Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/XbpqNv3HgtGDA1aTFSKpRtYJxfo.roa
File: XbpqNv3HgtGDA1aTFSKpRtYJxfo.roa (raw, json)
Hash identifier: b5YCTpcpbTThIMprqxb+uCncc+/d7nmgGPTb1mzyKV8=
Subject key identifier: 5D:BA:6A:36:FD:C7:82:D1:83:03:56:93:15:22:A9:46:D6:09:C5:FA
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 33AFB086
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/XbpqNv3HgtGDA1aTFSKpRtYJxfo.roa
Signing time: Sat 01 Jan 2022 14:55:13 +0000
ROA not before: Sat 01 Jan 2022 14:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31400
IP address blocks: 93.127.128.0/17 maxlen: 17
77.37.0.0/17 maxlen: 17
91.108.64.0/18 maxlen: 18
2a01:4d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867152006 (0x33afb086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 1 14:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dba6a36fdc782d1830356931522a946d609c5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:93:42:3e:3b:37:13:7e:fc:3f:74:e5:87:54:
6a:76:89:8d:38:04:b9:8d:d9:82:ce:a3:dc:27:b4:
ea:5e:7f:09:81:d6:63:3c:42:3a:ca:7f:e2:e1:f7:
c6:ec:aa:1c:9a:f6:7c:57:6c:5f:cd:f9:fb:ab:9a:
3e:3b:8d:2a:53:f1:27:00:15:1d:09:15:b9:38:55:
34:af:1c:51:1d:73:df:c4:91:ca:7f:2c:ae:34:88:
f7:4c:9f:be:39:17:8c:11:9c:8a:cf:18:6b:1b:50:
df:d4:86:6e:d3:ce:d1:0f:e1:38:06:77:bd:e0:80:
f4:f8:b6:65:ec:c9:7a:20:ca:ed:17:8e:b7:9d:49:
2c:9a:78:c9:f1:9d:7b:9d:2b:95:14:c4:09:e8:74:
20:eb:2c:a4:19:40:a4:c7:4a:6c:34:5b:75:59:a1:
74:b2:f4:4c:da:a5:6d:72:04:e8:0d:0e:b2:20:46:
bd:6f:a4:4b:79:71:4c:54:a2:5a:85:23:65:79:5d:
45:b0:50:59:9e:3c:d7:d9:b6:f8:87:29:51:29:88:
8e:15:89:c6:96:b8:94:49:d4:45:ad:0d:14:a9:72:
35:62:49:af:c1:3c:cc:5e:4e:72:85:a0:16:b0:51:
32:7c:d5:c9:0d:13:1b:da:d7:ef:a2:a9:a4:8d:8c:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:6A:36:FD:C7:82:D1:83:03:56:93:15:22:A9:46:D6:09:C5:FA
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/XbpqNv3HgtGDA1aTFSKpRtYJxfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.0.0/17
91.108.64.0/18
93.127.128.0/17
IPv6:
2a01:4d0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:be:0e:1e:96:04:2f:39:1a:83:46:35:fb:df:85:0e:fd:67:
45:e7:4e:12:12:1a:85:3c:b7:ee:0a:4c:02:f5:50:d9:8f:57:
ce:1d:7c:66:3d:d0:68:54:b0:4f:c7:ff:a4:a8:d8:a5:06:30:
6b:fa:cb:7b:4f:3d:5e:15:a0:15:6c:8d:02:4e:bb:ff:54:81:
a1:c4:2a:bb:f4:25:9c:37:4a:1e:85:ed:27:94:a6:4c:a8:f0:
83:bb:8e:78:02:8e:5c:dc:0a:33:4d:b3:cd:01:28:ef:c8:36:
71:ae:3b:7e:a4:b4:59:f6:12:6a:c3:e7:78:74:c8:da:ba:2a:
a7:fc:50:f4:e7:c4:f7:6f:69:d0:7d:98:a6:ba:8a:e1:2c:47:
32:f2:cb:54:f0:76:63:37:b3:05:8b:c8:bf:f3:a1:71:41:cd:
ac:f2:b2:b8:35:ad:e2:01:5b:fb:9d:2f:0a:47:88:30:67:fb:
ea:28:58:30:e2:7c:eb:82:fc:ed:12:70:2d:87:33:f1:bf:50:
a2:5b:42:16:93:aa:e3:fb:13:92:a2:3f:4d:ae:2f:df:82:e3:
ce:22:8b:f8:c4:2a:41:d1:fc:e5:c4:1c:63:d4:93:ab:3f:99:
68:72:dc:7f:dd:96:a8:73:c4:dd:2c:74:08:73:8c:46:fd:17:
c9:19:b9:17
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEM6+whjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MDhkNzM1ZjM0NmM0ZmM0MmE0NzkyY2UzMzgwOGEyMjEwYTgyYmI1MB4XDTIyMDEw
MTE0NTUxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWRiYTZhMzZmZGM3
ODJkMTgzMDM1NjkzMTUyMmE5NDZkNjA5YzVmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO2TQj47NxN+/D905YdUanaJjTgEuY3Zgs6j3Ce06l5/CYHW
YzxCOsp/4uH3xuyqHJr2fFdsX835+6uaPjuNKlPxJwAVHQkVuThVNK8cUR1z38SR
yn8srjSI90yfvjkXjBGcis8YaxtQ39SGbtPO0Q/hOAZ3veCA9Pi2ZezJeiDK7ReO
t51JLJp4yfGde50rlRTECeh0IOsspBlApMdKbDRbdVmhdLL0TNqlbXIE6A0OsiBG
vW+kS3lxTFSiWoUjZXldRbBQWZ4819m2+IcpUSmIjhWJxpa4lEnURa0NFKlyNWJJ
r8E8zF5OcoWgFrBRMnzVyQ0TG9rX76KppI2MNMkCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBRdumo2/ceC0YMDVpMVIqlG1gnF+jAfBgNVHSMEGDAWgBTAjXNfNGxPxCpH
ks4zgIoiEKgrtTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dJMXpYelJzVDhRcVI1TE9NNENLSWhDb0s3VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvZDk3Mjg3LWZkMDEtNGExMC05MDllLWMzZjI1N2ViMjBjYy8x
L1hicHFOdjNIZ3RHREExYVRGU0twUnRZSnhmby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
ZDk3Mjg3LWZkMDEtNGExMC05MDllLWMzZjI1N2ViMjBjYy8xL3dJMXpYelJzVDhR
cVI1TE9NNENLSWhDb0s3VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEB00lAAMEBltsQAMEB11/gDANBAIA
AjAHAwUAKgEE0DANBgkqhkiG9w0BAQsFAAOCAQEAGr4OHpYELzkag0Y1+9+FDv1n
RedOEhIahTy37gpMAvVQ2Y9Xzh18Zj3QaFSwT8f/pKjYpQYwa/rLe089XhWgFWyN
Ak67/1SBocQqu/QlnDdKHoXtJ5SmTKjwg7uOeAKOXNwKM02zzQEo78g2ca47fqS0
WfYSasPneHTI2roqp/xQ9OfE929p0H2YprqK4SxHMvLLVPB2YzezBYvIv/OhcUHN
rPKyuDWt4gFb+50vCkeIMGf76ihYMOJ864L87RJwLYcz8b9QoltCFpOq4/sTkqI/
Ta4v34LjziKL+MQqQdH85cQcY9STqz+ZaHLcf92WqHPE3Sx0CHOMRv0XyRm5Fw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:42 2025 by rpki-client