Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/XbTr928OaF_6Q_eun92c9C_Y2j0.roa
File: XbTr928OaF_6Q_eun92c9C_Y2j0.roa (raw, json)
Hash identifier: k3bd51Ol41TdBtJa9Vui59bfFZB9rEJ1RcBEUFYnDHU=
Subject key identifier: 5D:B4:EB:F7:6F:0E:68:5F:FA:43:F7:AE:9F:DD:9C:F4:2F:D8:DA:3D
Certificate issuer: /CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Certificate serial: 01856FA71674D944FC4571307141A980FF8D
Authority key identifier: AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/XbTr928OaF_6Q_eun92c9C_Y2j0.roa
Signing time: Sun 01 Jan 2023 23:24:59 +0000
ROA not before: Sun 01 Jan 2023 23:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62160
IP address blocks: 94.198.240.0/21 maxlen: 21
78.108.176.0/20 maxlen: 20
78.108.187.0/24 maxlen: 24
94.198.224.0/21 maxlen: 21
2a04:a380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:16:74:d9:44:fc:45:71:30:71:41:a9:80:ff:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Validity
Not Before: Jan 1 23:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5db4ebf76f0e685ffa43f7ae9fdd9cf42fd8da3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:72:39:2b:ab:db:24:1c:74:62:63:17:7a:
f6:7a:39:97:0d:ea:8e:3d:c5:22:f8:b8:ff:cd:66:
18:b7:8d:71:61:b2:f1:5a:4b:c7:6e:e6:9d:0f:fb:
61:3c:c2:72:99:ba:2a:61:fb:82:d5:6d:1f:96:a0:
5c:f0:6b:4b:13:6f:c5:1f:5d:5b:89:c9:71:f1:5e:
43:21:f2:b3:bd:f8:05:c6:31:ce:a0:bc:84:9d:56:
4c:1c:55:d5:d7:69:22:ba:80:55:aa:fd:21:ab:9c:
af:23:0e:22:1d:b8:ec:d8:ce:06:e0:15:f5:c0:3c:
0d:21:b8:a6:69:cd:9c:7c:de:45:62:f7:f0:f1:a5:
ac:ba:00:cd:42:33:2c:d1:8e:9c:cb:6e:ba:9b:e3:
51:af:69:f5:e4:7a:7e:5b:43:9c:27:5f:a7:67:50:
a7:77:8f:9f:86:95:e0:0d:3e:bc:58:62:ad:e5:55:
77:6f:18:ac:fd:db:38:9f:1b:cd:7f:ae:ab:0a:4a:
7c:6b:21:2e:82:9b:3d:b3:5e:d3:55:6f:2a:16:cb:
0d:4b:0c:95:6e:df:61:f4:e5:70:07:2d:30:9b:94:
23:dd:63:31:a6:c5:f2:10:c3:ed:46:ad:55:30:f4:
41:c3:f5:c0:d7:fb:71:7a:d8:d2:06:ec:fd:77:64:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B4:EB:F7:6F:0E:68:5F:FA:43:F7:AE:9F:DD:9C:F4:2F:D8:DA:3D
X509v3 Authority Key Identifier:
keyid:AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/XbTr928OaF_6Q_eun92c9C_Y2j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/rIDr0ZpiboFuGNE-6zvCGuhpFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.176.0/20
94.198.224.0/21
94.198.240.0/21
IPv6:
2a04:a380::/29
Signature Algorithm: sha256WithRSAEncryption
1d:22:0d:58:38:88:25:29:59:a9:ab:92:ee:08:14:22:4d:ec:
80:67:0a:9c:8a:a8:a8:17:01:28:e6:a7:3c:45:cb:3b:dd:d9:
66:26:df:f2:91:1e:4f:88:70:bf:5f:f3:de:e7:c1:d8:f1:18:
b9:2a:18:b9:53:c3:6f:56:4b:6d:3b:cd:6b:03:d5:e2:04:31:
78:62:0c:f0:f4:da:48:1d:fb:99:8d:16:7a:52:a8:67:90:86:
5f:78:96:c4:95:05:36:3e:65:24:09:72:e3:44:f5:a6:fd:d2:
24:37:be:29:08:08:21:d5:bf:2b:05:f1:c9:a6:5f:78:4b:87:
82:45:b7:20:09:ac:8b:9f:7b:9b:7e:d0:fe:dd:c2:1d:3d:5a:
cd:b4:6a:43:85:2e:27:6a:fc:70:d3:c7:ac:1a:ab:74:ab:42:
70:87:28:b6:82:c0:6e:25:90:c9:f8:ed:e7:d5:ec:81:cb:59:
fe:5e:a4:ac:f8:01:35:7e:1c:98:a1:54:31:25:12:97:f9:c5:
45:7d:00:8e:44:cc:d5:8b:ff:ad:94:fc:18:c0:5b:88:f7:dd:
06:68:5b:4e:d8:55:96:a2:46:0f:e4:5d:df:74:6d:a0:e7:ea:
fb:0c:4b:88:ef:ba:c9:87:bb:01:3d:23:26:d4:c6:ab:b6:d5:
a4:6d:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:56 2025 by rpki-client