Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/xnynb6ZbVphY17eL44tNUD6FdtM.roa
File: xnynb6ZbVphY17eL44tNUD6FdtM.roa (raw, json)
Hash identifier: aGjCMZd441gHskLtab8MXJtzSfVKNikkX0711IjLPWE=
Subject key identifier: C6:7C:A7:6F:A6:5B:56:98:58:D7:B7:8B:E3:8B:4D:50:3E:85:76:D3
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 0194236962F177C1DA599D9D257794DF96C3
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/xnynb6ZbVphY17eL44tNUD6FdtM.roa
Signing time: Wed 01 Jan 2025 19:48:16 +0000
ROA not before: Wed 01 Jan 2025 19:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 24.133.118.0/23 maxlen: 23
24.133.225.0/24 maxlen: 24
46.197.16.0/21 maxlen: 21
46.197.69.0/24 maxlen: 24
94.54.8.0/22 maxlen: 22
94.54.12.0/23 maxlen: 23
94.55.120.0/21 maxlen: 24
94.55.122.0/23 maxlen: 24
94.55.124.0/23 maxlen: 24
94.55.126.0/24 maxlen: 24
94.55.127.0/24 maxlen: 24
176.240.0.0/23 maxlen: 23
176.240.2.0/24 maxlen: 24
176.240.3.0/24 maxlen: 24
176.240.228.0/22 maxlen: 22
178.233.36.0/22 maxlen: 22
178.233.112.0/20 maxlen: 20
178.233.156.0/23 maxlen: 23
178.233.164.0/23 maxlen: 23
2a00:1d58::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:62:f1:77:c1:da:59:9d:9d:25:77:94:df:96:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jan 1 19:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c67ca76fa65b569858d7b78be38b4d503e8576d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:19:75:3e:e9:9e:e4:05:52:e2:94:0d:f4:
01:3e:88:bd:55:58:d1:7a:32:ec:89:8c:88:2d:ba:
cb:7a:72:27:22:6e:1d:36:4c:0c:d6:30:da:6f:50:
91:56:f0:c3:ca:08:3d:6b:a7:97:5c:da:a9:3b:7c:
5b:cc:6f:3b:06:de:a7:b7:f8:54:09:52:80:42:e6:
0e:45:9e:ba:03:05:c6:f3:85:7a:45:9f:45:25:7f:
e9:4e:82:06:09:cb:9b:72:80:54:31:63:5b:b9:4f:
11:19:30:d6:fc:55:6a:cd:80:76:90:a5:11:69:af:
92:6a:10:93:50:13:a9:43:08:68:f9:d4:ce:06:a1:
bc:b4:93:20:d4:04:ea:fa:e7:70:2f:ae:ea:48:d9:
cd:d3:25:d1:02:21:d9:f9:91:d3:ab:8a:da:0e:d6:
83:2c:a0:38:34:ee:d6:90:3e:e2:d1:5f:6c:5b:63:
3c:81:23:f6:6d:a3:6c:d1:e9:f1:25:f9:7d:09:73:
6d:5e:79:1f:b3:57:92:91:62:bd:8f:3b:79:41:96:
24:fb:ff:89:cb:8e:40:a4:2e:83:e3:ef:d4:40:f3:
ba:5c:f3:22:16:1e:3c:db:b6:8a:ff:92:52:a9:f0:
07:56:45:5e:a0:c9:db:e6:8e:13:aa:8d:54:08:7d:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7C:A7:6F:A6:5B:56:98:58:D7:B7:8B:E3:8B:4D:50:3E:85:76:D3
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/xnynb6ZbVphY17eL44tNUD6FdtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.133.118.0/23
24.133.225.0/24
46.197.16.0/21
46.197.69.0/24
94.54.8.0-94.54.13.255
94.55.120.0/21
176.240.0.0/22
176.240.228.0/22
178.233.36.0/22
178.233.112.0/20
178.233.156.0/23
178.233.164.0/23
IPv6:
2a00:1d58::/36
Signature Algorithm: sha256WithRSAEncryption
14:3e:3b:5f:e9:88:6b:69:04:f5:d0:6f:b3:1a:be:2a:90:9b:
76:94:aa:c3:23:64:a2:3a:33:54:f2:b7:cf:2f:ee:77:0b:c0:
ee:42:61:1f:77:3f:36:7e:be:bb:f5:82:81:24:d6:d0:47:5e:
53:2b:e0:f8:33:55:01:4c:98:51:dd:be:b6:6b:59:b8:9a:62:
4d:aa:08:9c:7b:ed:76:3d:c1:56:d3:ba:5d:2d:81:2d:13:a1:
65:66:00:e6:44:e5:c2:cc:98:51:23:33:59:66:71:d9:48:e0:
3d:69:1e:a2:f7:ba:b3:44:6a:ee:cb:62:ba:26:74:bf:d0:34:
c5:b3:b6:74:31:b0:a2:0e:ee:db:1c:ac:2b:e0:35:01:f3:63:
13:6b:12:6c:ba:8c:c3:3d:27:30:e2:f6:ed:55:f4:04:88:1a:
cb:76:3e:73:44:b7:63:6b:3f:f0:6e:53:2e:e9:2a:c5:48:01:
65:36:9b:6e:31:8c:09:f1:60:71:27:05:07:59:bc:2f:83:0f:
85:11:60:f2:53:51:ca:f9:0c:de:9e:9d:82:1e:e8:74:14:be:
ca:df:ce:b9:3b:71:6f:f0:e0:53:03:c8:17:73:e6:d4:45:f3:
1b:e2:b2:a6:c4:42:7d:c5:9d:1a:60:be:6d:14:2d:04:9e:69:
0d:33:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:10 2025 by rpki-client