Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/xpExsGAHDzEML73CRdZdYuDGBiQ.roa
File: xpExsGAHDzEML73CRdZdYuDGBiQ.roa (raw, json)
Hash identifier: Zdm2qYpz00eVaXqCgplfK95FRUuMnHLIA+t3GqrX8VM=
Subject key identifier: C6:91:31:B0:60:07:0F:31:0C:2F:BD:C2:45:D6:5D:62:E0:C6:06:24
Certificate issuer: /CN=90af987383865a4afc67403b60d3f3389f695f5b
Certificate serial: 01D50DF8
Authority key identifier: 90:AF:98:73:83:86:5A:4A:FC:67:40:3B:60:D3:F3:38:9F:69:5F:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/xpExsGAHDzEML73CRdZdYuDGBiQ.roa
Signing time: Thu 12 May 2022 09:04:11 +0000
ROA not before: Thu 12 May 2022 09:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 185.76.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30739960 (0x1d50df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90af987383865a4afc67403b60d3f3389f695f5b
Validity
Not Before: May 12 09:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c69131b060070f310c2fbdc245d65d62e0c60624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:4c:5f:ce:02:20:7f:ca:3c:23:52:c5:42:
46:4a:f1:13:b3:90:58:ac:5c:12:c7:07:df:98:60:
e1:56:3f:e1:c3:a6:ec:43:5f:43:f3:b2:1b:c8:a1:
c2:d8:ab:23:af:09:05:2b:64:91:df:a5:fd:9d:eb:
33:d1:07:66:3d:42:2e:17:30:3c:8e:d4:50:af:b9:
31:9e:86:03:da:40:1a:72:0f:67:f6:e7:81:07:0b:
e9:f3:54:17:77:cd:7b:fb:52:6a:42:28:6d:a1:4d:
72:35:b2:63:15:19:a5:7d:e0:21:2d:3e:dc:eb:93:
5a:47:d8:a3:8f:1f:56:cf:98:82:ed:15:0a:31:3b:
af:2e:86:e4:5c:cc:f3:79:30:17:87:9d:1b:4c:c2:
a4:02:0e:90:71:ce:83:3e:c6:16:9e:4d:3e:d6:fc:
e7:99:49:dc:af:5f:6d:73:e6:4b:21:37:e3:8c:d8:
6b:29:00:5a:51:a9:7a:90:70:0c:23:96:76:be:04:
e0:69:5a:9f:25:72:e2:ce:a8:a3:7a:32:5e:a7:02:
ea:ed:6d:9b:f0:3f:3a:26:eb:ad:f4:8c:7d:2b:b1:
e8:82:15:a9:f9:48:12:79:d0:df:60:23:b6:73:59:
35:17:49:a8:31:05:cc:f6:87:9e:cb:3f:cf:be:53:
d8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:91:31:B0:60:07:0F:31:0C:2F:BD:C2:45:D6:5D:62:E0:C6:06:24
X509v3 Authority Key Identifier:
keyid:90:AF:98:73:83:86:5A:4A:FC:67:40:3B:60:D3:F3:38:9F:69:5F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/xpExsGAHDzEML73CRdZdYuDGBiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.149.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b4:5a:e1:b8:e3:33:ac:34:48:5e:76:9f:4e:8e:39:04:19:
cb:83:fb:c3:c3:ab:87:e6:c7:ad:7c:f9:39:ac:b3:27:32:40:
98:0a:14:9f:39:6d:7c:47:01:3b:11:2d:73:43:95:44:b8:38:
8f:39:f1:57:6f:23:80:a1:ca:58:db:a3:00:1d:8f:6e:02:67:
ac:65:4f:81:b6:f6:f9:b3:1b:86:33:be:6a:93:82:11:c8:21:
5c:cb:f8:62:51:aa:bc:e4:89:cf:63:c4:d9:a6:20:3b:0c:52:
79:76:5c:45:1d:93:75:60:a0:bb:a4:2e:4d:05:41:b3:01:db:
2b:da:f0:d3:c9:0b:08:b0:54:d3:38:96:55:49:aa:0d:4e:e4:
a8:fc:9f:3e:94:9d:37:06:04:fb:36:e2:e2:4e:2e:a1:72:f6:
91:a8:15:a9:33:80:f0:e4:53:5a:b8:b0:6b:0a:dc:86:af:c3:
eb:92:a7:66:2a:bf:6f:d5:1d:90:6e:49:26:d3:ee:83:e2:34:
3a:23:c8:eb:40:bd:3d:b0:42:76:ad:69:d2:78:d3:b8:5d:51:
44:aa:d4:79:a0:5b:4f:8d:f9:a0:90:96:a5:f2:65:d5:fc:b6:
cc:3a:c1:2d:9c:f4:e5:4f:82:b1:54:35:5a:c8:33:21:e9:0e:
61:c9:92:f2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAdUN+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MGFmOTg3MzgzODY1YTRhZmM2NzQwM2I2MGQzZjMzODlmNjk1ZjViMB4XDTIyMDUx
MjA5MDQxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzY5MTMxYjA2MDA3
MGYzMTBjMmZiZGMyNDVkNjVkNjJlMGM2MDYyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ5STF/OAiB/yjwjUsVCRkrxE7OQWKxcEscH35hg4VY/4cOm
7ENfQ/OyG8ihwtirI68JBStkkd+l/Z3rM9EHZj1CLhcwPI7UUK+5MZ6GA9pAGnIP
Z/bngQcL6fNUF3fNe/tSakIobaFNcjWyYxUZpX3gIS0+3OuTWkfYo48fVs+Ygu0V
CjE7ry6G5FzM83kwF4edG0zCpAIOkHHOgz7GFp5NPtb855lJ3K9fbXPmSyE344zY
aykAWlGpepBwDCOWdr4E4GlanyVy4s6oo3oyXqcC6u1tm/A/OibrrfSMfSux6IIV
qflIEnnQ32AjtnNZNRdJqDEFzPaHnss/z75T2C8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTGkTGwYAcPMQwvvcJF1l1i4MYGJDAfBgNVHSMEGDAWgBSQr5hzg4ZaSvxn
QDtg0/M4n2lfWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tLLVljNE9HV2tyOFowQTdZTlB6T0o5cFgxcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvN2RmNzdlLWRjZDUtNDM1YS04ODMyLWE5MTQ4YzFiZjVmOS8x
L3hwRXhzR0FIRHpFTUw3M0NSZFpkWXVER0JpUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
N2RmNzdlLWRjZDUtNDM1YS04ODMyLWE5MTQ4YzFiZjVmOS8xL2tLLVljNE9HV2ty
OFowQTdZTlB6T0o5cFgxcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlMlTANBgkqhkiG9w0BAQsFAAOC
AQEAJrRa4bjjM6w0SF52n06OOQQZy4P7w8Orh+bHrXz5OayzJzJAmAoUnzltfEcB
OxEtc0OVRLg4jznxV28jgKHKWNujAB2PbgJnrGVPgbb2+bMbhjO+apOCEcghXMv4
YlGqvOSJz2PE2aYgOwxSeXZcRR2TdWCgu6QuTQVBswHbK9rw08kLCLBU0ziWVUmq
DU7kqPyfPpSdNwYE+zbi4k4uoXL2kagVqTOA8ORTWriwawrchq/D65KnZiq/b9Ud
kG5JJtPug+I0OiPI60C9PbBCdq1p0njTuF1RRKrUeaBbT435oJCWpfJl1fy2zDrB
LZz05U+CsVQ1WsgzIekOYcmS8g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:31 2025 by rpki-client