Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XKrRKvKhapB2VitXohpu8dM2i94.roa
File: XKrRKvKhapB2VitXohpu8dM2i94.roa (raw, json)
Hash identifier: af2WNQOfbXS3iCQj2ehsBKBQIoE+9hqUhAyqM+uCrq4=
Subject key identifier: 5C:AA:D1:2A:F2:A1:6A:90:76:56:2B:57:A2:1A:6E:F1:D3:36:8B:DE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282498E08609C81A3D82B41F05E64294
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XKrRKvKhapB2VitXohpu8dM2i94.roa
Signing time: Thu 02 Jan 2025 17:51:14 +0000
ROA not before: Thu 02 Jan 2025 17:51:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 94.156.250.0/24 maxlen: 24
185.226.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:98:e0:86:09:c8:1a:3d:82:b4:1f:05:e6:42:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5caad12af2a16a9076562b57a21a6ef1d3368bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:c7:3c:03:26:7c:36:f8:52:59:ed:02:30:
a8:e9:59:f0:46:b1:6a:ca:73:d9:19:10:70:25:9b:
4b:93:92:e6:41:a8:f3:b2:c2:7f:09:b7:a5:bf:fb:
78:98:0e:0f:2a:b0:68:c5:0d:74:e8:8f:7f:ae:2c:
20:fa:90:2a:a6:1f:be:71:d3:77:a7:0f:60:8b:b6:
56:df:8f:b7:99:20:5d:8d:e7:32:e6:ba:b9:86:71:
77:51:74:96:93:c0:ac:f0:3e:93:2c:58:88:df:10:
7b:0c:58:22:7a:b3:54:59:37:73:e2:75:b8:de:f2:
26:f8:16:1a:2b:65:01:60:be:d3:69:e3:5b:b5:06:
42:32:f0:e6:cf:ec:c5:5d:19:6d:52:cf:17:ac:12:
c8:b9:4c:f5:50:17:7e:81:0d:7f:75:c2:b0:e4:10:
c0:32:5a:58:e4:c3:de:83:f7:9f:ce:5e:71:02:cb:
38:cb:56:07:36:3e:2d:a0:a3:75:97:32:3c:25:07:
d5:05:71:68:00:06:dd:1c:5b:fe:22:bb:1e:5a:a7:
e7:78:bf:f5:88:9d:84:47:fd:b7:bd:f1:07:af:b4:
79:2f:55:b8:ce:7b:99:7e:07:83:98:3a:96:6c:bc:
6b:a3:70:4c:88:69:21:97:50:61:7a:77:59:7f:23:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AA:D1:2A:F2:A1:6A:90:76:56:2B:57:A2:1A:6E:F1:D3:36:8B:DE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XKrRKvKhapB2VitXohpu8dM2i94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.250.0/24
185.226.172.0/24
Signature Algorithm: sha256WithRSAEncryption
81:52:dc:09:09:08:eb:71:cf:76:a1:d5:1b:87:e3:1c:59:d1:
dd:ee:a2:3c:bf:53:01:e8:16:84:f0:a7:72:5d:98:e6:c6:38:
30:7b:de:cb:b9:58:99:df:65:3d:92:ed:c7:b3:69:f4:21:7e:
52:86:2d:fd:34:fa:f3:60:2e:cd:e3:86:27:46:b0:0f:50:df:
07:8e:f0:82:c5:14:71:d1:62:1e:33:32:58:dc:a3:56:51:19:
ee:a6:78:78:22:2f:af:df:a2:ae:c1:7e:df:b3:ef:04:e4:ec:
04:80:f8:2a:ee:9e:00:95:3c:fb:82:11:14:9d:9e:9f:a4:c7:
e0:81:fe:04:aa:80:52:48:ed:7c:b9:eb:c2:1f:03:d5:6a:26:
4b:8d:22:6d:c7:52:43:61:f8:c5:7e:47:8b:c6:a4:15:b5:8b:
84:e6:25:ef:bd:0f:9d:9f:aa:41:ea:84:66:64:7a:8e:e0:df:
d3:f1:7a:d4:c7:e0:a1:d0:ec:ff:93:da:d1:58:3f:cf:b9:be:
19:30:42:5a:51:fa:1c:7a:b8:73:ba:0c:f8:93:0d:67:94:77:
21:7f:37:5a:23:f8:c1:df:e3:df:b0:9e:7a:ea:6a:77:82:5f:
75:c7:6c:7e:c0:d1:06:80:a3:b2:95:0f:60:97:a7:e1:2f:68:
17:bc:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:41 2025 by rpki-client