Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/xXA6RadXf0xbEDLL9dK5UzmWgDo.roa
File: xXA6RadXf0xbEDLL9dK5UzmWgDo.roa (raw, json)
Hash identifier: 5KLw1FYosGh4kuqZTImYbRhtqI/4n9SAM10TSxxSD5I=
Subject key identifier: C5:70:3A:45:A7:57:7F:4C:5B:10:32:CB:F5:D2:B9:53:39:96:80:3A
Certificate issuer: /CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Certificate serial: 01856FCB8831B5B714553DD4FB18F3063367
Authority key identifier: 31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/xXA6RadXf0xbEDLL9dK5UzmWgDo.roa
Signing time: Mon 02 Jan 2023 00:04:47 +0000
ROA not before: Mon 02 Jan 2023 00:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44016
IP address blocks: 91.235.168.0/24 maxlen: 24
212.115.104.0/22 maxlen: 24
193.23.60.0/24 maxlen: 24
2a09:8400::/29 maxlen: 48
2a0f:75c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:88:31:b5:b7:14:55:3d:d4:fb:18:f3:06:33:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Validity
Not Before: Jan 2 00:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5703a45a7577f4c5b1032cbf5d2b9533996803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:33:fd:2d:48:dd:58:42:1e:f4:c4:a3:e8:03:
fa:74:1f:56:ae:28:c0:12:c8:ff:f0:49:13:1c:81:
e2:dc:62:82:fd:5b:21:15:80:61:27:4d:a0:92:ca:
d1:52:5f:73:47:00:70:7a:a5:b1:b4:27:c6:6d:ef:
c6:30:67:2d:f3:43:c8:32:3b:90:11:d5:1c:8f:02:
79:b5:27:bc:39:9a:95:f3:0f:ce:0e:eb:1a:cb:5f:
74:32:e1:fb:12:1a:8d:58:40:ce:d9:36:fc:e7:1d:
6c:5d:f9:3c:a8:b2:5b:8e:4d:c8:3c:0d:b7:ff:17:
d9:b1:2d:05:b4:e5:39:22:78:b3:d3:a2:4b:8c:d5:
14:d4:60:3e:93:43:b4:1e:3c:fa:b7:c2:30:ae:6e:
e8:bf:c4:cf:55:7b:5c:08:99:67:c7:da:a9:9f:89:
b8:2c:98:c0:d6:ee:25:9f:b2:15:a4:a5:6b:c4:a1:
a9:e8:9d:02:1d:93:26:29:c2:3a:a9:f0:e7:fd:b3:
21:ae:74:a6:ed:65:51:0a:8f:48:44:6b:51:2e:4d:
f7:ef:dc:25:ae:2d:13:02:83:bb:62:8a:ac:a7:59:
0c:96:6e:46:63:53:ab:fd:59:08:4c:61:2d:c6:c3:
7c:25:e9:59:0b:fe:e4:6c:e1:00:57:15:74:8e:f0:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:70:3A:45:A7:57:7F:4C:5B:10:32:CB:F5:D2:B9:53:39:96:80:3A
X509v3 Authority Key Identifier:
keyid:31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/xXA6RadXf0xbEDLL9dK5UzmWgDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/MYvRHaD6nJSeLkqHfF2U4U_9fbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
193.23.60.0/24
212.115.104.0/22
IPv6:
2a09:8400::/29
2a0f:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:31:b3:90:7e:90:f0:fc:d5:93:8b:73:b0:ea:fa:13:86:0f:
19:80:e6:0e:90:4d:6c:85:7f:21:e2:a2:0d:87:9b:8d:03:64:
92:b4:0b:ac:cc:30:11:87:2b:44:a5:9b:7c:51:b5:e7:f9:b2:
1f:48:dd:2c:e5:b5:c0:d1:76:3a:56:c2:dd:05:85:b2:1c:23:
9e:ff:75:e9:53:18:a2:31:fe:8e:f8:71:bc:ff:39:e2:ba:1b:
6d:54:55:26:66:a1:0c:82:b8:c3:21:ff:25:9b:86:04:99:1a:
83:03:2a:a2:5a:81:c0:ce:d9:d1:9b:9e:b9:69:ec:ed:d2:29:
cf:50:a6:15:62:9e:00:f8:90:9a:45:ea:db:ec:ae:a4:c8:8f:
d7:d2:2d:f1:0c:1c:1f:9d:e6:2e:6d:d6:bc:bd:11:dc:8d:c0:
61:bd:57:b5:47:18:ee:f8:2b:5e:96:9a:52:ee:40:2c:10:9e:
3a:9a:0f:ba:ee:10:5c:30:38:40:26:f2:4f:15:8c:27:06:12:
87:21:1e:6e:2f:69:01:e7:9f:a2:5a:7a:13:33:48:2c:6a:72:
a0:84:88:9f:72:94:80:2c:ab:e7:43:1e:ef:b5:91:9c:5d:0c:
78:7f:e7:8e:5e:65:95:09:56:8e:e5:07:11:af:05:4e:b4:6b:
f1:c0:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:15 2025 by rpki-client