Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bab5cd-4746-4923-b4f9-6bb1e43de5bf/1/xcI80TDgqU0B4lVol641doUU5Gg.roa
File: xcI80TDgqU0B4lVol641doUU5Gg.roa (raw, json)
Hash identifier: 35Lz3Oh4RsBR2frqDGj8/5GWvjvYf5SYNggkGZy39tU=
Subject key identifier: C5:C2:3C:D1:30:E0:A9:4D:01:E2:55:68:97:AE:35:76:85:14:E4:68
Certificate issuer: /CN=096f7a77b57a6d32d377dea8fb205b6b3c2a5c42
Certificate serial: 0343DC06
Authority key identifier: 09:6F:7A:77:B5:7A:6D:32:D3:77:DE:A8:FB:20:5B:6B:3C:2A:5C:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW96d7V6bTLTd96o-yBbazwqXEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bab5cd-4746-4923-b4f9-6bb1e43de5bf/1/xcI80TDgqU0B4lVol641doUU5Gg.roa
Signing time: Sat 01 Jan 2022 02:56:55 +0000
ROA not before: Sat 01 Jan 2022 02:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47909
IP address blocks: 94.154.85.0/24 maxlen: 24
94.154.82.0/24 maxlen: 24
94.154.84.0/24 maxlen: 24
94.154.81.0/24 maxlen: 24
94.154.83.0/24 maxlen: 24
94.154.80.0/24 maxlen: 24
94.154.80.0/21 maxlen: 21
94.154.87.0/24 maxlen: 24
94.154.86.0/24 maxlen: 24
194.143.149.0/24 maxlen: 24
194.143.148.0/23 maxlen: 23
194.143.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54778886 (0x343dc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096f7a77b57a6d32d377dea8fb205b6b3c2a5c42
Validity
Not Before: Jan 1 02:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5c23cd130e0a94d01e2556897ae35768514e468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:40:bd:b4:da:b6:af:2b:5c:45:a8:5b:ad:
e2:cb:c3:33:c8:3d:7f:c2:b2:66:44:85:8c:24:cf:
72:54:30:c4:0a:5e:20:56:cd:c3:f3:04:02:36:69:
aa:31:a2:48:a2:cf:50:98:b6:9f:74:75:b1:db:a5:
3e:0b:35:a0:cf:76:b6:b2:c8:16:12:09:73:51:58:
2b:88:e8:49:31:31:4a:3c:c7:a2:1a:97:79:22:32:
37:2d:6f:17:43:1e:0e:1c:76:f8:83:38:0a:58:9f:
3b:2d:20:81:81:b2:b5:17:1b:90:dc:14:1f:14:1c:
d6:a5:fd:02:a5:33:4c:f0:0c:dc:00:22:af:cc:3c:
fc:0a:18:e8:1d:e5:1b:5b:96:ea:1b:2a:d1:db:64:
d7:65:4e:d7:a9:20:33:c5:c9:55:29:e3:24:40:4d:
ec:69:d0:c7:ea:d2:e8:37:33:52:01:4f:e1:4a:6e:
03:1d:ae:fd:38:c8:9b:f6:53:c0:27:e3:9b:fc:39:
22:25:16:d8:93:12:82:4c:a8:9c:c6:1e:a1:de:87:
6c:37:b3:50:0a:24:71:09:a8:c2:2c:07:8a:27:23:
97:ce:fe:6a:d5:f1:fb:bf:b5:ff:3f:3b:26:c2:9b:
d7:46:13:c6:af:b3:ce:57:7c:49:5e:e7:32:63:29:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:3C:D1:30:E0:A9:4D:01:E2:55:68:97:AE:35:76:85:14:E4:68
X509v3 Authority Key Identifier:
keyid:09:6F:7A:77:B5:7A:6D:32:D3:77:DE:A8:FB:20:5B:6B:3C:2A:5C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW96d7V6bTLTd96o-yBbazwqXEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bab5cd-4746-4923-b4f9-6bb1e43de5bf/1/xcI80TDgqU0B4lVol641doUU5Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bab5cd-4746-4923-b4f9-6bb1e43de5bf/1/CW96d7V6bTLTd96o-yBbazwqXEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.80.0/21
194.143.148.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:b9:67:56:e7:13:a6:1f:c8:15:cb:40:97:a9:6f:ed:55:fc:
2e:2d:31:e8:a1:7b:68:f4:ac:f5:55:c0:98:39:97:2e:1e:a6:
ac:21:3a:90:53:b4:82:97:a8:ad:6b:18:fd:87:aa:07:3d:c1:
16:f6:10:9e:3f:b1:e2:4f:6d:6f:5e:ce:5f:23:ac:04:e2:02:
45:17:82:71:a9:9e:03:b3:dd:8a:3d:fe:34:1b:a2:9f:6a:12:
15:10:43:73:47:14:24:29:3e:72:39:75:5b:c2:09:96:37:9f:
1c:57:18:19:d1:e8:d6:db:a1:c3:f1:4b:98:2e:14:1f:20:a1:
cb:11:f3:95:4c:fd:50:80:ab:45:17:d6:9a:b4:4f:e6:02:3a:
d5:bd:db:ad:f6:79:5a:dd:85:06:c9:f3:54:95:59:2a:d9:45:
ba:d5:7a:c5:5a:ee:5a:85:90:57:ff:5c:20:21:38:5e:51:6d:
26:db:0d:ed:6b:2a:b6:d1:e3:d2:43:df:70:66:7f:ca:a2:6c:
c4:32:41:83:36:75:db:5d:19:52:b3:b3:ca:d1:64:a3:79:93:
1f:d6:ab:d7:00:c7:b7:e3:19:07:08:f5:ff:18:f6:c0:41:81:
bf:e2:5a:df:94:79:76:56:53:8c:3e:2f:e0:dd:b2:ea:10:81:
97:cf:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:16 2025 by rpki-client