Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/XBj8T-sMyA4HDdmkc7gblixIgLY.roa
File: XBj8T-sMyA4HDdmkc7gblixIgLY.roa (raw, json)
Hash identifier: M7W+3zG/4cxj32KwBRlgvs4BMAjAE1RcLg6LElt6mCY=
Subject key identifier: 5C:18:FC:4F:EB:0C:C8:0E:07:0D:D9:A4:73:B8:1B:96:2C:48:80:B6
Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial: 01942368DB2B7A0B2DE220C921B36A1877B3
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/XBj8T-sMyA4HDdmkc7gblixIgLY.roa
Signing time: Wed 01 Jan 2025 19:47:41 +0000
ROA not before: Wed 01 Jan 2025 19:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 77.222.64.0/19 maxlen: 24
87.249.96.0/19 maxlen: 24
185.76.16.0/22 maxlen: 24
217.114.96.0/20 maxlen: 24
2001:1540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:db:2b:7a:0b:2d:e2:20:c9:21:b3:6a:18:77:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
Validity
Not Before: Jan 1 19:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c18fc4feb0cc80e070dd9a473b81b962c4880b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:25:e6:c1:1d:77:d2:5b:8f:16:71:6f:f6:
8b:86:75:be:5e:a3:3c:9b:1d:6f:89:cc:9e:37:36:
00:fe:dc:e3:54:40:c8:bb:5a:18:30:1b:7b:a7:88:
e8:1b:5f:e7:68:4e:d2:2e:a5:c3:e5:2f:6d:c4:75:
ac:e8:7a:5c:7c:7c:98:ae:64:d6:3a:4b:29:b6:ab:
25:9b:54:12:d6:6c:7b:26:13:e9:2a:79:bc:ed:2f:
db:39:93:60:75:32:ff:91:8c:e5:e3:7e:02:8c:a6:
22:39:cb:e5:f9:0b:8c:1e:73:23:53:6b:cf:e7:e1:
ed:2d:f6:c1:21:1c:89:67:d7:3b:a1:6b:98:92:13:
8b:7f:b1:52:44:83:67:52:e1:1b:2e:e4:27:ac:c3:
c1:91:b0:c1:db:a3:5e:9b:c3:a6:ca:c3:01:0c:92:
59:40:03:49:f5:a2:57:95:8c:59:45:07:66:4f:17:
69:d9:45:c7:ba:d8:57:40:54:52:b6:6d:65:33:a8:
55:b6:d2:00:55:a7:8f:88:63:8d:d6:27:17:09:01:
85:bb:d6:a7:63:e7:3f:00:b6:b0:2d:0f:4a:71:73:
02:59:a1:b6:a7:4b:a5:76:4b:1b:cf:b9:f7:78:89:
2c:68:d9:de:d2:f9:b9:d7:2a:df:33:9e:1e:89:11:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:FC:4F:EB:0C:C8:0E:07:0D:D9:A4:73:B8:1B:96:2C:48:80:B6
X509v3 Authority Key Identifier:
keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/XBj8T-sMyA4HDdmkc7gblixIgLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.64.0/19
87.249.96.0/19
185.76.16.0/22
217.114.96.0/20
IPv6:
2001:1540::/32
Signature Algorithm: sha256WithRSAEncryption
3b:b0:f3:65:c5:3d:68:b7:c5:4c:3f:9c:58:d6:00:9f:40:34:
a5:f7:1f:8e:9f:d1:e5:a6:bf:4d:41:ba:d7:fc:7f:73:54:73:
20:1f:66:2b:fd:2a:09:ab:30:36:f9:c8:ba:d1:bd:ec:8a:b2:
eb:c6:3c:87:5a:81:b2:8f:7b:b3:fc:11:1d:79:94:8b:ba:25:
bd:a0:3e:4b:5d:37:c0:42:ee:d5:e8:c5:a0:0c:06:52:d1:e0:
bc:60:cb:68:b7:d5:18:42:4b:2f:19:37:95:df:11:3b:17:15:
8e:a9:1b:5b:7e:d7:e0:e7:77:62:71:be:51:7c:4b:62:2b:8a:
e0:f2:b5:b4:fa:60:81:84:2a:4d:e4:a6:bc:0b:d8:f5:ec:44:
fa:eb:95:f2:ea:2c:f1:dc:63:4a:74:4f:df:56:14:e4:d0:a3:
06:83:b9:56:42:b5:56:7c:42:e5:9a:dc:04:b3:3f:fa:96:63:
09:49:da:df:94:3d:4f:b0:b6:55:a2:69:22:08:1d:f7:d7:cb:
e8:2d:7f:13:f4:87:52:77:4c:03:b3:70:27:74:61:e2:2f:bb:
7b:d7:70:eb:03:0d:24:33:05:1f:fe:f7:86:42:9f:50:60:ab:
35:3c:9b:d0:05:3e:03:07:8b:ac:01:05:be:9e:75:c3:4a:d2:
05:7a:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:19 2025 by rpki-client