Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa
File: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (raw, json)
Hash identifier: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=
Subject key identifier: 6B:6C:D7:9D:90:07:9A:1D:4D:23:06:7D:7D:49:92:79:57:3E:BC:12
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0194CC37F3C73E57BE25AA98C42B551D0090
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa
Signing time: Mon 03 Feb 2025 14:30:06 +0000
ROA not before: Mon 03 Feb 2025 14:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208435
IP address blocks: 31.133.47.0/24 maxlen: 24
176.124.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:37:f3:c7:3e:57:be:25:aa:98:c4:2b:55:1d:00:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Feb 3 14:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b6cd79d90079a1d4d23067d7d499279573ebc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:2c:05:1d:e0:56:a7:f9:83:c4:6b:52:46:
07:8f:8b:ee:ad:24:76:fd:9f:46:d4:f4:64:91:71:
9f:e4:34:a0:09:19:4c:5f:5b:27:65:c3:c8:e8:f9:
c0:74:1d:90:35:67:28:78:18:37:dd:56:8f:7c:e4:
09:d8:45:50:df:78:dd:09:75:eb:75:98:08:1a:3b:
f6:2f:fe:6c:1f:ff:93:ec:2c:be:e7:c7:7f:da:8c:
02:21:6e:48:34:f1:04:49:35:e9:e3:76:85:f8:48:
2f:1b:da:62:c7:38:b0:44:e8:27:ea:a3:d5:14:9e:
f2:d1:ad:16:14:a2:e4:9b:bb:da:44:17:21:60:d3:
9b:76:49:e4:4d:99:78:44:28:05:cc:07:96:6d:4f:
51:4b:33:d7:ad:f0:e7:43:a7:3b:95:f6:a3:69:09:
28:9a:06:a7:e2:02:bc:a3:be:6d:22:44:fb:d9:19:
a1:5f:18:84:12:39:98:26:76:66:64:46:69:9b:e6:
5d:10:e9:0e:bf:ff:eb:56:3f:35:3b:2a:ba:01:6d:
39:36:26:14:e2:19:d9:45:89:f5:7e:11:11:8a:e3:
3a:5d:91:37:51:b3:94:c6:d7:95:a2:53:32:78:2a:
9c:1a:cb:72:e5:11:7e:7b:ef:eb:06:7b:61:fd:7d:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6C:D7:9D:90:07:9A:1D:4D:23:06:7D:7D:49:92:79:57:3E:BC:12
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.47.0/24
176.124.18.0/24
Signature Algorithm: sha256WithRSAEncryption
be:48:2d:5c:de:95:7a:89:7e:0e:59:72:15:7b:c2:68:81:06:
11:20:33:82:7c:50:b7:9e:c0:6a:80:f1:40:7f:79:a1:48:7e:
ae:4d:19:fe:16:70:88:c5:de:66:fc:0c:52:2a:06:e7:48:1c:
86:23:38:73:89:bb:e6:bb:ed:0b:48:ef:3e:dc:37:49:d7:cf:
b6:f7:1f:82:af:5d:2a:b6:a8:a6:9a:3f:c1:b3:d3:c6:1a:d6:
1b:68:ee:c9:81:3d:3d:0d:04:e1:2c:a8:8e:de:4b:89:7d:50:
56:71:3a:d1:e3:cc:cf:d0:c8:8e:05:4f:a4:9f:9f:97:d5:52:
29:a6:e6:af:6f:5e:5b:36:17:50:69:a7:89:ef:12:c3:13:91:
13:44:df:81:43:75:dc:2e:7b:af:8e:4e:66:0e:31:9f:94:1a:
1f:74:6c:8b:5d:ea:30:28:09:a8:9a:80:29:6b:88:56:12:97:
2f:b0:ad:45:18:23:87:db:ef:8f:68:cc:ea:28:ed:14:96:b9:
df:67:ee:15:af:56:ef:55:2d:eb:b9:45:10:53:6c:17:47:17:
4f:2e:58:58:a9:e7:06:6e:75:06:76:a3:98:5e:fb:1a:74:f2:
26:10:ba:62:92:69:38:b5:e2:67:da:73:9f:03:42:62:57:4a:
5f:04:05:3e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTMN/PHPle+JaqYxCtVHQCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh
NTAyNTAwHhcNMjUwMjAzMTQzMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjZjZDc5ZDkwMDc5YTFkNGQyMzA2N2Q3ZDQ5OTI3OTU3M2ViYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyQsBR3gVqf5g8RrUkYHj4vurSR2
/Z9G1PRkkXGf5DSgCRlMX1snZcPI6PnAdB2QNWcoeBg33VaPfOQJ2EVQ33jdCXXr
dZgIGjv2L/5sH/+T7Cy+58d/2owCIW5INPEESTXp43aF+EgvG9pixziwROgn6qPV
FJ7y0a0WFKLkm7vaRBchYNObdknkTZl4RCgFzAeWbU9RSzPXrfDnQ6c7lfajaQko
mgan4gK8o75tIkT72RmhXxiEEjmYJnZmZEZpm+ZdEOkOv//rVj81Oyq6AW05NiYU
4hnZRYn1fhERiuM6XZE3UbOUxteVolMyeCqcGsty5RF+e+/rBnth/X3wfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGts152QB5odTSMGfX1JknlXPrwSMB8GA1UdIwQY
MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt
YjY2ZmE0ZjQ3NjNhLzEvYTJ6WG5aQUhtaDFOSXdaOWZVbVNlVmMtdkJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh
LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH4UvAwQA
sHwSMA0GCSqGSIb3DQEBCwUAA4IBAQC+SC1c3pV6iX4OWXIVe8JogQYRIDOCfFC3
nsBqgPFAf3mhSH6uTRn+FnCIxd5m/AxSKgbnSByGIzhzibvmu+0LSO8+3DdJ18+2
9x+Cr10qtqimmj/Bs9PGGtYbaO7JgT09DQThLKiO3kuJfVBWcTrR48zP0MiOBU+k
n5+X1VIppuavb15bNhdQaaeJ7xLDE5ETRN+BQ3XcLnuvjk5mDjGflBofdGyLXeow
KAmomoApa4hWEpcvsK1FGCOH2++PaMzqKO0UlrnfZ+4Vr1bvVS3ruUUQU2wXRxdP
LlhYqecGbnUGdqOYXvsadPImELpikmk4teJn2nOfA0JiV0pfBAU+
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:05 2025 by rpki-client