83:7C:39:AF:10:7F:BF:87:8C:5C:61:D0:93:4E:5B
Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial: 019422FB85BA3E7D8C7E458B7F18BDC87A62
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/XxQYUuyDfDmvEH-_h4xcYdCTTls.roa
Signing time: Wed 01 Jan 2025 17:48:16 +0000
ROA not before: Wed 01 Jan 2025 17:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41878
IP address blocks: 217.29.224.0/24 maxlen: 24
217.29.225.0/24 maxlen: 24
217.29.226.0/24 maxlen: 24
217.29.227.0/24 maxlen: 24
217.29.228.0/24 maxlen: 24
217.29.229.0/24 maxlen: 24
217.29.230.0/24 maxlen: 24
217.29.231.0/24 maxlen: 24
217.29.232.0/24 maxlen: 24
217.29.233.0/24 maxlen: 24
217.29.234.0/24 maxlen: 24
217.29.235.0/24 maxlen: 24
217.29.236.0/24 maxlen: 24
217.29.237.0/24 maxlen: 24
217.29.238.0/24 maxlen: 24
217.29.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:85:ba:3e:7d:8c:7e:45:8b:7f:18:bd:c8:7a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
Validity
Not Before: Jan 1 17:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f141852ec837c39af107fbf878c5c61d0934e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:c6:61:c9:e1:da:bf:a6:2e:c6:e7:c2:87:
73:55:b2:b0:d1:7f:aa:b7:61:63:2f:e5:59:9c:65:
46:d5:59:b4:bd:e2:0a:df:7a:e0:de:54:20:30:18:
d4:87:50:c8:51:5d:39:3f:26:a6:45:f7:ff:c1:34:
2b:13:fc:e4:7a:d4:28:a8:f9:74:ba:92:12:34:1b:
21:0d:3c:57:da:98:71:71:63:29:73:3f:0e:ab:31:
3f:29:1d:81:e9:d2:f5:7a:05:37:2d:d2:54:3a:1f:
a0:51:70:eb:11:b7:29:f1:81:b3:3d:55:b9:3f:97:
ea:67:84:37:da:f3:e0:b7:23:e3:a5:95:15:3a:cb:
23:44:13:bd:5a:bd:5e:4c:5d:63:72:7b:3c:26:c5:
65:c7:32:e7:07:a6:29:ee:28:86:e8:0e:0e:46:7c:
e8:c6:c6:23:96:6e:17:ba:3d:5e:8e:75:8c:2e:25:
29:78:1c:ab:c6:c9:7f:5c:6e:70:98:b7:e7:89:22:
28:0c:d5:d7:64:68:97:e0:ec:28:aa:e0:09:c9:f4:
a0:25:19:52:dc:18:5a:ce:51:7a:b9:24:12:a4:8e:
86:9f:da:70:7b:ff:32:9b:e8:b5:ec:83:6f:1f:bd:
5a:b3:14:70:8f:d1:f2:7c:5d:58:47:dd:87:0f:04:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:18:52:EC:83:7C:39:AF:10:7F:BF:87:8C:5C:61:D0:93:4E:5B
X509v3 Authority Key Identifier:
keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/XxQYUuyDfDmvEH-_h4xcYdCTTls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.224.0/20
Signature Algorithm: sha256WithRSAEncryption
32:39:3f:9a:5b:c3:d9:5d:34:7f:85:ec:5f:be:92:12:41:5f:
a8:96:f5:af:bc:f6:e5:d6:92:a0:57:0a:95:61:fe:82:b9:c5:
63:69:7a:c7:e0:c3:2c:61:ad:44:cb:af:cc:f9:17:06:b1:83:
cd:55:49:8e:b6:0e:99:3d:1f:fb:5d:ff:10:39:87:e0:a5:18:
08:c6:9d:82:45:fb:0c:ee:f4:bb:05:d8:66:5e:d5:fa:02:6d:
6b:cf:38:05:bb:54:45:fa:b4:c9:cd:db:21:14:3d:85:8c:b2:
3c:68:fa:96:99:b4:e7:79:1e:a2:71:d9:3b:31:b5:44:9d:ed:
d4:d0:9d:fd:92:54:f4:ea:db:5a:1c:f9:97:13:41:05:1d:44:
45:ae:54:8a:56:d9:c0:61:5a:d1:ca:e9:30:d3:75:a6:58:b6:
f1:aa:f1:78:b1:23:6c:16:8c:46:ca:a7:07:cb:b7:64:09:31:
ab:3d:a6:aa:f2:56:12:6d:a7:62:df:69:9d:cc:f2:67:78:ff:
67:5f:aa:5b:c7:a6:1b:b6:e1:c7:e1:35:b6:f7:95:06:89:a2:
b5:a5:2d:69:7f:65:ef:c7:14:d7:74:b0:06:27:84:27:05:26:
92:46:31:3d:70:87:77:b2:93:32:d8:9f:a6:d9:2d:5e:01:16:
47:ec:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:19 2025 by rpki-client on console.sobornost.net