Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/xYUDgwIlpTqMxNuw6dU9uUhvLoE.roa
File: xYUDgwIlpTqMxNuw6dU9uUhvLoE.roa (raw, json)
Hash identifier: NxatDMx/Igio+nRy8vn4qCeQRlzygdB0NbUgbWhtEvY=
Subject key identifier: C5:85:03:83:02:25:A5:3A:8C:C4:DB:B0:E9:D5:3D:B9:48:6F:2E:81
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018224F097D4F9B70E6045FCCE1978CA03C2
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/xYUDgwIlpTqMxNuw6dU9uUhvLoE.roa
Signing time: Fri 22 Jul 2022 08:05:23 +0000
ROA not before: Fri 22 Jul 2022 08:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31363
IP address blocks: 195.91.211.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:f0:97:d4:f9:b7:0e:60:45:fc:ce:19:78:ca:03:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jul 22 08:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c58503830225a53a8cc4dbb0e9d53db9486f2e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:a3:5f:f8:b4:55:ea:86:ce:c2:63:05:38:
40:f7:60:4d:0c:a0:13:f8:d0:68:08:77:1c:1a:97:
44:28:b3:29:1c:55:67:f8:17:d9:93:1c:e4:71:ec:
32:f1:3e:93:ee:35:a5:84:8a:49:ee:88:a1:33:b6:
54:ef:ee:66:9b:85:d7:87:40:6b:8d:1e:20:0e:bc:
29:76:66:d3:51:19:aa:e5:4e:11:0f:9d:26:2b:80:
91:19:34:92:a5:8c:a2:37:fc:bf:2a:fc:0e:e8:a6:
30:5b:df:b0:14:3d:2f:1b:8f:f0:5e:f7:56:9d:72:
2c:80:7b:e7:72:83:48:bb:6b:c2:b7:bf:d0:36:26:
d1:87:28:0a:ba:aa:b7:12:c6:8c:82:f4:2e:64:b0:
9b:63:2f:38:14:6c:e4:73:35:66:d9:1e:fb:6e:c3:
05:8c:73:4f:c3:1a:21:9e:96:8a:53:78:7d:d5:0f:
82:b9:0f:02:e9:04:94:c6:00:b6:7e:96:92:5a:d0:
f8:c7:fa:db:a5:36:67:16:de:bf:72:de:e7:4b:e5:
e4:6f:bb:70:fb:05:71:a4:c1:51:d5:de:b9:d7:47:
fb:51:82:13:d9:44:55:1d:78:49:94:7c:0e:1e:de:
c1:97:80:52:85:5c:6d:f5:2a:f1:86:cd:4e:c8:36:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:03:83:02:25:A5:3A:8C:C4:DB:B0:E9:D5:3D:B9:48:6F:2E:81
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/xYUDgwIlpTqMxNuw6dU9uUhvLoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.125.0/24
195.91.168.0/21
195.91.211.0/24
195.91.217.0-195.91.218.255
195.91.221.0-195.91.222.255
195.91.225.0-195.91.226.255
195.91.230.0/23
195.91.234.0-195.91.247.255
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
2f:a1:98:1c:54:b4:ed:ce:b0:e9:18:ea:e0:1d:aa:f6:01:48:
7d:07:b7:bb:87:df:b7:81:99:ca:e6:27:cc:8a:19:17:6e:be:
7e:a0:bf:e5:f6:45:ee:7f:33:63:52:de:28:1b:0c:ca:18:30:
81:9b:c3:7d:c4:60:37:49:66:5f:32:ee:36:7e:d8:63:f0:59:
03:d0:bd:70:5b:dc:17:01:68:81:11:08:7f:db:07:88:3b:2b:
0d:db:b6:9d:45:8d:76:59:af:5d:03:9d:1e:77:f2:f1:de:81:
dd:3b:10:57:f6:fa:05:bc:f9:54:f0:57:df:c2:7a:68:24:f1:
1f:a8:e7:5c:b1:63:c3:98:17:c1:98:6f:34:96:64:9f:51:30:
a7:a3:ea:9a:d1:c1:f8:90:36:ce:df:65:d2:13:5a:12:ac:d8:
37:9b:ee:2f:fc:94:d7:59:64:9f:67:bd:ee:cc:97:49:b4:c2:
73:d3:59:19:c8:52:1d:3a:c1:ce:7c:4d:36:e4:56:be:d3:6b:
9c:d2:c5:b6:48:db:7d:bf:9c:2d:09:a1:ab:23:68:88:d5:85:
cd:f5:f4:61:c9:d3:2f:50:ef:6b:4e:0d:1f:fa:fa:10:5b:47:
73:4c:3b:84:c0:68:62:2d:6a:59:06:0a:a2:c6:9c:fe:97:69:
82:32:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:23 2025 by rpki-client