Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xeUp58fZ0PL3S3YPRppId23_iJ0.roa
File: xeUp58fZ0PL3S3YPRppId23_iJ0.roa (raw, json)
Hash identifier: SlHKYxJH+pOSfdHy2q1fOkfKpDWHMxD1ZPh5sBa8n9A=
Subject key identifier: C5:E5:29:E7:C7:D9:D0:F2:F7:4B:76:0F:46:9A:48:77:6D:FF:88:9D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019596B884B0D2BA803B1D7E7C365B9EEAA2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xeUp58fZ0PL3S3YPRppId23_iJ0.roa
Signing time: Fri 14 Mar 2025 22:13:49 +0000
ROA not before: Fri 14 Mar 2025 22:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 78.135.72.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
188.132.236.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:96:b8:84:b0:d2:ba:80:3b:1d:7e:7c:36:5b:9e:ea:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 14 22:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5e529e7c7d9d0f2f74b760f469a48776dff889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:7c:18:73:f7:d5:34:73:d8:e6:c5:61:30:
c9:e0:1d:84:cb:84:d4:54:3d:ef:88:0f:b7:be:d7:
9a:4f:ae:fc:93:55:60:9a:e4:42:e6:7d:0a:d0:aa:
f4:6e:5e:bf:cc:de:73:62:f8:bc:44:74:f0:a9:95:
52:05:53:b5:7b:a2:1d:0d:3d:fc:6f:d3:d9:03:28:
37:9e:cc:20:5f:b4:6e:a8:9c:7e:33:cc:4c:4a:e8:
33:b9:de:40:62:44:8e:92:89:88:a2:57:9c:74:e5:
5c:79:9f:be:93:71:b7:7a:b2:29:ff:f7:8d:3a:eb:
8a:af:20:bf:38:fe:96:ac:5d:7c:00:d2:dc:01:26:
78:34:76:6e:08:49:d2:35:b7:94:b1:98:b0:ad:4f:
57:a3:53:2a:f1:e9:89:b7:aa:5d:93:73:a7:c5:e5:
e0:e3:64:24:c0:d3:5b:5b:d8:da:84:82:6f:4e:fb:
5e:76:a5:d4:0d:7a:15:72:60:32:0d:4b:63:73:77:
c3:a6:f5:16:69:d5:08:e0:3d:a5:7d:2d:45:b3:99:
56:b9:7c:04:5a:f0:f9:43:bb:6f:ac:ba:b5:0a:df:
73:a4:54:df:2e:04:c6:54:87:5f:7f:3d:3e:8c:50:
cd:ec:b2:e3:32:c2:0b:12:3e:fe:04:e3:c7:ee:cb:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:29:E7:C7:D9:D0:F2:F7:4B:76:0F:46:9A:48:77:6D:FF:88:9D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xeUp58fZ0PL3S3YPRppId23_iJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.72.0/24
188.132.188.0/23
188.132.191.0/24
188.132.229.0/24
188.132.236.0/24
212.68.55.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
36:51:d8:79:e3:7f:6a:a0:00:37:3e:94:88:d8:fe:28:a7:23:
80:6f:5b:43:dc:6f:1c:c9:8c:c4:a4:bf:93:85:34:fa:39:6e:
bc:16:df:3c:ab:f3:a0:5e:1b:f4:b2:aa:8e:fc:83:77:d2:f6:
1c:7f:43:88:4e:a2:d6:73:9c:82:fe:26:10:92:c0:79:05:25:
45:d4:5b:6e:98:e4:7f:09:2c:fb:a4:59:6c:5d:de:a2:a5:38:
d2:e1:a2:f1:e6:90:ee:41:0e:d7:29:e1:ce:3d:e9:fe:f5:a2:
77:06:67:a9:4f:33:eb:66:5e:c5:66:8a:f9:98:63:6b:6c:a4:
fe:e1:e9:02:9a:98:4d:0b:0d:eb:99:92:a6:4a:12:b8:58:56:
4e:ee:df:70:e4:02:b8:39:3a:78:8a:27:12:9c:7e:23:9d:ce:
d8:46:08:0a:70:4d:f1:ed:2f:11:e8:a7:c1:5c:0f:8d:2a:1a:
a9:7b:19:04:b4:0b:85:46:d5:e6:ba:0a:54:0c:5a:a5:dc:d5:
fb:1d:f5:51:8d:4d:52:45:d9:28:86:03:e9:ee:91:8c:1b:82:
f5:88:86:b5:d4:4f:3c:d6:34:ff:7a:ac:72:24:70:39:b0:4d:
d1:3c:91:03:0c:d0:c6:24:5c:c1:89:34:2e:4c:fe:df:2d:36:
7c:38:73:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:12 2025 by rpki-client