Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/xBagQhSWC-CdpYULqwAl-i4BhL4.roa
File: xBagQhSWC-CdpYULqwAl-i4BhL4.roa (raw, json)
Hash identifier: Kmd6HGYdp3eSXGKIYjcAKawM9NAXCpjanIEPArwFpWg=
Subject key identifier: C4:16:A0:42:14:96:0B:E0:9D:A5:85:0B:AB:00:25:FA:2E:01:84:BE
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0196EE94C981AB45ABA1EDB7B1642F974197
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/xBagQhSWC-CdpYULqwAl-i4BhL4.roa
Signing time: Tue 20 May 2025 16:44:10 +0000
ROA not before: Tue 20 May 2025 16:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.153.0/24 maxlen: 24
89.150.49.0/24 maxlen: 24
185.123.157.0/24 maxlen: 24
185.123.158.0/24 maxlen: 24
185.123.159.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
193.17.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:94:c9:81:ab:45:ab:a1:ed:b7:b1:64:2f:97:41:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: May 20 16:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c416a04214960be09da5850bab0025fa2e0184be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:15:28:f6:de:a2:69:06:4a:8b:51:eb:aa:
87:c9:9a:09:1d:32:5d:39:28:1a:c7:49:61:f2:88:
ab:8e:86:b9:30:4d:24:53:d4:94:7d:dd:d9:82:74:
fd:68:b0:51:a4:9c:da:b5:7d:c0:8f:a4:65:e1:d2:
1b:aa:01:3f:75:1a:49:42:5c:38:a7:27:dd:1c:ca:
c4:f0:83:fe:cc:db:89:9a:e0:52:91:eb:97:e7:53:
26:b8:4f:fe:73:5c:bb:ff:a7:67:f5:98:7a:c2:03:
80:9a:ed:93:35:b0:e2:90:ca:8e:6f:a0:a8:0c:f3:
cb:cd:42:18:53:1b:43:fe:3c:7b:39:47:60:32:e1:
a1:f1:ab:c6:79:7d:2b:8b:b5:44:b4:22:6f:b7:16:
c4:0b:23:f8:4e:47:34:ea:d9:1d:8c:a4:23:a1:8b:
19:64:37:63:55:6b:f9:b4:cf:d9:40:ad:4f:50:5e:
5a:2b:d5:15:cd:f1:90:b0:fe:21:cd:1c:f2:a7:eb:
e7:94:86:b5:c6:1a:84:e9:b3:b4:f4:ec:2b:67:39:
31:f6:f5:89:d0:33:4e:cb:06:87:92:02:1f:0b:6e:
d1:dd:95:3a:c2:bb:0e:71:2f:13:86:0a:9f:9c:51:
e8:63:68:d2:d1:f3:72:f8:85:d0:65:28:56:eb:ae:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:16:A0:42:14:96:0B:E0:9D:A5:85:0B:AB:00:25:FA:2E:01:84:BE
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/xBagQhSWC-CdpYULqwAl-i4BhL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
89.150.49.0/24
185.123.157.0-185.123.159.255
185.162.176.0/24
193.17.95.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ad:b7:f3:29:7a:4c:52:74:19:54:2a:92:5d:aa:38:69:22:
5c:2f:a2:f5:ac:d3:8d:78:12:21:5f:cf:b3:a0:fa:49:06:45:
66:99:8c:4d:e2:83:e6:00:55:66:62:5e:97:f4:97:bd:4c:a0:
42:9a:b4:af:71:d5:f4:89:93:88:94:5e:d4:c4:7b:2b:7d:e6:
a5:5d:78:1b:9d:f6:68:76:b4:50:fc:14:8b:6d:d7:d0:ba:66:
f6:3f:04:6d:ae:e1:d5:7f:d2:32:a2:24:74:20:37:f7:56:b1:
f6:0a:a7:c1:c1:66:c6:94:52:e7:24:01:e8:1b:80:06:0c:f4:
26:7d:7b:b2:d9:fb:e5:b8:b9:a0:8e:a3:7f:5a:4e:ed:73:01:
4c:5e:72:fc:a9:42:91:9b:14:b8:17:83:63:da:80:72:24:33:
c2:ba:8f:61:0a:06:23:c4:ff:71:78:21:f8:91:60:0e:9b:be:
10:80:9d:77:b6:0f:95:fc:8c:d2:85:79:f2:26:6b:4b:3d:54:
44:ac:3c:90:65:88:f6:e4:0c:51:35:37:72:68:54:f4:1e:00:
f8:99:d3:69:af:d7:59:0a:18:88:25:95:80:a7:f7:99:dc:0c:
9b:dc:1a:90:b0:a4:1a:9d:a1:fa:fb:a0:dc:c7:9f:ac:ec:d1:
1d:81:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:28:29 2025 by rpki-client