Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XWXWQVEQve9vmS219_ic_wW7mdo.roa
File: XWXWQVEQve9vmS219_ic_wW7mdo.roa (raw, json)
Hash identifier: /5pUSlHceEsPAh46nglRlTlzJ2CnE92GkbkKpi4h+pc=
Subject key identifier: 5D:65:D6:41:51:10:BD:EF:6F:99:2D:B5:F7:F8:9C:FF:05:BB:99:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194E21F783A7571B06A85CD4BDCCA94D0DB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XWXWQVEQve9vmS219_ic_wW7mdo.roa
Signing time: Fri 07 Feb 2025 20:35:00 +0000
ROA not before: Fri 07 Feb 2025 20:35:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 84.54.51.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
2a00:1728:3e::/48 maxlen: 48
2a00:1728:3f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e2:1f:78:3a:75:71:b0:6a:85:cd:4b:dc:ca:94:d0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 7 20:35:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d65d6415110bdef6f992db5f7f89cff05bb99da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:5d:49:75:69:2a:98:56:67:c7:1b:9c:bf:
8a:32:7f:d4:61:e3:3d:43:bb:07:c7:e1:b9:1b:1a:
21:6e:e2:2a:48:27:db:47:2a:34:f2:76:18:d5:d8:
61:d6:d3:22:a3:b1:41:8f:67:e2:8d:8a:aa:95:9c:
55:54:98:07:62:e5:cb:34:d7:34:a9:91:0b:7e:4f:
48:5f:00:57:75:c8:d1:98:71:ed:31:58:9f:f8:a8:
c6:47:6c:60:32:7a:b5:58:0c:b1:af:ce:6f:16:b3:
97:41:de:b8:a7:44:87:dd:e4:07:7d:b3:48:ec:ee:
99:17:12:c6:75:f7:58:af:d0:ed:38:f8:a4:98:f1:
22:9b:fe:08:ac:1f:ac:b1:6c:3b:89:ce:08:a5:78:
47:cf:45:05:05:a1:e9:93:80:f5:8e:c1:c8:ff:19:
0d:13:52:fa:32:93:09:06:e4:44:4c:53:a1:47:51:
63:03:4e:42:0e:1f:41:c6:b1:e0:2d:41:1b:c0:ed:
cb:3c:a0:78:6c:ba:8c:f8:ea:1a:63:17:8e:14:34:
ae:7b:c1:47:49:63:e4:6f:9a:b4:68:7e:78:92:cf:
67:e9:f5:7d:91:77:24:d3:3a:6c:48:5f:c8:d5:e3:
31:14:ca:75:39:bc:0f:6b:73:29:f9:a1:64:41:c5:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:D6:41:51:10:BD:EF:6F:99:2D:B5:F7:F8:9C:FF:05:BB:99:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XWXWQVEQve9vmS219_ic_wW7mdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.51.0/24
185.216.68.0/24
194.48.248.0/24
IPv6:
2a00:1728:3e::/47
Signature Algorithm: sha256WithRSAEncryption
68:81:c5:d0:a7:f7:9d:e4:ae:98:5b:a7:62:c2:ac:0f:00:2f:
33:2f:3d:f4:61:74:55:bd:c8:f0:05:3c:e2:8d:89:a2:cb:e9:
af:20:74:d3:d8:41:a8:2a:4a:c2:bd:ae:7e:d2:75:5f:db:17:
15:c0:42:51:ad:50:95:73:d8:e6:83:35:71:88:40:3a:57:2b:
d6:b9:8d:e1:b0:7b:d1:23:1a:55:aa:40:9f:27:12:89:6a:51:
af:03:79:46:17:b2:f7:27:cf:54:67:d1:63:99:e6:b3:cc:88:
e3:1e:22:08:77:75:a6:a5:1e:79:14:ed:e9:18:69:d6:1a:5f:
29:3d:c5:2f:54:a3:36:f2:fd:1b:5e:cf:eb:4d:0d:26:30:50:
a6:3e:7f:15:74:6e:fa:79:c2:54:b6:5b:02:82:12:a9:79:2e:
5f:41:8c:91:c1:ea:0f:93:e8:ee:da:66:37:f9:91:d2:b9:23:
d3:e5:aa:39:49:e6:1f:f5:7f:eb:4d:da:8f:40:4a:9e:90:dc:
3d:bd:ec:d0:ac:57:e2:15:fb:1e:c4:41:ab:d7:71:a7:8d:38:
41:0a:52:fe:11:0d:08:a4:a7:88:dc:5e:a1:3b:9c:7d:28:5d:
39:aa:c8:de:d5:34:ee:39:24:d9:ef:ba:54:ae:50:28:94:4a:
4d:fe:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:22:00 2025 by rpki-client