Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xn-EteNyG_MpHZC9XEW0NavE7pw.roa
File: xn-EteNyG_MpHZC9XEW0NavE7pw.roa (raw, json)
Hash identifier: xv0pRBbk+4sauKDCemzNCqtsDwpmPkKz92rboM2kucc=
Subject key identifier: C6:7F:84:B5:E3:72:1B:F3:29:1D:90:BD:5C:45:B4:35:AB:C4:EE:9C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019548B202244426E7EB31FAF752A7CDAFCD
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xn-EteNyG_MpHZC9XEW0NavE7pw.roa
Signing time: Thu 27 Feb 2025 18:36:20 +0000
ROA not before: Thu 27 Feb 2025 18:36:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212097
IP address blocks: 178.19.36.0/22 maxlen: 22
178.19.36.0/24 maxlen: 24
178.19.37.0/24 maxlen: 24
178.19.38.0/24 maxlen: 24
178.19.39.0/24 maxlen: 24
185.28.49.0/24 maxlen: 24
185.28.50.0/24 maxlen: 24
185.227.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:b2:02:24:44:26:e7:eb:31:fa:f7:52:a7:cd:af:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 27 18:36:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c67f84b5e3721bf3291d90bd5c45b435abc4ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:9a:1e:cf:8a:9d:b2:55:0c:ad:32:ca:a0:
79:24:9c:7c:01:92:df:d1:60:55:cd:74:87:5e:bd:
1a:44:21:31:2b:88:4a:cc:31:59:dd:83:d9:38:5f:
55:ab:95:9e:9a:6b:b0:28:f0:2d:d6:d3:cf:7b:7a:
b3:cd:91:49:d6:7d:2b:4b:f0:24:4f:43:db:d9:be:
8d:cb:40:54:ab:32:5d:4e:74:75:c6:82:22:aa:98:
43:85:40:8e:ea:6a:75:30:51:c6:c5:30:7c:7b:12:
d3:59:97:17:38:33:5e:e7:7c:13:47:e3:b7:17:41:
f4:51:f2:54:67:bd:44:9f:c9:d8:34:ae:93:04:cb:
d1:19:1a:49:0a:9c:88:bf:f5:3b:27:be:19:63:d7:
4f:0a:ae:c9:e4:65:ab:df:fc:2b:3b:c5:1f:b0:22:
85:01:13:b7:0a:e4:87:79:02:d4:01:7a:48:d9:89:
5c:76:97:dd:05:3b:2d:4f:46:db:63:03:21:f3:59:
77:d3:1b:a9:51:de:30:5e:5c:8b:12:21:b5:75:69:
e5:b6:f3:96:aa:d0:59:e7:f4:8d:71:dd:6e:40:d0:
b4:cc:79:21:b2:3d:b2:e1:01:bd:43:16:c6:f9:4a:
69:cb:99:41:6d:0b:88:77:94:af:9c:46:4b:93:c0:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7F:84:B5:E3:72:1B:F3:29:1D:90:BD:5C:45:B4:35:AB:C4:EE:9C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xn-EteNyG_MpHZC9XEW0NavE7pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.36.0/22
185.28.49.0-185.28.50.255
185.227.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:96:e5:ab:bf:52:5a:c0:55:d9:02:6c:e6:60:26:5a:19:7d:
ee:aa:2e:94:77:45:a3:3b:63:e1:87:c3:6d:01:bf:47:5d:4c:
0b:f5:3d:d1:ea:70:db:69:cd:22:c3:90:92:b0:2a:76:95:a2:
24:94:34:cb:70:9c:11:9d:b7:a6:5e:95:61:17:5b:cd:dc:b4:
2c:ea:6b:05:04:ea:14:c0:fb:df:19:57:19:1b:95:35:87:69:
ff:4e:44:ba:3b:27:6d:8d:d6:db:ac:7d:b3:6e:9e:eb:77:20:
9f:af:c2:ba:30:f1:f9:0a:7a:01:44:a4:e5:9d:78:08:c3:85:
66:2d:68:92:48:b6:b0:4c:6f:c7:58:4e:6b:24:43:e3:ec:cf:
aa:4a:ea:66:f7:79:f2:01:9b:db:fb:6d:36:2d:11:45:c6:5e:
e3:9b:b6:b5:52:dd:ef:74:17:a0:07:26:50:3f:2b:d9:85:1c:
4b:9a:7f:88:20:a3:59:5b:1f:79:25:56:55:c4:6b:a6:57:6d:
ea:35:dc:cb:d8:8e:06:63:e1:62:46:6d:68:80:24:cb:64:d7:
2a:94:fc:00:c5:f4:eb:91:aa:ea:12:43:32:c4:e5:8f:86:5c:
56:a4:2e:f6:f4:2e:72:cb:dd:a4:53:73:10:82:7b:e6:29:48:
a2:c8:3a:1a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZVIsgIkRCbn6zH691Knza/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwMjI3MTgzNjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjdmODRiNWUzNzIxYmYzMjkxZDkwYmQ1YzQ1YjQzNWFiYzRlZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwyaHs+KnbJVDK0yyqB5JJx8AZLf
0WBVzXSHXr0aRCExK4hKzDFZ3YPZOF9Vq5WemmuwKPAt1tPPe3qzzZFJ1n0rS/Ak
T0Pb2b6Ny0BUqzJdTnR1xoIiqphDhUCO6mp1MFHGxTB8exLTWZcXODNe53wTR+O3
F0H0UfJUZ71En8nYNK6TBMvRGRpJCpyIv/U7J74ZY9dPCq7J5GWr3/wrO8UfsCKF
ARO3CuSHeQLUAXpI2YlcdpfdBTstT0bbYwMh81l30xupUd4wXlyLEiG1dWnltvOW
qtBZ5/SNcd1uQNC0zHkhsj2y4QG9QxbG+Uppy5lBbQuId5SvnEZLk8A50wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMZ/hLXjchvzKR2QvVxFtDWrxO6cMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEveG4tRXRlTnlHX01wSFpDOVhFVzBOYXZFN3B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCshMkMAwD
BAC5HDEDBAC5HDIDBAC542YwDQYJKoZIhvcNAQELBQADggEBAKmW5au/UlrAVdkC
bOZgJloZfe6qLpR3RaM7Y+GHw20Bv0ddTAv1PdHqcNtpzSLDkJKwKnaVoiSUNMtw
nBGdt6ZelWEXW83ctCzqawUE6hTA+98ZVxkblTWHaf9ORLo7J22N1tusfbNunut3
IJ+vwrow8fkKegFEpOWdeAjDhWYtaJJItrBMb8dYTmskQ+Psz6pK6mb3efIBm9v7
bTYtEUXGXuObtrVS3e90F6AHJlA/K9mFHEuaf4ggo1lbH3klVlXEa6ZXbeo13MvY
jgZj4WJGbWiAJMtk1yqU/ADF9OuRquoSQzLE5Y+GXFakLvb0LnLL3aRTcxCCe+Yp
SKLIOho=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:24:36 2025 by rpki-client