Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XkfxX0fFYWQEoP06XE5oBPwyxtc.roa
File: XkfxX0fFYWQEoP06XE5oBPwyxtc.roa (raw, json)
Hash identifier: cPfqpMBVW8Zso8GcZdf86pU7AyZtang0dUzq4d1Da0Q=
Subject key identifier: 5E:47:F1:5F:47:C5:61:64:04:A0:FD:3A:5C:4E:68:04:FC:32:C6:D7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D9211D977E4D7C3D787E394A5E34
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XkfxX0fFYWQEoP06XE5oBPwyxtc.roa
Signing time: Thu 02 Jan 2025 17:51:31 +0000
ROA not before: Thu 02 Jan 2025 17:51:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400377
IP address blocks: 185.216.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d9:21:1d:97:7e:4d:7c:3d:78:7e:39:4a:5e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e47f15f47c5616404a0fd3a5c4e6804fc32c6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:9a:14:90:49:9a:3a:e1:7e:c5:c2:b2:f7:
4a:5a:ee:7d:a2:9f:04:dc:7f:b3:11:eb:77:2f:8c:
40:3a:c4:ed:26:2b:92:79:b1:75:50:0f:88:ee:0b:
3a:5c:f2:6e:e5:83:1f:73:e4:6f:c8:81:03:7e:86:
0c:00:e8:a8:00:26:4f:a6:17:18:59:cd:60:ca:a8:
60:e8:64:c0:36:8e:7b:08:66:81:d0:8c:3c:82:01:
5d:d1:5c:68:5e:08:f5:3e:53:80:c8:36:1e:35:61:
ff:44:9f:d0:15:5f:a0:70:bd:b7:45:81:f1:b5:71:
51:3d:0b:15:b5:b7:f9:47:72:e4:85:01:1e:4d:d3:
29:15:39:6e:4f:40:3d:8c:f6:c5:64:cd:07:f4:44:
dd:3e:1f:04:41:1b:e8:74:a4:1c:e1:12:28:59:1c:
6c:2c:26:de:e2:d6:be:85:15:33:dd:b6:34:98:88:
a5:fb:76:f0:7f:b6:03:9f:68:0c:3b:d0:47:75:8f:
07:86:ad:09:a5:ed:0c:78:17:75:46:1a:d4:ea:0a:
ec:2f:44:8e:1b:ea:2a:25:db:1b:b2:e8:88:3c:65:
94:da:82:15:ec:2e:0b:8a:ea:0a:f4:09:6f:29:ce:
4d:2e:66:8c:78:5b:ad:8e:57:7c:d3:01:e1:0f:37:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:47:F1:5F:47:C5:61:64:04:A0:FD:3A:5C:4E:68:04:FC:32:C6:D7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XkfxX0fFYWQEoP06XE5oBPwyxtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0d:a2:68:ef:9f:ae:b9:94:9a:0f:5e:df:ee:65:c6:59:56:
e6:52:a1:3f:51:a5:15:72:f6:1e:d1:ed:70:cb:c8:88:d2:11:
23:c9:ad:c3:fc:01:12:30:d0:5c:84:8c:80:e1:ea:8f:59:07:
cd:a3:ab:4b:64:a1:2c:c4:f7:1a:2c:24:86:a3:2e:92:69:69:
11:2c:53:b2:1c:fe:8f:41:dc:b7:81:cc:2a:6f:96:ec:53:5e:
0c:44:9f:9f:c8:71:c7:b7:7c:73:ee:4a:11:e0:4e:29:31:07:
e2:f2:9f:99:23:88:24:c2:cc:0a:18:89:35:74:11:7a:a3:dd:
ad:f2:ab:b7:f8:91:0c:cc:fc:4c:63:4d:10:ec:ec:7c:b6:f8:
47:49:09:eb:2b:57:89:92:6b:18:8c:c3:31:7c:9f:a5:09:3b:
93:c0:05:eb:d0:d3:65:4a:93:85:25:1b:14:a3:76:74:d0:4a:
ad:37:67:49:7c:4d:f8:eb:00:57:bd:f5:f0:89:f5:63:94:bf:
36:64:b8:37:b8:ad:eb:b0:9c:ed:e3:5d:ce:e3:5d:5a:2b:55:
3a:bd:b9:5d:ed:1e:aa:5e:82:2f:e4:fc:09:4a:e7:af:37:43:
48:64:7a:e1:4d:e0:85:71:89:d1:23:56:cc:ed:4c:6f:3b:3a:
7c:2c:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:34 2025 by rpki-client