Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/xJNMjhcs2CKF4gs7s3cSjihbPHE.roa
File: xJNMjhcs2CKF4gs7s3cSjihbPHE.roa (raw, json)
Hash identifier: WtXCqqQ+mN0THoRsM/EjcP4ikErJu04+eSqVNsrQ9BE=
Subject key identifier: C4:93:4C:8E:17:2C:D8:22:85:E2:0B:3B:B3:77:12:8E:28:5B:3C:71
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23F25B85D75A4CD2513A07A0521CB
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/xJNMjhcs2CKF4gs7s3cSjihbPHE.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204958
IP address blocks: 152.89.171.0/24 maxlen: 24
185.57.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3f:25:b8:5d:75:a4:cd:25:13:a0:7a:05:21:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4934c8e172cd82285e20b3bb377128e285b3c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:c4:1b:f5:34:57:61:c2:87:2f:8b:5e:e1:
a4:18:ac:fa:e7:86:fb:1c:94:f2:f5:13:41:9b:6d:
e6:12:73:49:1b:8d:37:fa:42:13:ef:e2:54:ec:dc:
ce:cf:24:79:c8:44:26:58:fd:15:85:46:db:43:3b:
e6:18:d2:e4:9f:71:c3:e0:d2:c0:d9:a8:99:13:db:
4c:30:d6:9b:b8:65:35:f0:39:eb:26:ca:de:91:d5:
45:61:e9:e3:97:b1:53:d6:2d:ee:b2:7e:03:67:c7:
56:eb:1b:6e:39:b2:7d:98:06:9d:72:65:8a:21:da:
f3:17:ab:b7:38:d2:b0:75:6b:00:d5:01:68:02:03:
ec:40:5a:52:77:79:1d:d6:93:27:e0:b2:48:c6:e4:
48:ea:93:cf:41:3d:49:c0:b4:e2:84:1f:3d:57:f0:
5a:ed:50:d7:a7:f4:9a:9e:82:ca:00:6d:77:e8:32:
4e:16:90:09:14:65:2f:30:f8:09:fa:0e:ce:9c:c4:
d1:dd:6f:52:8d:0e:ed:3d:ab:90:a4:14:02:8b:52:
32:5a:f0:a6:c6:e5:6b:3b:35:e3:b3:82:0d:ea:1a:
bb:f1:21:97:04:55:e1:d1:87:b9:40:93:ce:2d:70:
8f:3f:37:3b:7c:59:1f:a8:ea:98:88:3e:de:b7:99:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:93:4C:8E:17:2C:D8:22:85:E2:0B:3B:B3:77:12:8E:28:5B:3C:71
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/xJNMjhcs2CKF4gs7s3cSjihbPHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.171.0/24
185.57.231.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e6:2a:79:28:4a:ed:81:e1:ee:d8:60:d9:a5:ea:06:9f:23:
cb:ec:eb:82:f2:4c:36:e6:21:8a:f5:b5:65:37:86:00:a9:93:
cc:0a:5e:50:3a:7d:0c:8e:1c:aa:23:cc:19:c2:88:21:ef:2a:
7d:92:d1:72:0a:6f:d9:65:70:e6:58:e5:e8:89:34:e7:27:1b:
69:76:b9:12:7c:73:5b:37:28:bc:95:f3:f1:44:11:2f:92:b1:
99:2a:a1:9c:a7:92:9a:ee:a0:38:0a:85:3c:de:b7:65:f8:a4:
84:2d:09:0e:45:a7:91:27:90:c7:2c:06:cf:6e:4c:b0:7e:5c:
d9:ae:9f:a5:96:cc:35:c0:6d:1a:23:7c:e3:d8:d0:e0:2f:51:
f4:b8:c6:47:e2:7c:64:ee:09:f5:34:56:b3:1e:2c:81:cb:bf:
fd:7d:b6:12:58:75:ed:d6:95:f8:18:f6:83:47:28:d0:52:c7:
30:dd:32:50:0d:b6:c0:5f:15:e5:5f:91:92:ea:c5:d9:73:3f:
2f:fe:8a:91:32:ab:ff:45:25:a2:fb:3c:b7:8b:c3:c1:be:77:
e6:96:0d:93:47:33:04:07:13:6a:d5:a3:e1:a4:71:df:cd:41:
3a:91:d1:22:bd:34:c6:9a:10:0b:2e:73:0e:2e:bb:10:36:19:
2c:08:d7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:27:04 2025 by rpki-client