Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/x6ED1G5jbZoqUomgX_CLBuifLIk.roa
File: x6ED1G5jbZoqUomgX_CLBuifLIk.roa (raw, json)
Hash identifier: XdvBsS6VLV/tIfDz0mwdG1w1cphyiBV42q5ugOy4ctU=
Subject key identifier: C7:A1:03:D4:6E:63:6D:9A:2A:52:89:A0:5F:F0:8B:06:E8:9F:2C:89
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 0186083E65920EC4AE7FD71634D0884738E3
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/x6ED1G5jbZoqUomgX_CLBuifLIk.roa
Signing time: Tue 31 Jan 2023 14:32:32 +0000
ROA not before: Tue 31 Jan 2023 14:32:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44100
IP address blocks: 95.169.206.0/24 maxlen: 24
95.169.207.0/24 maxlen: 24
95.169.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:3e:65:92:0e:c4:ae:7f:d7:16:34:d0:88:47:38:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:32:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7a103d46e636d9a2a5289a05ff08b06e89f2c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:9d:b1:83:b5:27:5c:2d:5a:d6:a1:8b:3b:
5e:c9:e0:40:86:87:04:09:39:52:1b:0e:93:ce:07:
9b:3d:a3:69:2b:d8:a6:22:75:eb:45:02:b0:48:67:
e2:a4:54:8d:d4:a3:69:17:d4:34:80:b4:68:12:7a:
fc:9d:27:6c:7d:5d:16:17:2d:ba:70:dd:36:02:c4:
b5:b2:58:c6:ac:6b:31:ad:11:c8:c0:fc:62:b6:e6:
8e:ee:dc:8d:3a:6f:b3:a0:8b:72:2b:4d:4c:a3:9e:
f8:8d:d9:c6:4d:5c:db:f1:0e:5f:2c:94:11:d7:66:
df:34:23:ae:61:ac:91:8b:05:8e:2d:d2:8b:12:e0:
7f:45:65:b9:2d:4d:bd:3e:5f:16:cf:b3:6a:fb:66:
f7:6a:81:62:ee:61:1b:d0:2d:1c:42:9b:d4:f3:ca:
c2:91:da:dd:03:a1:d0:b7:ac:18:b4:c2:73:31:fe:
1b:18:3d:6c:75:a3:62:04:78:23:5d:43:53:86:bf:
cc:d5:58:96:dd:b6:6a:f8:54:c8:d4:fb:4e:00:11:
a9:34:2f:ac:1c:53:81:3a:d6:a2:ce:0c:24:0e:6e:
50:c5:be:83:b8:28:07:5d:df:91:b1:4a:74:5f:2b:
be:d7:c8:6c:2e:59:b2:d4:2c:79:36:f2:8a:1a:b3:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:03:D4:6E:63:6D:9A:2A:52:89:A0:5F:F0:8B:06:E8:9F:2C:89
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/x6ED1G5jbZoqUomgX_CLBuifLIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.206.0/23
95.169.221.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8f:03:24:70:00:c6:f2:32:d2:39:bc:46:06:2c:91:58:0f:
e7:cb:24:3e:e2:09:1a:e4:92:af:58:90:38:d9:2d:db:82:b5:
8a:84:ec:76:9f:0d:9c:61:bc:20:f3:13:b0:6e:e3:e3:8e:e8:
53:c4:87:ea:f1:59:e0:4b:e5:cb:47:16:0f:7c:b3:7a:85:05:
5f:68:cc:07:0d:9f:b1:e7:f0:25:e9:ce:c5:45:71:2e:3b:10:
27:53:9b:ca:88:3e:b5:77:f3:4c:56:f3:49:98:fd:63:54:fe:
f4:46:ad:d0:30:fa:4c:57:53:93:bf:ce:e7:a0:14:69:f1:67:
6a:a2:10:89:b5:16:22:da:cd:dd:ec:d3:d2:fe:6b:41:25:4c:
74:81:b6:b3:fe:b9:56:d1:b8:22:fc:a5:74:93:fc:8f:50:96:
af:aa:17:f0:3e:12:5d:fc:7c:a1:75:9a:e2:60:cc:c6:69:bf:
b9:fd:74:fd:63:72:7d:fb:db:52:29:ca:87:13:48:0c:0d:a4:
dc:8b:02:fa:59:a9:3d:3e:2b:12:ef:78:03:1e:8d:87:54:54:
89:86:25:58:f2:26:5b:fd:ac:cf:94:29:2e:f5:8a:d1:f6:43:
a1:3e:19:92:58:98:b4:bb:7b:55:b8:60:7b:e4:5c:72:78:ea:
81:de:45:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYIPmWSDsSuf9cWNNCIRzjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl
NjdiOTcwHhcNMjMwMTMxMTQzMjMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2ExMDNkNDZlNjM2ZDlhMmE1Mjg5YTA1ZmYwOGIwNmU4OWYyYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLmdsYO1J1wtWtahizteyeBAhocE
CTlSGw6TzgebPaNpK9imInXrRQKwSGfipFSN1KNpF9Q0gLRoEnr8nSdsfV0WFy26
cN02AsS1sljGrGsxrRHIwPxituaO7tyNOm+zoItyK01Mo574jdnGTVzb8Q5fLJQR
12bfNCOuYayRiwWOLdKLEuB/RWW5LU29Pl8Wz7Nq+2b3aoFi7mEb0C0cQpvU88rC
kdrdA6HQt6wYtMJzMf4bGD1sdaNiBHgjXUNThr/M1ViW3bZq+FTI1PtOABGpNC+s
HFOBOtaizgwkDm5Qxb6DuCgHXd+RsUp0Xyu+18hsLlmy1Cx5NvKKGrMmiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMehA9RuY22aKlKJoF/wiwbonyyJMB8GA1UdIwQY
MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt
ZmJlMWEwZDBhYTk4LzEveDZFRDFHNWpiWm9xVW9tZ1hfQ0xCdWlmTElrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4
LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBX6nOAwQA
X6ndMA0GCSqGSIb3DQEBCwUAA4IBAQBhjwMkcADG8jLSObxGBiyRWA/nyyQ+4gka
5JKvWJA42S3bgrWKhOx2nw2cYbwg8xOwbuPjjuhTxIfq8VngS+XLRxYPfLN6hQVf
aMwHDZ+x5/Al6c7FRXEuOxAnU5vKiD61d/NMVvNJmP1jVP70Rq3QMPpMV1OTv87n
oBRp8WdqohCJtRYi2s3d7NPS/mtBJUx0gbaz/rlW0bgi/KV0k/yPUJavqhfwPhJd
/HyhdZriYMzGab+5/XT9Y3J9+9tSKcqHE0gMDaTciwL6Wak9PisS73gDHo2HVFSJ
hiVY8iZb/azPlCku9YrR9kOhPhmSWJi0u3tVuGB75FxyeOqB3kXS
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:39 2025 by rpki-client