Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa
File: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (raw, json)
Hash identifier: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=
Subject key identifier: 5E:68:A7:E5:71:BE:91:19:78:F5:5B:7B:64:47:13:81:22:C3:84:33
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0195C826059D5FD586AB9444935D675BDB4F
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa
Signing time: Mon 24 Mar 2025 12:34:49 +0000
ROA not before: Mon 24 Mar 2025 12:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 158.46.128.0/18 maxlen: 24
158.46.153.0/24 maxlen: 24
158.46.192.0/19 maxlen: 24
158.46.200.0/23 maxlen: 24
158.46.202.0/23 maxlen: 24
158.46.250.0/23 maxlen: 24
178.171.0.0/17 maxlen: 24
178.171.88.0/23 maxlen: 24
178.171.100.0/24 maxlen: 24
178.171.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:26:05:9d:5f:d5:86:ab:94:44:93:5d:67:5b:db:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Mar 24 12:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e68a7e571be911978f55b7b6447138122c38433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:5d:b9:90:dd:3a:01:00:c1:8f:ae:34:57:
0f:5f:eb:64:b0:bd:1d:02:2b:56:5e:00:0c:29:e2:
b5:ef:61:d7:9d:6c:21:bd:cb:d2:c9:1d:e0:13:28:
8e:80:7f:bb:a2:35:fa:15:00:64:6b:ac:4b:10:7e:
86:b7:12:59:88:29:ec:e1:8e:93:4f:3f:a4:f4:27:
bf:3f:a5:de:23:52:5b:16:bf:f9:95:d4:89:75:c2:
b1:83:ca:59:65:99:25:82:ad:89:a6:67:ef:c5:c7:
9a:4f:59:dd:97:09:e2:0a:27:c8:3b:2a:b7:5c:0b:
de:04:8a:f7:19:ac:2a:05:68:3d:b5:79:aa:6e:2e:
3d:18:6d:0b:8d:44:d7:c1:7d:8d:c8:56:7e:6e:04:
28:d7:7d:9b:f9:84:a6:77:70:a8:cf:f2:3e:f9:66:
27:e8:cd:7a:21:8e:9e:bd:ff:e1:dc:93:87:5f:00:
61:b4:a5:53:5c:ac:e8:4b:52:e6:61:46:30:4e:8f:
f2:f2:81:bb:5e:26:bd:4c:78:b2:83:80:1c:cc:c7:
82:ff:4a:a4:69:f2:81:c2:ca:9b:37:08:83:7c:1c:
10:09:fe:11:83:1f:51:52:80:33:04:f9:30:01:9c:
8d:37:2d:42:41:1b:15:60:97:88:59:f8:3e:6f:ab:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:A7:E5:71:BE:91:19:78:F5:5B:7B:64:47:13:81:22:C3:84:33
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.128.0-158.46.223.255
158.46.250.0/23
178.171.0.0/17
Signature Algorithm: sha256WithRSAEncryption
71:17:fe:62:81:8c:f6:89:07:13:e4:9e:bd:d3:c7:44:44:c8:
cf:41:e6:9b:28:a2:fa:c4:c1:10:f6:45:da:d6:32:47:85:13:
40:af:07:4d:50:ce:da:a7:ac:df:e6:ec:7f:5c:c2:53:57:1b:
68:a5:f9:28:5d:16:84:97:a2:4e:b3:86:19:27:98:8a:a8:25:
21:95:c2:97:ec:0d:e2:2e:30:d7:d0:c8:79:ab:6c:4e:de:60:
fa:8d:fb:2d:0b:b8:26:f7:bd:7e:5e:c2:67:83:45:5c:34:c2:
a3:0a:f5:61:44:86:f4:9b:8d:4c:08:9c:b7:59:5c:ca:60:29:
b1:c3:ea:51:c5:f5:a5:1c:df:ba:a6:e0:2c:45:c6:d8:e7:d0:
3f:d4:63:85:ae:20:fc:56:1f:2c:fe:a6:4c:31:ea:dd:b4:e7:
64:5f:69:b7:a3:91:dc:02:bf:53:0e:25:4a:f4:f9:c4:b8:d1:
e9:00:6b:30:fe:d3:87:c7:83:0a:61:4b:59:83:39:34:17:a9:
04:c8:61:e5:08:54:64:81:8e:4c:b0:d3:7e:4f:ec:fd:96:13:
49:ad:13:0d:28:8c:fc:65:85:d3:14:58:02:6c:1d:06:f5:d9:
ae:a5:6a:d8:50:a1:e9:b6:6f:e6:83:61:2e:60:9e:d5:59:c9:
d3:e0:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:31:59 2025 by rpki-client