Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/XyXxjboBYyjYHHt440I3PeH_55A.roa
File: XyXxjboBYyjYHHt440I3PeH_55A.roa (raw, json)
Hash identifier: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=
Subject key identifier: 5F:25:F1:8D:BA:01:63:28:D8:1C:7B:78:E3:42:37:3D:E1:FF:E7:90
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019425221A280352F8AF35F9B6C3AD2D6C2C
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/XyXxjboBYyjYHHt440I3PeH_55A.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59989
IP address blocks: 185.97.92.0/22 maxlen: 22
185.97.92.0/24 maxlen: 24
185.97.93.0/24 maxlen: 24
185.97.94.0/24 maxlen: 24
185.97.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1a:28:03:52:f8:af:35:f9:b6:c3:ad:2d:6c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f25f18dba016328d81c7b78e342373de1ffe790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:a8:c6:bd:7b:e8:23:7a:6c:13:2c:ba:64:
d5:89:11:26:35:17:1f:89:b9:c2:d5:06:85:98:00:
14:50:3a:79:88:0a:e3:22:7b:74:54:82:54:a0:3a:
69:7e:99:e3:b8:1c:1c:1c:0c:2a:82:f1:78:47:e6:
b0:79:6a:c6:b6:2f:de:c9:55:cd:d1:f1:f5:77:79:
85:c9:ae:91:57:36:c4:38:08:20:ef:85:fa:fd:dd:
bc:4a:cf:ae:61:ab:b9:88:44:7c:b1:5f:31:f5:36:
f6:62:f9:83:d0:de:2e:1b:b2:fb:c6:12:8f:7b:13:
1b:07:f2:b5:51:50:50:b3:2b:c6:d5:d4:62:dd:80:
17:e5:8c:b5:3f:68:e5:dd:31:77:53:3a:4f:40:ff:
d6:2e:73:8a:91:04:07:ff:0f:40:2b:e1:b4:7e:1f:
73:4f:ec:f1:8e:d6:32:32:80:19:ea:34:38:91:da:
98:95:7d:0e:3f:e7:a5:92:ee:2b:cc:66:0c:b2:c6:
1c:0e:f6:46:c7:41:f2:31:98:f6:5f:ea:33:1c:42:
e7:73:cd:6c:01:da:4a:d2:e4:8a:57:cb:64:21:f5:
e3:e8:01:c0:fd:57:8a:db:e1:e7:e0:b9:00:b6:73:
d1:a9:45:2c:a5:94:24:08:9c:ef:f4:1f:4b:f6:23:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:25:F1:8D:BA:01:63:28:D8:1C:7B:78:E3:42:37:3D:E1:FF:E7:90
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/XyXxjboBYyjYHHt440I3PeH_55A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.92.0/22
Signature Algorithm: sha256WithRSAEncryption
49:b1:9e:ce:a7:6e:61:d3:99:9a:1e:31:a5:7f:ce:7c:ef:a1:
cb:f8:5e:79:70:87:b0:2a:81:08:57:48:0a:19:d9:21:b5:67:
e6:3c:b8:46:70:2f:34:90:99:de:9c:8d:ef:22:4b:b6:5e:19:
aa:51:2d:1f:b8:38:9b:89:03:3f:37:00:1a:81:9d:7d:f1:18:
53:82:57:7a:8f:a6:b7:4e:27:df:09:8f:c8:18:1e:92:46:f5:
98:7a:d3:d7:9d:db:22:0a:2c:df:86:f0:64:30:25:a9:29:b0:
02:3f:80:87:2e:64:e8:56:5b:93:d7:37:c3:36:50:77:78:ed:
15:c8:84:30:51:ce:80:9a:67:e9:31:4e:a0:a2:c9:38:32:09:
89:d9:07:df:5c:04:99:03:3f:04:66:81:0a:57:d0:53:c3:b3:
81:38:32:5a:8a:8d:a7:bc:e0:2a:ef:f3:25:af:16:59:78:f0:
21:75:f6:52:92:6e:b4:eb:d5:3d:5b:72:65:79:fb:aa:ff:96:
ab:4e:18:e4:a8:4b:44:ed:95:e8:9b:cd:5d:80:97:a4:51:d0:
43:d9:c5:a1:ba:74:d6:ac:8c:af:47:8e:2a:6e:23:43:0c:59:
d2:8d:3f:0a:36:be:83:2d:f6:db:2f:fe:f7:e6:fc:1d:e4:37:
a9:d3:24:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:58 2025 by rpki-client