Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/XDAdp99VnBF7cnnsQ12OybJrT8Y.roa
File: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (raw, json)
Hash identifier: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=
Subject key identifier: 5C:30:1D:A7:DF:55:9C:11:7B:72:79:EC:43:5D:8E:C9:B2:6B:4F:C6
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019498BC7C9A1DAE939977857D9CEB379FBB
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/XDAdp99VnBF7cnnsQ12OybJrT8Y.roa
Signing time: Fri 24 Jan 2025 14:34:37 +0000
ROA not before: Fri 24 Jan 2025 14:34:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41689
IP address blocks: 185.141.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:bc:7c:9a:1d:ae:93:99:77:85:7d:9c:eb:37:9f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 24 14:34:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c301da7df559c117b7279ec435d8ec9b26b4fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:7f:50:47:39:15:15:34:05:70:4d:ec:b3:
f3:27:4c:0f:02:41:12:b1:ad:ae:94:9f:fa:45:ac:
83:d8:4a:60:99:f1:fc:7a:67:b6:f5:ef:06:58:41:
7b:79:81:56:7f:20:b3:45:83:dc:be:54:33:0a:bb:
1f:15:a4:a1:94:ee:06:46:0c:9c:90:f0:c0:a4:53:
31:1d:2e:30:7a:20:c3:0b:12:47:87:57:65:c4:ac:
e7:d7:22:6b:57:86:d3:38:3a:9a:18:8d:ab:68:8d:
ba:59:12:b6:78:c0:c2:44:4d:d4:c5:cb:55:44:62:
8b:8c:04:7a:26:2a:a4:ea:7e:3e:b4:42:c9:ce:5b:
9f:a0:0f:38:40:7f:dc:e2:51:03:aa:cc:7f:e1:bb:
a1:0a:f0:ca:89:77:38:c8:fa:bb:da:d2:e0:97:a3:
1b:bd:33:c9:8b:d6:77:44:f3:22:12:55:c0:65:9a:
a0:d8:c8:7a:4a:0e:25:fa:69:ce:ae:69:11:a5:22:
5e:75:13:6b:d6:4e:40:7c:b2:41:84:cd:5d:9f:3f:
c1:60:32:0e:8d:41:ca:2d:f6:bf:0e:1d:a1:a3:80:
67:c4:9e:b5:b6:3b:c3:82:20:e3:1b:4f:49:00:c8:
74:f9:97:24:f6:37:a0:28:49:2b:66:e0:0d:c9:48:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:30:1D:A7:DF:55:9C:11:7B:72:79:EC:43:5D:8E:C9:B2:6B:4F:C6
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/XDAdp99VnBF7cnnsQ12OybJrT8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.134.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f7:0a:85:a7:c6:1c:96:ab:83:b7:41:38:8d:ec:5a:4a:70:
e7:e8:3f:54:b6:38:b0:fd:9d:5e:9f:4a:81:65:1d:4c:c7:24:
54:c3:21:52:c6:07:29:c3:d2:13:6f:39:d6:65:4e:3d:5c:38:
de:b7:33:4f:12:a7:d0:e5:10:59:96:61:45:65:f2:80:5c:18:
ba:75:c5:dd:ac:e8:d5:18:9a:f6:20:c8:62:44:0e:0c:23:a0:
fc:10:02:f0:92:be:b3:e5:56:c5:cb:b7:df:86:3b:05:64:35:
12:97:be:d5:14:36:6f:92:28:4e:bb:9b:2c:60:e4:01:74:ab:
ac:7c:04:ea:c6:62:e4:9c:1a:a6:1c:26:4a:b4:a6:2c:79:31:
6e:64:db:d2:6b:92:83:dc:b0:54:7a:9e:5a:67:0e:e6:38:dd:
de:ab:a8:9b:4e:66:98:97:e9:ab:43:82:d6:c9:61:c9:e0:14:
c4:ac:44:d8:a4:f1:7e:6a:cb:f2:1f:0d:88:9b:3a:e8:9e:ee:
cd:44:d4:c5:cf:1c:3d:fd:f5:14:dd:3c:1e:3e:97:d4:0e:34:
81:78:f8:33:51:86:9d:52:f4:a0:4e:0c:0f:ce:16:1b:be:08:
01:d4:eb:93:82:f9:0a:59:6c:6f:55:71:c5:42:76:30:3c:ca:
72:80:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net