Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/XK3m5m9D-x9fvYelJ012WnW2Xog.roa
File: XK3m5m9D-x9fvYelJ012WnW2Xog.roa (raw, json)
Hash identifier: uj4ER+AdCmGKRZXl0/zG8YdqqGFuaXIIxndencWXdmE=
Subject key identifier: 5C:AD:E6:E6:6F:43:FB:1F:5F:BD:87:A5:27:4D:76:5A:75:B6:5E:88
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 019427B49234D53BB08E4F5AB4762CFE2F10
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/XK3m5m9D-x9fvYelJ012WnW2Xog.roa
Signing time: Thu 02 Jan 2025 15:48:52 +0000
ROA not before: Thu 02 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44794
IP address blocks: 185.235.80.0/24 maxlen: 24
2a0d:4d00::/48 maxlen: 48
2a0d:4d00:1::/48 maxlen: 48
2a0d:4d00:2::/48 maxlen: 48
2a0d:4d00:3::/48 maxlen: 48
2a0d:4d00:80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:92:34:d5:3b:b0:8e:4f:5a:b4:76:2c:fe:2f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jan 2 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cade6e66f43fb1f5fbd87a5274d765a75b65e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:37:e5:e4:93:d2:e1:0a:de:3e:94:77:58:
5e:9b:a4:81:44:c0:dd:f9:36:5d:d2:99:2d:d6:6e:
57:77:1e:1e:d7:c1:3a:48:c4:76:64:7f:e8:a9:0f:
6d:65:b6:b5:7b:e3:94:1c:e4:75:4d:b2:a1:c0:3c:
e4:31:ee:53:26:59:82:ea:5a:1e:04:35:3a:a0:a4:
ea:92:ec:b4:fd:66:ec:10:56:5e:0a:b8:72:35:12:
56:f9:aa:83:e7:ac:3f:07:4c:6a:23:c4:4e:2c:24:
25:bc:66:18:f6:70:19:33:45:40:95:15:e3:d3:85:
95:9b:ff:b9:c0:5c:aa:88:b4:e1:f4:a3:8c:df:a7:
98:64:b0:26:13:10:73:26:25:95:05:f8:11:3f:c2:
92:9c:c7:60:e1:d5:af:35:08:3b:09:dc:9c:83:2d:
b4:9a:10:f5:3c:81:75:49:55:fb:b8:2d:45:4c:ad:
77:52:77:11:d8:87:a5:fe:ec:3f:9d:15:3f:80:94:
cc:91:0f:a5:10:a2:ed:a2:02:4f:9e:d2:04:68:2d:
27:4b:8d:4e:14:a3:5e:83:c0:33:09:1a:d5:d9:cd:
8e:a4:15:60:b2:1c:3f:24:52:21:cc:d7:94:e0:2e:
61:22:ed:88:55:4d:59:fd:01:05:a2:1b:e5:95:69:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AD:E6:E6:6F:43:FB:1F:5F:BD:87:A5:27:4D:76:5A:75:B6:5E:88
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/XK3m5m9D-x9fvYelJ012WnW2Xog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.80.0/24
IPv6:
2a0d:4d00::/46
2a0d:4d00:80::/48
Signature Algorithm: sha256WithRSAEncryption
6c:9e:cc:50:f8:de:8c:ed:75:39:0f:dd:fa:6f:00:24:3a:a9:
28:01:26:93:4f:d6:6d:ba:d2:0c:9f:ba:d4:3f:ba:5b:b6:6a:
35:40:98:70:d6:b6:76:93:d4:97:47:fd:4a:4a:25:c4:81:a2:
68:5e:46:ba:02:57:02:69:a4:20:c7:1c:ac:0b:ea:2e:64:0b:
6b:dc:df:a5:6b:ef:e8:81:11:5d:d7:43:1a:30:83:1e:ed:54:
53:19:a4:b5:e0:58:53:16:6b:e3:3a:3d:90:69:01:dc:c3:d2:
15:18:69:98:df:ff:a9:02:de:1e:36:19:ad:18:c4:a5:d4:af:
9a:d7:e4:33:37:89:52:f6:ba:a9:31:79:79:4e:e6:39:ba:2d:
a7:4a:62:7b:2f:46:7d:d7:39:7f:ca:96:57:6e:4b:9f:fa:3a:
3f:7e:ec:36:78:54:7d:5d:eb:fe:3a:6d:b2:ad:f3:1d:df:b8:
96:d9:c7:f1:3d:ac:92:69:85:27:e3:2f:6a:f0:1f:34:6f:86:
38:46:31:95:c5:3f:6a:25:40:1e:9b:b4:c5:76:d1:42:6f:38:
99:a4:f4:40:93:8c:e8:17:df:e5:cf:5b:67:c2:b1:c9:76:36:
8b:a2:65:00:2b:0f:fa:f9:c9:a9:39:68:8a:79:26:85:7e:db:
25:02:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:53 2025 by rpki-client