Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa
File: Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa (raw, json)
Hash identifier: bCKy9ray9aVGb5cuUoApuza4mHQIk6NOLCOgkU76NG8=
Subject key identifier: 5E:0E:A7:FD:7F:05:0B:4A:79:E9:CE:DB:86:65:42:02:3C:7F:2D:73
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019428256441E43240AD950AAA15A0930595
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa
Signing time: Thu 02 Jan 2025 17:52:06 +0000
ROA not before: Thu 02 Jan 2025 17:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213157
IP address blocks: 185.86.83.0/24 maxlen: 24
185.254.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:64:41:e4:32:40:ad:95:0a:aa:15:a0:93:05:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 2 17:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e0ea7fd7f050b4a79e9cedb866542023c7f2d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:20:ea:9a:dd:60:c4:d4:88:70:49:3d:df:
3c:95:34:ef:62:55:a8:b4:9d:67:cb:f5:6b:96:a8:
f6:16:94:36:62:f2:cf:b5:50:ca:e5:01:ed:66:b6:
54:01:a3:dc:4f:f5:bf:a0:71:80:09:aa:18:f5:7e:
f9:e8:5a:22:61:34:9c:b4:ab:1e:94:3c:ae:27:c2:
23:9c:c2:4a:99:0e:67:ab:37:10:6a:f9:33:68:79:
68:91:70:ad:f3:00:69:e4:fc:30:73:e7:e0:b1:21:
12:e3:27:8d:92:b1:7d:e9:ed:6d:db:65:95:ac:8e:
ee:d1:fa:1b:ef:de:73:52:e7:50:39:96:40:f3:77:
4e:75:e6:23:e3:a6:f1:05:f1:55:dc:4d:ab:cd:d1:
2f:a7:bf:13:19:24:c8:57:59:14:1b:4a:7b:6f:2f:
9e:78:b2:df:06:2c:59:21:94:e2:2d:34:fa:7b:85:
fa:38:ca:da:7b:9b:b1:0f:d2:38:02:ea:b0:ff:99:
ea:39:28:14:85:7a:c8:13:f6:99:e9:95:e9:ac:bb:
82:88:84:a2:e2:1f:ae:39:b6:bb:af:b3:cc:d1:ad:
75:e7:6f:48:6e:e7:2f:fb:f4:75:e6:86:b0:51:b9:
ff:be:1e:0f:55:67:0c:47:2e:f3:ba:94:36:66:ac:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0E:A7:FD:7F:05:0B:4A:79:E9:CE:DB:86:65:42:02:3C:7F:2D:73
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.83.0/24
185.254.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:03:a8:2e:6f:ad:94:6d:16:d3:2d:cc:3c:6c:ff:a2:61:6f:
7c:4c:4e:f4:9f:24:ac:e1:87:2d:e9:a9:92:3f:47:ce:2c:3a:
12:6a:ae:fd:3e:70:84:02:3e:50:c5:40:94:76:31:72:24:9d:
30:9c:85:49:f5:0b:68:cd:b0:42:04:96:98:1f:3c:c3:73:66:
a0:57:18:aa:bb:69:d0:6b:76:ea:c9:13:f3:fb:2d:48:96:5f:
59:41:35:5b:87:a4:4c:5c:01:ac:54:85:40:35:ce:00:91:cb:
f4:a2:dc:4c:09:9a:3e:bf:a7:4d:db:b2:bc:ee:80:e6:2a:16:
8b:de:16:e0:15:18:93:f1:fe:3c:8f:26:fc:c2:42:fc:68:eb:
97:06:5e:67:ab:ec:85:f4:4c:73:9f:96:2e:f3:cd:16:07:47:
08:c5:25:49:4b:46:56:a0:6e:41:49:52:2d:ca:1d:85:f4:46:
f7:13:57:be:48:ae:4e:a1:91:11:c1:02:36:6f:76:70:63:8a:
96:b0:e9:87:a6:4e:ee:99:15:02:d4:d7:e8:41:1f:cb:9b:97:
24:5f:d0:cb:27:78:66:97:7c:e9:7b:7b:13:b8:6d:a5:af:9c:
da:12:c1:1b:17:35:e7:5c:e6:48:30:98:fa:0a:8a:bd:3c:0b:
00:f1:64:d6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJWRB5DJArZUKqhWgkwWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi
ZDBhNWYwHhcNMjUwMTAyMTc1MjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTBlYTdmZDdmMDUwYjRhNzllOWNlZGI4NjY1NDIwMjNjN2YyZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IMg6prdYMTUiHBJPd88lTTvYlWo
tJ1ny/Vrlqj2FpQ2YvLPtVDK5QHtZrZUAaPcT/W/oHGACaoY9X756FoiYTSctKse
lDyuJ8IjnMJKmQ5nqzcQavkzaHlokXCt8wBp5Pwwc+fgsSES4yeNkrF96e1t22WV
rI7u0fob795zUudQOZZA83dOdeYj46bxBfFV3E2rzdEvp78TGSTIV1kUG0p7by+e
eLLfBixZIZTiLTT6e4X6OMrae5uxD9I4Auqw/5nqOSgUhXrIE/aZ6ZXprLuCiISi
4h+uOba7r7PM0a11529Ibucv+/R15oawUbn/vh4PVWcMRy7zupQ2ZqyWfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF4Op/1/BQtKeenO24ZlQgI8fy1zMB8GA1UdIwQY
MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt
N2JiZDI4Y2U0YTc1LzEvWGc2bl9YOEZDMHA1NmM3YmhtVkNBanhfTFhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1
LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVZTAwQA
uf5cMA0GCSqGSIb3DQEBCwUAA4IBAQAqA6gub62UbRbTLcw8bP+iYW98TE70nySs
4Yct6amSP0fOLDoSaq79PnCEAj5QxUCUdjFyJJ0wnIVJ9QtozbBCBJaYHzzDc2ag
Vxiqu2nQa3bqyRPz+y1Ill9ZQTVbh6RMXAGsVIVANc4Akcv0otxMCZo+v6dN27K8
7oDmKhaL3hbgFRiT8f48jyb8wkL8aOuXBl5nq+yF9Exzn5Yu880WB0cIxSVJS0ZW
oG5BSVItyh2F9Eb3E1e+SK5OoZERwQI2b3ZwY4qWsOmHpk7umRUC1NfoQR/Lm5ck
X9DLJ3hml3zpe3sTuG2lr5zaEsEbFzXnXOZIMJj6Coq9PAsA8WTW
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:37:51 2025 by rpki-client