Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/xHeFV7LDVFZB_AXsHUMISj0MMpM.roa
File: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (raw, json)
Hash identifier: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=
Subject key identifier: C4:77:85:57:B2:C3:54:56:41:FC:05:EC:1D:43:08:4A:3D:0C:32:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01941F8C4A6F09D3DC7CCC42966005DC23FD
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/xHeFV7LDVFZB_AXsHUMISj0MMpM.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47264
IP address blocks: 80.247.95.0/24 maxlen: 24
185.95.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4a:6f:09:d3:dc:7c:cc:42:96:60:05:dc:23:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4778557b2c3545641fc05ec1d43084a3d0c3293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:5c:ee:96:2a:29:e4:9a:ac:c2:9f:75:66:
23:ab:e2:bc:56:38:f4:f8:9f:d6:0e:8c:6e:97:51:
8d:31:0e:cf:98:5e:87:ed:61:38:75:19:ac:25:24:
72:a7:8c:dd:ac:b4:15:94:8b:71:9b:43:f2:34:6e:
f0:a0:58:e2:8f:3a:2e:0f:d2:f0:ce:c4:2d:06:66:
07:4e:8a:09:7c:63:15:36:ea:d6:7e:23:01:17:02:
57:ca:e9:57:e9:76:50:65:3e:9b:ab:5a:20:1e:a8:
e6:91:b2:89:07:f8:c4:fc:17:c9:8f:17:e5:77:9f:
d9:41:86:ed:eb:ef:e6:5d:c9:b7:ce:b7:e9:68:fb:
27:dd:0f:cd:6e:71:00:4f:e8:6d:06:20:6a:a8:e7:
f9:03:af:19:5f:51:b8:31:3c:8f:69:92:93:49:b6:
3e:c9:20:59:67:b6:c1:e2:30:42:c0:0d:3f:9b:a6:
68:49:f1:d2:1a:14:51:57:60:95:82:a7:73:5c:ab:
29:3a:8f:20:e1:ab:30:1c:36:f1:b5:cf:53:cf:72:
fc:cd:b3:a1:3e:2c:28:e5:05:fb:8c:60:8f:44:60:
bd:f1:3b:00:b3:67:db:7c:db:32:e0:e7:9d:55:31:
7e:a1:d6:68:a6:cf:18:bb:73:53:e0:3f:a1:a7:fd:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:85:57:B2:C3:54:56:41:FC:05:EC:1D:43:08:4A:3D:0C:32:93
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/xHeFV7LDVFZB_AXsHUMISj0MMpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.95.0/24
185.95.48.0/22
Signature Algorithm: sha256WithRSAEncryption
85:a5:5e:ca:3f:8f:b0:e6:62:15:b1:7d:00:fc:71:7d:5f:23:
ef:ee:d4:51:4a:ab:a9:41:c7:d5:4f:34:d9:d4:11:47:9f:07:
5b:a6:83:e5:f8:0c:da:23:63:50:42:95:10:37:b2:0c:7d:9d:
c1:3f:3b:e8:7b:c8:73:22:aa:4f:5d:78:48:a1:37:07:e3:a4:
fe:15:28:09:e4:d3:04:3d:d4:c3:4a:71:0d:0c:c2:37:04:fa:
28:bc:21:a0:03:6a:e0:82:ed:4d:4f:cb:31:d6:e7:71:6d:4f:
b8:05:d5:e3:32:7b:aa:c0:e3:4d:f4:32:cd:8b:78:5b:70:82:
a4:3d:c9:2f:87:df:ca:e9:c7:e7:55:1d:eb:3e:14:9f:16:39:
03:e7:a7:c8:61:29:a5:29:0c:d8:22:a8:dc:0c:40:08:64:51:
f5:d1:41:65:75:dc:7c:6c:89:b4:d7:94:2e:ae:0c:15:9d:5a:
0b:5e:21:79:8c:b6:a3:f2:03:e7:b6:54:11:b4:27:22:5d:34:
08:29:8f:69:2e:37:91:fb:ba:6b:dc:b6:8e:78:6a:33:1a:7f:
9e:00:1c:3e:64:bb:bb:94:e9:3a:3d:d3:e9:08:f2:86:9b:39:
87:c4:ce:e5:5a:a4:3f:35:b3:96:a4:1a:de:20:68:e2:dc:d9:
b0:b3:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:59 2025 by rpki-client