Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/xe-87aH9X1grSznD-2-c4OZyYHo.roa
File: xe-87aH9X1grSznD-2-c4OZyYHo.roa (raw, json)
Hash identifier: S80ekAfHbqsZOpsBTbZwj0DAL1iEaOufRZ1+nQUXDqE=
Subject key identifier: C5:EF:BC:ED:A1:FD:5F:58:2B:4B:39:C3:FB:6F:9C:E0:E6:72:60:7A
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 01941FFAB46C1157A9471BC22F4A0476BB2A
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/xe-87aH9X1grSznD-2-c4OZyYHo.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 37.0.120.0/21 maxlen: 24
78.24.92.0/22 maxlen: 24
89.248.235.0/24 maxlen: 24
185.16.212.0/22 maxlen: 24
193.243.182.0/24 maxlen: 24
217.199.220.0/24 maxlen: 24
217.199.221.0/24 maxlen: 24
217.199.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b4:6c:11:57:a9:47:1b:c2:2f:4a:04:76:bb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5efbceda1fd5f582b4b39c3fb6f9ce0e672607a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:21:94:e3:4b:b8:56:4a:3a:29:e7:43:bd:
f1:9f:82:3d:cd:26:20:77:4a:a8:0f:f7:98:23:21:
9c:b0:2b:28:ee:c3:0e:1c:bc:ba:42:90:6b:98:c7:
34:c7:3e:9a:3a:cf:7e:cb:0c:67:ba:af:94:94:44:
fb:d7:5e:16:37:aa:cd:40:1c:0a:45:b9:46:7c:34:
fb:a1:89:bf:39:1f:2c:42:72:95:5d:7d:d8:c4:b7:
9d:a5:b7:9e:8b:5b:ad:15:75:a9:09:e4:03:f6:55:
93:8d:bd:7a:88:de:91:fd:a2:78:22:25:b7:94:e9:
42:d6:10:33:76:cf:d6:90:68:74:0e:76:cc:10:14:
e3:6a:51:e7:df:0a:0e:92:1b:59:8a:da:62:86:98:
5a:86:22:51:7d:b8:24:df:02:1f:33:dc:9d:07:c7:
1c:7f:3e:b1:3f:84:fa:a4:a5:1c:9b:81:5e:fa:aa:
c7:0d:a5:f8:16:f1:9e:dc:9f:0a:30:6f:61:16:8a:
68:01:63:5d:93:6b:df:0e:1b:59:6c:bb:71:28:63:
96:f3:9b:32:9d:90:eb:0e:53:54:5c:83:6f:38:ca:
75:89:4f:43:65:1d:96:25:14:be:a1:1d:6a:e4:db:
7c:92:0f:14:f4:ca:49:49:75:94:41:95:ea:e5:4c:
8a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EF:BC:ED:A1:FD:5F:58:2B:4B:39:C3:FB:6F:9C:E0:E6:72:60:7A
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/xe-87aH9X1grSznD-2-c4OZyYHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.120.0/21
78.24.92.0/22
89.248.235.0/24
185.16.212.0/22
193.243.182.0/24
217.199.220.0/23
217.199.223.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9c:5c:a9:c8:bf:65:98:80:e1:08:6c:d9:c6:64:53:ac:55:
53:b6:14:cb:ac:f3:60:f6:e0:ac:9d:c2:38:2f:5f:1a:a4:c4:
7b:e5:1f:b7:95:0a:30:ee:9e:2e:c7:d5:e5:64:bd:7b:8c:8d:
57:3a:da:59:84:dd:28:65:ba:ac:a9:42:8f:4e:1a:e4:bb:59:
ac:68:8a:31:8a:75:43:d6:5a:49:b5:58:37:cd:ec:d6:35:c8:
16:ed:72:ac:4d:8a:61:7c:a8:65:05:1b:b8:b2:bd:68:ac:31:
1c:db:89:1a:b5:3c:50:19:dd:e7:cd:e9:21:be:55:07:58:ff:
68:ab:6a:1e:a8:ed:87:d4:78:99:3e:c9:2e:e1:5e:ab:4e:78:
7f:b6:49:5b:1b:f9:25:7c:dd:af:ab:3b:bb:5b:62:1e:d0:4f:
a5:e4:1e:ee:b2:f7:20:a9:c0:0f:fa:2b:95:4f:d4:fe:a6:cb:
65:21:8f:a3:15:dc:ac:67:e5:17:16:4b:f4:e9:ac:93:ed:0d:
ce:c0:6c:56:90:35:72:6a:c4:cc:fc:37:62:1e:49:23:5c:a7:
a4:db:8f:c1:08:bc:0b:80:38:66:8b:88:a6:9c:f2:cc:51:7c:
eb:f3:55:fc:2f:36:c2:01:c5:7a:f4:59:33:b0:a1:be:49:25:
7b:31:41:0b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQf+rRsEVepRxvCL0oEdrsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm
OGMxY2UwHhcNMjUwMTAxMDM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWVmYmNlZGExZmQ1ZjU4MmI0YjM5YzNmYjZmOWNlMGU2NzI2MDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9shlONLuFZKOinnQ73xn4I9zSYg
d0qoD/eYIyGcsCso7sMOHLy6QpBrmMc0xz6aOs9+ywxnuq+UlET7114WN6rNQBwK
RblGfDT7oYm/OR8sQnKVXX3YxLedpbeei1utFXWpCeQD9lWTjb16iN6R/aJ4IiW3
lOlC1hAzds/WkGh0DnbMEBTjalHn3woOkhtZitpihphahiJRfbgk3wIfM9ydB8cc
fz6xP4T6pKUcm4Fe+qrHDaX4FvGe3J8KMG9hFopoAWNdk2vfDhtZbLtxKGOW85sy
nZDrDlNUXINvOMp1iU9DZR2WJRS+oR1q5Nt8kg8U9MpJSXWUQZXq5UyKPwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFMXvvO2h/V9YK0s5w/tvnODmcmB6MB8GA1UdIwQY
MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt
YzQ3ZTE4ZGYwMzcxLzEveGUtODdhSDlYMWdyU3puRC0yLWM0T1p5WUhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx
LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDJQB4AwQC
ThhcAwQAWfjrAwQCuRDUAwQAwfO2AwQB2cfcAwQA2cffMA0GCSqGSIb3DQEBCwUA
A4IBAQCFnFypyL9lmIDhCGzZxmRTrFVTthTLrPNg9uCsncI4L18apMR75R+3lQow
7p4ux9XlZL17jI1XOtpZhN0oZbqsqUKPThrku1msaIoxinVD1lpJtVg3zezWNcgW
7XKsTYphfKhlBRu4sr1orDEc24katTxQGd3nzekhvlUHWP9oq2oeqO2H1HiZPsku
4V6rTnh/tklbG/klfN2vqzu7W2Ie0E+l5B7usvcgqcAP+iuVT9T+pstlIY+jFdys
Z+UXFkv06ayT7Q3OwGxWkDVyasTM/DdiHkkjXKek24/BCLwLgDhmi4imnPLMUXzr
81X8LzbCAcV69FkzsKG+SSV7MUEL
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:22:39 2025 by rpki-client