Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/XPD_qkMZM773BgTSH2nnNND2GP8.roa
File: XPD_qkMZM773BgTSH2nnNND2GP8.roa (raw, json)
Hash identifier: jC9NS2JVAxqciAEfYbsx8yavJosP/v9EHly6hmSaYwA=
Subject key identifier: 5C:F0:FF:AA:43:19:33:BE:F7:06:04:D2:1F:69:E7:34:D0:F6:18:FF
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 019425212C631938F5A7FD494BCF9760B2C2
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/XPD_qkMZM773BgTSH2nnNND2GP8.roa
Signing time: Thu 02 Jan 2025 03:48:38 +0000
ROA not before: Thu 02 Jan 2025 03:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198605
IP address blocks: 5.45.56.0/21 maxlen: 24
31.14.72.0/24 maxlen: 24
31.14.73.0/24 maxlen: 24
31.14.74.0/24 maxlen: 24
37.156.184.0/22 maxlen: 24
69.94.64.0/20 maxlen: 24
77.234.40.0/21 maxlen: 24
77.234.40.0/24 maxlen: 24
91.213.143.0/24 maxlen: 24
185.51.228.0/22 maxlen: 24
185.167.64.0/24 maxlen: 24
185.189.92.0/22 maxlen: 24
185.189.94.0/24 maxlen: 24
195.74.76.0/24 maxlen: 24
2001:67c:284::/48 maxlen: 48
2a0b:e180::/29 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:2c:63:19:38:f5:a7:fd:49:4b:cf:97:60:b2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Jan 2 03:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cf0ffaa431933bef70604d21f69e734d0f618ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:a3:f2:0d:6d:91:b0:a8:b2:89:58:54:dc:
31:a3:38:2f:b5:67:ab:72:6a:31:f1:57:a3:ec:fd:
8b:00:8c:55:14:6b:c6:19:cc:8a:b5:70:d4:f0:4d:
6a:cd:cb:dc:91:62:fb:f4:71:92:df:09:83:53:4e:
8f:d4:3a:9b:38:a9:40:aa:ff:cd:a6:56:31:c5:18:
0c:89:5f:5d:1a:03:b8:d7:23:7f:5a:78:c7:25:5d:
1b:65:c7:ca:f3:0f:72:f6:98:01:90:2b:48:d8:31:
84:ac:ea:50:85:c5:bc:2c:10:66:ab:08:ff:48:ec:
43:53:51:d4:2c:d4:4c:40:9c:8f:50:4b:2d:82:e0:
5b:26:b5:c6:32:3a:ce:b7:9d:fd:18:98:66:23:08:
bc:5e:e9:6b:54:c1:49:de:cc:9e:51:9f:6d:03:6c:
aa:22:dc:8a:19:b5:0c:e6:ba:3d:74:67:09:fc:bd:
6b:f8:5e:5c:ea:dd:14:49:3e:73:d3:8d:78:35:dc:
d8:f6:ed:c6:14:4e:2e:19:64:7c:15:15:d5:57:46:
27:4c:51:f8:21:7c:ca:48:b0:e7:bf:3e:86:59:b4:
ef:13:be:e1:23:84:fa:62:6d:2f:f6:4f:90:3d:c8:
50:26:cd:0a:5d:f3:7e:f6:21:31:93:d4:07:25:20:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:FF:AA:43:19:33:BE:F7:06:04:D2:1F:69:E7:34:D0:F6:18:FF
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/XPD_qkMZM773BgTSH2nnNND2GP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.56.0/21
31.14.72.0-31.14.74.255
37.156.184.0/22
69.94.64.0/20
77.234.40.0/21
91.213.143.0/24
185.51.228.0/22
185.167.64.0/24
185.189.92.0/22
195.74.76.0/24
IPv6:
2001:67c:284::/48
2a0b:e180::/29
Signature Algorithm: sha256WithRSAEncryption
01:cb:b5:3a:8e:d8:01:f1:ea:eb:d0:15:44:bb:c7:97:cf:11:
c2:40:0d:ba:4a:0e:24:cb:94:d2:cd:63:2f:cf:91:8f:59:a5:
25:43:fd:9e:b4:1d:c5:00:40:f1:fa:c9:3c:4d:2d:c0:ca:d0:
01:2d:e3:8c:d1:e1:8d:8d:f7:4a:62:28:ca:87:d6:ca:13:bb:
51:61:8f:a4:4f:66:8b:33:77:d9:a7:6f:f0:57:77:17:10:45:
87:49:47:55:30:2e:23:aa:d6:72:6f:27:d1:f1:b8:ce:d6:2b:
62:e3:26:21:58:dc:2f:c9:a8:51:c5:58:8e:d4:e6:fb:a7:2f:
22:a9:0c:ff:19:be:62:b9:5d:3a:49:0c:cb:44:a8:a9:fa:63:
7f:f1:d9:63:ae:94:28:da:f1:f7:20:ce:e2:c6:61:9e:88:0b:
10:0f:06:3f:b0:27:d4:54:4d:25:54:a1:12:8b:5f:bc:a9:75:
7b:86:8e:df:3d:8f:82:35:33:41:32:8e:3e:6c:ec:c2:45:f3:
93:f2:01:74:78:6d:b9:ab:7d:31:1b:ce:ad:da:db:a8:48:33:
74:cb:4c:94:5d:3d:4a:12:a1:1f:21:5b:fa:99:75:af:c6:44:
49:f6:03:51:ca:0f:ed:ad:11:a6:fa:db:14:b9:39:aa:82:2f:
2b:93:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:14:23 2025 by rpki-client