Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/Xahav2nI91XXihJbGUCOSkQDZ8E.roa
File: Xahav2nI91XXihJbGUCOSkQDZ8E.roa (raw, json)
Hash identifier: SDNEtVRC2J15BKWA7uFqUVEAfSuD50rwQ+inAnH4ptY=
Subject key identifier: 5D:A8:5A:BF:69:C8:F7:55:D7:8A:12:5B:19:40:8E:4A:44:03:67:C1
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 0194FECD1C622DEF39932AA4EEA5D337C0EC
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/Xahav2nI91XXihJbGUCOSkQDZ8E.roa
Signing time: Thu 13 Feb 2025 10:14:02 +0000
ROA not before: Thu 13 Feb 2025 10:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207903
IP address blocks: 45.81.169.0/24 maxlen: 24
45.81.170.0/24 maxlen: 24
45.81.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:cd:1c:62:2d:ef:39:93:2a:a4:ee:a5:d3:37:c0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Feb 13 10:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5da85abf69c8f755d78a125b19408e4a440367c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:9a:9e:cb:fd:f9:55:4d:8c:ba:fc:50:fb:
c2:b1:ee:ce:49:75:d5:52:aa:9a:97:b0:6c:5d:fe:
c4:f7:7f:61:87:39:6d:b9:49:13:b7:31:89:b4:ae:
28:31:e5:1c:33:d6:08:f0:31:9d:61:38:23:b3:fc:
db:83:2b:80:79:20:fb:61:a1:7a:59:7a:28:5e:e0:
25:5d:d7:e0:23:46:4a:08:8c:83:fd:b2:91:7b:6a:
5f:8a:1f:be:78:46:58:ef:19:98:ea:34:fc:aa:8a:
1a:78:53:21:33:3e:73:24:7b:32:88:5d:0a:ec:0a:
b7:9d:20:a0:02:19:a4:b5:c5:d5:84:af:2e:a9:91:
9e:97:f0:87:36:1c:e0:42:7e:10:73:ac:68:02:27:
73:93:97:9b:2a:4d:f7:44:c8:79:63:5d:a0:53:40:
e3:0e:fc:d5:4e:1b:72:a0:82:bd:71:29:82:79:f8:
74:e8:f8:01:d2:ee:1e:b2:a6:32:6a:6d:c5:a6:35:
05:08:dc:78:8e:e4:b6:c7:d0:fc:ee:d4:6a:9b:74:
78:8a:9b:34:db:91:6f:89:39:4a:08:64:58:c5:99:
54:e4:62:b5:f7:63:16:55:f6:f5:a6:17:09:23:6c:
f8:eb:75:a8:11:b4:3e:67:3f:5a:8c:f3:dc:8b:9f:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A8:5A:BF:69:C8:F7:55:D7:8A:12:5B:19:40:8E:4A:44:03:67:C1
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/Xahav2nI91XXihJbGUCOSkQDZ8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.169.0-45.81.171.255
Signature Algorithm: sha256WithRSAEncryption
6f:cd:71:1a:7d:01:4d:93:4b:0c:9e:c1:28:02:67:79:71:85:
49:59:12:8f:e6:0a:55:cb:d1:59:bd:1c:a5:46:b7:57:3d:ab:
49:5b:2b:d5:c6:cf:b1:34:59:9f:04:92:9a:99:90:87:7c:96:
43:11:29:5c:f5:de:0e:d9:b4:6c:b8:b1:b0:93:91:2a:ba:14:
82:c8:87:c9:fb:b9:4c:b7:e7:68:bb:cd:50:25:e4:db:2c:1d:
2b:fa:f7:82:4d:61:97:0e:d6:77:87:ec:be:53:45:4a:24:d1:
0c:2c:bd:ae:7b:44:8c:53:16:ec:d6:6a:94:e4:e2:1c:ce:ae:
59:3d:28:25:b9:87:8b:98:af:7f:91:d0:5f:9c:86:fd:ef:69:
41:fa:7a:03:73:2a:55:31:93:55:32:7c:25:4c:bc:3e:17:e9:
7a:65:d1:c6:f7:0a:f3:2f:a3:dd:93:63:aa:38:1e:27:77:f5:
ff:40:c4:e9:c6:dd:24:05:39:9f:e3:74:a7:34:27:9c:e6:59:
46:a9:16:a0:9c:14:48:cb:76:36:b5:5c:af:d2:54:f8:8b:e5:
6c:b7:bf:0a:0b:a6:d5:60:26:dc:15:98:ea:fc:b7:77:25:2c:
1b:69:4a:27:75:63:91:e6:ec:f1:6d:1e:42:2c:25:f4:f2:30:
e9:6b:74:77
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZT+zRxiLe85kyqk7qXTN8DsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmZjNDUxZmM0ZjI0MTFhZGRkMDBhOWZiYjE3MzQ2YWQ2
ZTg5OTYwHhcNMjUwMjEzMTAxNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGE4NWFiZjY5YzhmNzU1ZDc4YTEyNWIxOTQwOGU0YTQ0MDM2N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXKansv9+VVNjLr8UPvCse7OSXXV
Uqqal7BsXf7E939hhzltuUkTtzGJtK4oMeUcM9YI8DGdYTgjs/zbgyuAeSD7YaF6
WXooXuAlXdfgI0ZKCIyD/bKRe2pfih++eEZY7xmY6jT8qooaeFMhMz5zJHsyiF0K
7Aq3nSCgAhmktcXVhK8uqZGel/CHNhzgQn4Qc6xoAidzk5ebKk33RMh5Y12gU0Dj
DvzVThtyoIK9cSmCefh06PgB0u4esqYyam3FpjUFCNx4juS2x9D87tRqm3R4ips0
25FviTlKCGRYxZlU5GK192MWVfb1phcJI2z463WoEbQ+Zz9ajPPci5+ugQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFF2oWr9pyPdV14oSWxlAjkpEA2fBMB8GA1UdIwQY
MBaAFIS/xFH8TyQRrd0Aqfuxc0atbomWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYt
ZjY2MzE3OTc3OTY4LzEvWGFoYXYybkk5MVhYaWhKYkdVQ09Ta1FEWjhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iN2JlNjQtODZkNC00NDNiLTk2ODYtZjY2MzE3OTc3OTY4
LzEvaExfRVVmeFBKQkd0M1FDcC03RnpScTF1aVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtUakD
BAItUagwDQYJKoZIhvcNAQELBQADggEBAG/NcRp9AU2TSwyewSgCZ3lxhUlZEo/m
ClXL0Vm9HKVGt1c9q0lbK9XGz7E0WZ8EkpqZkId8lkMRKVz13g7ZtGy4sbCTkSq6
FILIh8n7uUy352i7zVAl5NssHSv694JNYZcO1neH7L5TRUok0Qwsva57RIxTFuzW
apTk4hzOrlk9KCW5h4uYr3+R0F+chv3vaUH6egNzKlUxk1UyfCVMvD4X6Xpl0cb3
CvMvo92TY6o4Hid39f9AxOnG3SQFOZ/jdKc0J5zmWUapFqCcFEjLdja1XK/SVPiL
5Wy3vwoLptVgJtwVmOr8t3clLBtpSid1Y5Hm7PFtHkIsJfTyMOlrdHc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:19:48 2025 by rpki-client