Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa
File: xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa (raw, json)
Hash identifier: ntcfKusbnH6G9LFWYHB/n9gMG8BQt0xnq4XPHB5frGQ=
Subject key identifier: C4:C5:E0:72:75:F1:75:07:76:B0:D0:B8:1A:86:40:66:96:F1:9A:8E
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019425FDB59D72A6C70F11567FF5F096E4F6
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207050
IP address blocks: 79.143.132.0/22 maxlen: 22
79.143.132.0/24 maxlen: 24
79.143.135.0/24 maxlen: 24
92.119.20.0/24 maxlen: 24
92.119.21.0/24 maxlen: 24
92.119.22.0/24 maxlen: 24
185.59.48.0/22 maxlen: 22
185.59.50.0/24 maxlen: 24
185.124.104.0/22 maxlen: 22
185.124.104.0/24 maxlen: 24
185.124.105.0/24 maxlen: 24
193.160.84.0/22 maxlen: 22
2a04:e2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b5:9d:72:a6:c7:0f:11:56:7f:f5:f0:96:e4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4c5e07275f1750776b0d0b81a86406696f19a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:90:0c:f3:2e:5e:2f:c5:39:50:e8:1c:ba:
45:dd:c2:d1:24:80:7b:e8:a3:21:1c:4e:21:3c:12:
fc:21:49:0c:f3:89:82:0f:36:ce:0a:b0:10:c6:99:
96:eb:60:07:4f:84:92:b4:13:a7:c6:8b:79:a1:c8:
b1:52:3b:20:6c:2b:f1:5b:ac:f6:fb:f3:05:6c:41:
e9:62:7c:90:7e:2c:4f:62:55:1a:28:2b:80:61:31:
94:9a:ea:d4:a4:ab:dc:25:82:ff:85:f5:e5:0f:11:
c0:1a:ae:b3:d6:53:c7:c5:4e:92:ba:04:3d:bd:18:
7f:a3:8c:ab:af:81:b7:ba:ad:d7:5d:0c:01:84:53:
ba:18:a8:f1:4a:79:4c:e9:9c:b4:81:c8:75:94:96:
3b:07:60:b2:14:51:a4:cc:3b:ca:01:c1:e8:1c:c0:
2c:f1:b2:0f:22:7a:87:84:c8:bb:f1:dd:77:67:20:
ce:55:cf:ba:f1:b0:1e:7f:19:2c:08:40:52:70:3a:
1d:ae:97:5b:7c:e0:82:c4:c6:d6:1f:15:73:68:db:
73:0a:de:00:69:d4:25:0a:42:cb:b4:63:e8:2a:78:
d6:9b:3a:6c:ab:4b:52:77:dc:66:28:2c:30:c3:aa:
7f:4e:1b:2c:d4:7a:9f:11:c2:2d:85:c8:b8:14:21:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C5:E0:72:75:F1:75:07:76:B0:D0:B8:1A:86:40:66:96:F1:9A:8E
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.132.0/22
92.119.20.0-92.119.22.255
185.59.48.0/22
185.124.104.0/22
193.160.84.0/22
IPv6:
2a04:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
73:76:d1:a4:e3:8c:05:1e:45:33:60:6c:e7:67:f6:78:d7:6f:
c4:5e:26:d8:61:75:81:de:21:62:06:61:66:55:55:69:0e:98:
27:20:9d:77:d5:27:f7:1b:1a:46:dc:0e:2b:8c:87:41:f2:db:
6c:4c:77:57:5f:00:21:0d:71:dc:72:62:2a:92:d8:7a:4e:e3:
f8:7a:0b:97:7f:b3:52:6f:3b:95:ac:ff:a0:f1:fa:49:da:c2:
21:16:43:0d:fc:5d:4f:e7:31:5f:a9:98:5b:ae:85:17:16:7d:
51:f4:bb:bb:00:87:82:7e:d2:3e:76:93:31:97:b8:1c:99:6e:
9b:bc:12:a1:ea:7d:86:0b:f1:93:cf:09:f4:0e:aa:73:d0:21:
86:1a:33:91:5b:2f:e6:e1:ba:fa:36:70:74:a7:0b:d3:70:15:
9c:a1:41:b3:d8:57:d2:1a:57:ee:7a:26:37:69:f5:12:e8:61:
e2:c6:23:d0:42:75:91:92:f9:89:ae:7d:f8:69:de:01:e7:f0:
db:11:b0:f0:8d:86:aa:fc:e2:aa:88:2b:13:ca:e3:7e:a4:11:
f8:82:00:1a:e5:2d:fa:fe:2d:19:85:01:cc:ee:95:01:5c:53:
aa:40:c8:cf:77:18:cb:f4:ea:b2:5e:e1:5b:01:29:0b:46:64:
15:5d:1b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:25 2025 by rpki-client