Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/xycylJPoLJYznykxES5GXbkC7CQ.roa
File: xycylJPoLJYznykxES5GXbkC7CQ.roa (raw, json)
Hash identifier: XodbnyvvOSlb7ywKVa3CS2cINhkIElNGXiZJ0W4UswY=
Subject key identifier: C7:27:32:94:93:E8:2C:96:33:9F:29:31:11:2E:46:5D:B9:02:EC:24
Certificate issuer: /CN=17993830a1af3bc8733bc2934a4a443cc5f43f8f
Certificate serial: 123C06B0
Authority key identifier: 17:99:38:30:A1:AF:3B:C8:73:3B:C2:93:4A:4A:44:3C:C5:F4:3F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5k4MKGvO8hzO8KTSkpEPMX0P48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/xycylJPoLJYznykxES5GXbkC7CQ.roa
Signing time: Sat 01 Jan 2022 14:06:07 +0000
ROA not before: Sat 01 Jan 2022 14:06:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50304
IP address blocks: 91.247.228.0/22 maxlen: 24
195.35.109.0/24 maxlen: 24
91.229.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305923760 (0x123c06b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17993830a1af3bc8733bc2934a4a443cc5f43f8f
Validity
Not Before: Jan 1 14:06:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c727329493e82c96339f2931112e465db902ec24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:f6:03:b5:53:df:7a:4e:27:55:8b:88:77:
9e:28:9a:ef:58:8e:ae:54:a5:ab:83:89:19:b9:e8:
38:9a:52:ab:b8:a5:c6:dd:86:5f:6f:3c:2e:d0:82:
34:4c:9c:a1:b9:15:8b:c1:5b:1f:9b:64:75:8c:2a:
f6:16:2e:19:1b:db:c3:fc:e3:0d:7b:2f:8d:9e:b4:
1d:f0:20:52:1d:a0:ee:70:5f:fb:ba:80:49:b5:1c:
5e:31:26:12:65:e8:30:98:3e:e8:41:54:3e:97:ab:
da:c7:4a:c1:50:81:7d:eb:bc:b6:9c:f3:f1:af:c9:
75:ac:fe:2a:78:26:64:ae:c0:9e:35:77:b5:9a:9b:
23:74:bc:30:b8:82:2c:3d:2e:d6:f2:ac:50:db:e4:
32:5e:83:ba:59:22:77:9e:b1:38:05:e9:c1:bf:24:
0a:76:48:82:65:0c:5d:67:dd:a9:ef:d6:63:e2:53:
ea:9c:87:e4:c2:7f:6d:ee:52:89:e8:e2:3a:66:0a:
fa:e2:46:4d:41:ec:54:fc:0d:41:82:cf:f4:bc:b8:
58:b4:0b:4c:b2:ea:b9:0a:bd:1c:e1:7f:0e:ab:56:
e2:11:ee:23:43:1b:8b:11:e4:66:01:e3:32:16:ab:
8e:53:13:d4:93:e5:fa:7d:29:5a:c2:2b:0b:a3:c3:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:27:32:94:93:E8:2C:96:33:9F:29:31:11:2E:46:5D:B9:02:EC:24
X509v3 Authority Key Identifier:
keyid:17:99:38:30:A1:AF:3B:C8:73:3B:C2:93:4A:4A:44:3C:C5:F4:3F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5k4MKGvO8hzO8KTSkpEPMX0P48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/xycylJPoLJYznykxES5GXbkC7CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.142.0/23
91.247.228.0/22
195.35.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:b0:6e:5b:43:67:14:df:b9:c5:88:c2:9c:1c:89:81:ab:20:
57:5d:ec:cc:f2:fe:f6:85:86:f9:ca:54:70:11:d8:62:52:14:
0e:bf:bb:0c:36:a9:5d:8b:88:18:13:cb:d6:f0:83:32:47:96:
30:9b:d3:45:94:e5:36:ab:b0:69:69:71:96:04:c7:2d:9f:84:
2c:e1:7b:c3:88:f9:06:4f:4f:97:bf:f7:36:72:ef:b1:85:de:
ce:5a:fb:83:7a:54:fc:b5:eb:44:30:a2:ea:0e:dc:11:c1:0b:
bb:6c:8c:ee:88:c7:44:10:78:dd:01:d3:05:e1:a3:82:0b:66:
d2:00:9f:89:50:63:35:91:41:bb:22:d8:3e:1d:7c:47:f7:cd:
a6:09:b3:af:33:42:1d:9e:1b:6d:f5:93:4e:09:f1:35:a0:5e:
15:d9:5f:01:d4:15:bc:a9:f4:bf:f1:38:d7:75:58:ff:d9:da:
57:7c:0f:59:9b:40:f9:60:aa:9e:0e:c0:d8:19:be:06:db:01:
7c:92:e1:51:d4:d7:40:76:1c:96:b5:43:82:66:3c:68:b5:3f:
5b:a8:a0:6f:79:d2:99:d2:64:eb:a1:21:1d:5a:1d:ed:34:bc:
12:24:19:65:c2:9f:d3:eb:42:2c:a4:0c:ce:7b:c2:55:0a:f1:
83:ae:92:f6
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEEjwGsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
Nzk5MzgzMGExYWYzYmM4NzMzYmMyOTM0YTRhNDQzY2M1ZjQzZjhmMB4XDTIyMDEw
MTE0MDYwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzcyNzMyOTQ5M2U4
MmM5NjMzOWYyOTMxMTEyZTQ2NWRiOTAyZWMyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALN09gO1U996TidVi4h3niia71iOrlSlq4OJGbnoOJpSq7il
xt2GX288LtCCNEycobkVi8FbH5tkdYwq9hYuGRvbw/zjDXsvjZ60HfAgUh2g7nBf
+7qASbUcXjEmEmXoMJg+6EFUPper2sdKwVCBfeu8tpzz8a/Jdaz+KngmZK7AnjV3
tZqbI3S8MLiCLD0u1vKsUNvkMl6Dulkid56xOAXpwb8kCnZIgmUMXWfdqe/WY+JT
6pyH5MJ/be5SiejiOmYK+uJGTUHsVPwNQYLP9Ly4WLQLTLLquQq9HOF/DqtW4hHu
I0MbixHkZgHjMharjlMT1JPl+n0pWsIrC6PDNZMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTHJzKUk+gsljOfKTERLkZduQLsJDAfBgNVHSMEGDAWgBQXmTgwoa87yHM7
wpNKSkQ8xfQ/jzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Y1azRNS0d2Tzhoek84S1RTa3BFUE1YMFA0OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvNmFiNDk3LTE2ZDktNGMwOS05NGQ5LTFiZTRjNDE2YTA5Yy8x
L3h5Y3lsSlBvTEpZem55a3hFUzVHWGJrQzdDUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
NmFiNDk3LTE2ZDktNGMwOS05NGQ5LTFiZTRjNDE2YTA5Yy8xL0Y1azRNS0d2Tzho
ek84S1RTa3BFUE1YMFA0OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAVvljgMEAlv35AMEAMMjbTANBgkq
hkiG9w0BAQsFAAOCAQEAubBuW0NnFN+5xYjCnByJgasgV13szPL+9oWG+cpUcBHY
YlIUDr+7DDapXYuIGBPL1vCDMkeWMJvTRZTlNquwaWlxlgTHLZ+ELOF7w4j5Bk9P
l7/3NnLvsYXezlr7g3pU/LXrRDCi6g7cEcELu2yM7ojHRBB43QHTBeGjggtm0gCf
iVBjNZFBuyLYPh18R/fNpgmzrzNCHZ4bbfWTTgnxNaBeFdlfAdQVvKn0v/E413VY
/9naV3wPWZtA+WCqng7A2Bm+BtsBfJLhUdTXQHYclrVDgmY8aLU/W6igb3nSmdJk
66EhHVod7TS8EiQZZcKf0+tCLKQMznvCVQrxg66S9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:07 2024 by rpki-client on console-fra.rpki-client.org