Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xHdANSaWu9WOMSDyIGtsOmrSYyM.roa
File: xHdANSaWu9WOMSDyIGtsOmrSYyM.roa (raw, json)
Hash identifier: jVX52sWtTz8hDBoLFGxcX+wGDj2fgfz4S5mbvatFNl4=
Subject key identifier: C4:77:40:35:26:96:BB:D5:8E:31:20:F2:20:6B:6C:3A:6A:D2:63:23
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B210788D34963EEADA7165D27EE4EA
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xHdANSaWu9WOMSDyIGtsOmrSYyM.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25070
IP address blocks: 81.15.246.0/24 maxlen: 24
195.136.174.0/24 maxlen: 24
195.136.180.0/23 maxlen: 23
195.136.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:10:78:8d:34:96:3e:ea:da:71:65:d2:7e:e4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c47740352696bbd58e3120f2206b6c3a6ad26323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:ce:24:dc:6b:48:5b:62:6f:43:c9:4c:b4:
9f:43:4e:b6:ce:67:26:75:e8:69:ee:e7:53:7d:80:
93:f4:00:c7:f5:58:b9:a8:66:39:34:88:de:05:53:
61:1a:86:0e:55:6e:c8:07:7f:ba:8e:52:dc:e9:04:
c9:de:7f:d6:4f:09:22:dc:0b:97:c6:64:e6:99:ec:
29:81:51:75:f9:d8:02:85:44:9d:53:15:1f:7a:ce:
4f:d1:80:b6:ca:67:a2:5a:bb:c7:f7:11:09:d0:4e:
26:d1:4a:61:06:5f:46:e6:00:16:8d:3e:56:3a:64:
3a:56:16:1d:e0:27:51:0d:78:73:0c:0e:92:50:f4:
ba:19:64:c0:9e:f3:ba:e7:ad:e3:8c:4d:70:3d:88:
2a:ab:fb:b8:73:7b:a4:a7:6c:84:61:8a:5a:ae:5d:
88:f3:5b:51:f6:fa:a2:50:58:d8:21:16:ae:7c:6a:
25:84:05:ac:16:88:3d:b1:af:04:ae:38:28:04:c6:
b9:a2:40:1a:31:b7:fb:f2:b3:bd:cc:1c:18:d4:e6:
e9:01:bb:95:3e:0c:e7:84:c7:cd:73:29:41:19:43:
d2:df:71:74:35:6e:41:29:4f:0f:b1:f6:66:2b:45:
2b:af:2b:74:ee:90:b3:61:90:f1:1b:0a:e3:3a:10:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:40:35:26:96:BB:D5:8E:31:20:F2:20:6B:6C:3A:6A:D2:63:23
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xHdANSaWu9WOMSDyIGtsOmrSYyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.246.0/24
195.136.174.0/24
195.136.180.0/22
Signature Algorithm: sha256WithRSAEncryption
79:79:bb:06:62:24:f6:ad:5d:75:c4:9f:fe:c4:09:eb:39:57:
16:69:4f:5f:dc:5a:da:f4:63:d0:12:31:0a:60:f6:12:25:9b:
98:6a:8f:b9:c2:30:c2:67:92:ca:12:e8:a6:75:32:42:7a:8a:
52:6e:6d:ed:cc:da:76:57:04:cc:33:8c:60:db:b7:5d:d0:ff:
45:bd:10:14:82:3c:db:43:1a:b6:28:ff:dd:c9:d6:8f:f2:39:
34:77:e3:f6:b1:e5:c2:05:6c:1f:80:8c:32:c1:a0:c6:59:01:
4f:ec:18:92:53:1e:34:6d:10:4e:2d:65:9e:9d:68:c7:af:0b:
9f:f8:06:53:aa:81:c4:ce:5c:8a:50:7a:e6:42:85:8e:ed:1c:
e1:7d:4b:58:30:2e:6f:cc:1d:34:45:2f:51:69:d3:b1:19:cd:
0a:a1:01:da:52:8e:6f:61:bd:03:9b:ca:d7:44:eb:1f:a2:a4:
58:cb:ff:9b:ec:c0:8e:d2:89:9e:80:a1:8f:38:44:59:0f:3f:
ee:07:4b:da:a0:59:c7:dc:e2:f2:ad:ce:7c:14:35:00:e1:9d:
c8:34:0f:dd:7b:41:84:55:b5:3c:df:fb:69:fc:a4:07:b1:b3:
9d:26:54:ab:57:52:e2:c9:bf:70:b8:87:df:b4:dd:44:15:f0:
de:73:b9:0d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhshB4jTSWPuracWXSfuTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDc3NDAzNTI2OTZiYmQ1OGUzMTIwZjIyMDZiNmMzYTZhZDI2MzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsofOJNxrSFtib0PJTLSfQ062zmcm
dehp7udTfYCT9ADH9Vi5qGY5NIjeBVNhGoYOVW7IB3+6jlLc6QTJ3n/WTwki3AuX
xmTmmewpgVF1+dgChUSdUxUfes5P0YC2ymeiWrvH9xEJ0E4m0UphBl9G5gAWjT5W
OmQ6VhYd4CdRDXhzDA6SUPS6GWTAnvO6563jjE1wPYgqq/u4c3ukp2yEYYparl2I
81tR9vqiUFjYIRaufGolhAWsFog9sa8ErjgoBMa5okAaMbf78rO9zBwY1ObpAbuV
PgznhMfNcylBGUPS33F0NW5BKU8PsfZmK0Urryt07pCzYZDxGwrjOhDetQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMR3QDUmlrvVjjEg8iBrbDpq0mMjMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEveEhkQU5TYVd1OVdPTVNEeUlHdHNPbXJTWXlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUQ/2AwQA
w4iuAwQCw4i0MA0GCSqGSIb3DQEBCwUAA4IBAQB5ebsGYiT2rV11xJ/+xAnrOVcW
aU9f3Fra9GPQEjEKYPYSJZuYao+5wjDCZ5LKEuimdTJCeopSbm3tzNp2VwTMM4xg
27dd0P9FvRAUgjzbQxq2KP/dydaP8jk0d+P2seXCBWwfgIwywaDGWQFP7BiSUx40
bRBOLWWenWjHrwuf+AZTqoHEzlyKUHrmQoWO7RzhfUtYMC5vzB00RS9RadOxGc0K
oQHaUo5vYb0Dm8rXROsfoqRYy/+b7MCO0omegKGPOERZDz/uB0vaoFnH3OLyrc58
FDUA4Z3INA/de0GEVbU83/tp/KQHsbOdJlSrV1Liyb9wuIfftN1EFfDec7kN
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:12 2025 by rpki-client