Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa
File: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (raw, json)
Hash identifier: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=
Subject key identifier: 5F:94:14:90:E1:AF:1E:A8:7D:80:12:E0:99:3A:F3:66:30:3E:2A:95
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 019423690B62FB627B2D7CFB9B6C5A2CFB2A
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa
Signing time: Wed 01 Jan 2025 19:47:54 +0000
ROA not before: Wed 01 Jan 2025 19:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207680
IP address blocks: 185.128.80.0/22 maxlen: 22
185.128.80.0/24 maxlen: 24
185.128.81.0/24 maxlen: 24
185.128.82.0/24 maxlen: 24
185.128.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0b:62:fb:62:7b:2d:7c:fb:9b:6c:5a:2c:fb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f941490e1af1ea87d8012e0993af366303e2a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:a9:85:fb:56:f5:9e:88:58:be:8d:9d:b7:
41:6b:57:41:19:41:92:fc:35:3f:b1:02:1d:e4:dc:
fd:56:c3:d8:d2:c3:26:1a:ee:6d:d9:6b:ec:50:85:
44:ee:73:52:30:c1:57:18:c6:3a:d1:80:c1:db:47:
19:ab:24:9a:d3:09:e7:8b:08:e1:00:62:57:2a:a6:
73:8a:9e:6a:80:f9:00:f7:19:87:5a:e7:c6:57:82:
71:d4:d8:e0:1e:1a:4a:af:c0:34:ef:c3:fb:bb:0a:
5b:1c:cc:2a:1c:63:99:32:56:8a:0c:2d:62:02:67:
41:eb:b8:84:a8:f5:60:21:55:d4:f4:9f:b2:04:96:
3b:21:4c:58:96:e0:ae:d1:8c:dc:e5:c9:95:9a:64:
28:fb:86:a4:78:07:09:7f:74:44:78:09:4f:c5:ed:
7f:f6:98:1f:d6:56:2a:f9:dd:92:85:03:95:e3:28:
ba:14:d7:a3:fc:6e:aa:08:2d:c0:29:ca:0a:df:06:
2e:3f:c3:c6:40:7a:46:cf:35:52:95:df:d7:3a:f7:
6a:9e:c8:12:87:b4:69:c7:0d:6b:a4:a8:65:b8:39:
54:10:26:f7:e6:be:29:f5:13:83:dc:19:b0:6a:68:
6a:d7:a1:f5:a0:ba:61:a4:b7:6b:41:28:f3:16:3c:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:14:90:E1:AF:1E:A8:7D:80:12:E0:99:3A:F3:66:30:3E:2A:95
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.80.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:57:58:1d:cc:10:5b:20:99:b9:f8:73:24:d2:6f:3c:58:09:
82:79:49:57:63:ac:7d:9c:8d:81:e7:ca:28:c6:8b:5e:00:77:
02:a3:a2:7c:48:59:20:c3:9d:1f:0f:15:bc:dd:37:2e:da:33:
2d:51:87:92:c4:84:23:05:5a:2e:40:70:10:50:b0:e7:0e:bf:
30:ad:d1:b8:f3:1b:19:8e:0e:d7:0d:94:8b:c5:60:1f:49:c6:
f7:c0:27:ae:3e:7a:3f:02:f5:28:dd:cb:eb:11:1e:b3:83:b2:
13:fa:9b:4b:66:db:3d:65:ad:ba:cc:e6:57:60:8d:56:e5:53:
c9:f0:fe:dc:a6:63:4f:a5:5d:c0:71:ce:57:22:ed:bb:39:a5:
19:2d:04:1a:c9:d6:ec:5f:11:bf:b5:05:e3:cd:25:dc:85:c8:
a0:21:58:e6:28:23:b9:f4:dc:d7:62:fd:3c:89:35:1b:d8:42:
94:54:53:f1:95:32:ce:d7:f6:0c:e2:5d:a6:68:60:cd:e0:20:
73:15:78:d2:76:51:38:79:6e:10:ad:6a:a7:4f:5b:8c:5e:89:
cf:5a:bf:09:10:20:59:ff:9d:ba:2b:13:10:72:43:27:1c:02:
4c:5c:17:c3:89:02:02:b5:38:e3:be:09:94:04:e3:93:51:88:
db:bc:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:47 2025 by rpki-client