Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/XXUXKaNBLjG2zXes3zUz4pT_p2E.roa
File: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (raw, json)
Hash identifier: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=
Subject key identifier: 5D:75:17:29:A3:41:2E:31:B6:CD:77:AC:DF:35:33:E2:94:FF:A7:61
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 019423D7EF4C17F1890F90A82D5E1FD8059E
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/XXUXKaNBLjG2zXes3zUz4pT_p2E.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196714
IP address blocks: 31.3.80.0/21 maxlen: 24
91.137.0.0/18 maxlen: 18
109.73.16.0/20 maxlen: 20
171.33.184.0/21 maxlen: 22
185.38.8.0/22 maxlen: 24
2a02:2250::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ef:4c:17:f1:89:0f:90:a8:2d:5e:1f:d8:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d751729a3412e31b6cd77acdf3533e294ffa761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:64:b7:5d:0f:45:90:2f:13:fb:d1:d4:70:
f2:99:75:05:20:7b:a7:5f:3d:88:89:b0:29:6b:78:
e5:0a:fe:5e:f6:d9:87:11:48:26:33:03:21:47:bf:
63:cf:a0:a6:bf:2f:00:8a:65:43:b2:6a:f9:04:77:
3d:6b:cf:d8:40:e8:7c:56:cf:83:96:24:5f:a1:a6:
29:09:4e:15:28:df:38:a7:c2:7a:e7:0c:0b:73:cd:
f9:f9:6b:93:92:b3:4f:ba:b7:eb:94:49:6b:a2:dd:
eb:3f:e0:86:c8:04:6d:58:49:62:f0:8a:9e:ce:7b:
29:1b:47:85:22:84:76:26:04:64:76:d5:69:cb:ab:
78:f9:69:b0:df:e8:11:9c:a7:a1:28:69:08:a4:5f:
1e:b3:e4:de:47:82:98:49:19:93:b4:fc:4d:45:88:
58:d7:de:59:85:29:54:ae:11:aa:cb:72:2b:b1:87:
07:f3:00:0d:c5:92:8b:ae:0c:2e:ca:47:ed:bf:fd:
c6:67:55:57:9d:26:d1:6f:10:7b:1e:47:6d:1c:02:
c3:26:da:89:ec:8e:f2:ce:f8:f5:0a:8f:85:2e:50:
e1:40:39:7e:da:46:97:60:a0:9b:0c:08:25:65:a0:
f6:bf:37:01:52:50:0b:65:69:c6:be:5d:23:7c:9a:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:75:17:29:A3:41:2E:31:B6:CD:77:AC:DF:35:33:E2:94:FF:A7:61
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/XXUXKaNBLjG2zXes3zUz4pT_p2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.80.0/21
91.137.0.0/18
109.73.16.0/20
171.33.184.0/21
185.38.8.0/22
IPv6:
2a02:2250::/32
Signature Algorithm: sha256WithRSAEncryption
29:ec:67:07:87:4f:b2:a9:0f:50:a5:b9:0e:b7:75:93:fe:61:
f8:03:5f:79:08:ab:1f:16:4a:dc:c1:e7:a0:b5:4f:fb:ad:30:
2f:17:c2:7d:66:e2:fa:4d:73:36:2d:15:b9:1e:e8:3a:2f:1b:
98:1d:37:e2:2e:54:60:eb:48:03:bd:84:1c:58:86:82:d1:28:
d6:d6:b6:c4:68:8e:fe:5b:68:8c:32:3c:20:5e:ac:f6:72:58:
59:2d:2e:7b:a0:03:57:eb:c2:12:28:8d:1b:0f:cf:da:3d:4c:
80:36:b7:03:85:d8:2d:17:89:27:4b:df:76:3b:4e:e3:cf:45:
55:1c:37:47:61:0f:e4:8e:a2:8a:86:c5:3d:cc:ff:51:53:62:
1a:48:63:38:96:11:e7:11:2a:25:9d:a4:7c:93:10:74:14:97:
85:91:a4:0e:7c:ca:4a:ba:92:94:b7:b3:e4:68:d9:01:95:54:
e4:f4:bd:86:77:9c:3e:06:aa:c7:94:f2:8a:bc:7b:79:b3:8a:
4d:ca:4c:2f:0b:75:28:9a:c9:77:a5:6d:bc:e3:bf:a8:1c:aa:
dd:e5:bc:55:6a:19:01:31:5c:50:79:25:c4:dc:1a:dc:74:32:
df:31:5d:6f:f5:36:46:ed:55:81:16:e8:ba:df:8a:c7:ab:1a:
1c:bc:c4:95
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQj1+9MF/GJD5CoLV4f2AWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWE4Mzg1YTE0ZmQ5OTY3OTc4YWU3ZjA2ZWM0ZGQ1MjIy
OWE0NGEwHhcNMjUwMTAxMjE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDc1MTcyOWEzNDEyZTMxYjZjZDc3YWNkZjM1MzNlMjk0ZmZhNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLRkt10PRZAvE/vR1HDymXUFIHun
Xz2IibApa3jlCv5e9tmHEUgmMwMhR79jz6Cmvy8AimVDsmr5BHc9a8/YQOh8Vs+D
liRfoaYpCU4VKN84p8J65wwLc835+WuTkrNPurfrlElrot3rP+CGyARtWEli8Iqe
znspG0eFIoR2JgRkdtVpy6t4+Wmw3+gRnKehKGkIpF8es+TeR4KYSRmTtPxNRYhY
195ZhSlUrhGqy3IrsYcH8wANxZKLrgwuykftv/3GZ1VXnSbRbxB7HkdtHALDJtqJ
7I7yzvj1Co+FLlDhQDl+2kaXYKCbDAglZaD2vzcBUlALZWnGvl0jfJodVQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFF11FymjQS4xts13rN81M+KU/6dhMB8GA1UdIwQY
MBaAFGDqg4WhT9mWeXiufwbsTdUiKaRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEt
ZjU0NTc3ZjdjYzBmLzEvWFhVWEthTkJMakcyelhlczN6VXo0cFRfcDJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEtZjU0NTc3ZjdjYzBm
LzEvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDHwNQAwQG
W4kAAwQEbUkQAwQDqyG4AwQCuSYIMA0EAgACMAcDBQAqAiJQMA0GCSqGSIb3DQEB
CwUAA4IBAQAp7GcHh0+yqQ9QpbkOt3WT/mH4A195CKsfFkrcweegtU/7rTAvF8J9
ZuL6TXM2LRW5Hug6LxuYHTfiLlRg60gDvYQcWIaC0SjW1rbEaI7+W2iMMjwgXqz2
clhZLS57oANX68ISKI0bD8/aPUyANrcDhdgtF4knS992O07jz0VVHDdHYQ/kjqKK
hsU9zP9RU2IaSGM4lhHnESolnaR8kxB0FJeFkaQOfMpKupKUt7PkaNkBlVTk9L2G
d5w+BqrHlPKKvHt5s4pNykwvC3Uomsl3pW2847+oHKrd5bxVahkBMVxQeSXE3Brc
dDLfMV1v9TZG7VWBFui634rHqxocvMSV
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:42:30 2025 by rpki-client