Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa
File: XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa (raw, json)
Hash identifier: YTwv2DMMu/UpDiaZkqxeVtYaDul2+Oka8KEh6z36NkA=
Subject key identifier: 5D:D7:4D:4A:56:DE:49:D2:F6:04:33:81:48:1B:57:2B:09:9B:AC:B4
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019427B69156B2EE9DAE64CDF9E223A14D36
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa
Signing time: Thu 02 Jan 2025 15:51:03 +0000
ROA not before: Thu 02 Jan 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34224
IP address blocks: 82.112.171.0/24 maxlen: 24
82.112.174.0/24 maxlen: 24
82.112.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:91:56:b2:ee:9d:ae:64:cd:f9:e2:23:a1:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jan 2 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dd74d4a56de49d2f6043381481b572b099bacb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:71:a0:54:ba:55:0f:20:d8:cd:e3:82:24:
2e:c2:c9:f0:aa:4f:b6:05:dc:1d:c9:1c:8e:0e:7d:
f9:99:73:1a:16:cf:2e:76:2c:ec:08:88:80:76:b9:
12:98:f1:09:6d:7d:4e:ad:42:05:5a:37:9c:48:3c:
b3:94:ea:98:39:0e:36:8d:44:72:aa:2f:81:7e:df:
68:e4:f9:15:4a:f6:57:ec:40:b4:09:2f:88:b7:bd:
95:43:f0:16:74:b2:07:55:c0:f4:4a:86:20:56:04:
3a:58:ba:ef:ca:16:ff:dd:f9:c0:5b:90:57:83:bf:
5f:9b:20:d5:83:0a:16:b2:ea:88:55:6e:92:4b:f2:
15:46:11:e3:a6:3f:eb:a0:64:47:23:37:67:a6:20:
4b:12:bf:70:2a:92:1a:3e:7d:2b:eb:05:67:8c:cb:
19:be:f2:07:d5:f3:58:ae:db:c1:07:6d:b8:84:da:
6b:80:30:7c:fb:b0:98:ec:40:e8:9c:4e:e2:ef:76:
a4:21:47:c2:98:38:f9:fe:7e:d9:a0:1d:32:5e:a7:
e4:7d:1c:3b:ba:32:b5:bb:77:ea:08:97:d7:bd:fd:
b9:a0:74:9f:99:05:39:c2:fb:59:f2:09:39:88:b1:
86:3a:c4:86:c5:85:a2:7b:b9:69:97:48:18:9b:fd:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:4D:4A:56:DE:49:D2:F6:04:33:81:48:1B:57:2B:09:9B:AC:B4
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.171.0/24
82.112.174.0/23
Signature Algorithm: sha256WithRSAEncryption
10:f6:99:cc:20:14:20:84:31:97:d5:d1:25:b7:95:34:c0:09:
c4:21:fb:35:d2:1a:01:fe:4e:3a:c1:4a:72:be:f7:86:d5:67:
b0:48:41:37:8c:fb:37:4b:87:1a:52:99:41:ea:cb:57:a0:97:
ba:63:be:0a:1f:67:ce:ae:86:6b:e1:3c:5f:dd:93:49:7e:ca:
d1:35:da:cb:bd:61:df:ff:7d:24:ba:9f:2c:f6:d2:e7:5b:cd:
c9:29:8f:fa:bb:5e:08:39:f9:c7:6c:25:d0:b3:69:6d:5c:88:
38:51:bd:fc:b0:e7:4a:5e:25:35:6d:49:8b:b6:c2:73:57:7e:
9a:4d:b3:6d:69:f3:15:09:7e:64:0d:0f:b2:d0:3a:bf:a9:41:
0e:2c:20:50:50:28:85:27:43:5d:86:e3:45:1c:ad:83:03:11:
b1:e1:07:92:0b:69:32:f1:86:ab:b8:f8:04:96:80:c8:50:7d:
d6:1c:63:02:f2:03:eb:aa:36:f8:e8:d9:cf:eb:d8:d3:3b:f8:
d6:15:7c:0b:4c:f0:07:ef:d1:fd:f0:a2:61:32:52:2f:d7:34:
33:8a:95:76:7e:8f:f3:38:06:4c:bf:c3:ad:7e:70:23:61:35:
c0:d0:c3:d7:15:1e:eb:8f:97:e8:41:89:7a:33:77:8c:c5:44:
4c:3f:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:20 2025 by rpki-client