Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/XzHbUO4u5QutpWYtZyqfUUIrRTI.roa
File: XzHbUO4u5QutpWYtZyqfUUIrRTI.roa (raw, json)
Hash identifier: dO0CtFUpXZ4k5F0vBkaTPTnFApdf6AbyjKu5COO/Zms=
Subject key identifier: 5F:31:DB:50:EE:2E:E5:0B:AD:A5:66:2D:67:2A:9F:51:42:2B:45:32
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 01941F8BFE605C2BB057937A7B36E25D1714
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/XzHbUO4u5QutpWYtZyqfUUIrRTI.roa
Signing time: Wed 01 Jan 2025 01:47:35 +0000
ROA not before: Wed 01 Jan 2025 01:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34306
IP address blocks: 78.108.224.0/20 maxlen: 20
80.69.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8b:fe:60:5c:2b:b0:57:93:7a:7b:36:e2:5d:17:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Jan 1 01:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f31db50ee2ee50bada5662d672a9f51422b4532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:06:ed:f8:61:cb:e7:d7:f7:7a:66:75:0b:
b8:ce:29:73:65:ac:a1:5d:bd:74:0f:05:98:ed:4e:
b4:dc:3e:5b:a6:17:df:2c:6e:41:e1:a2:bf:40:0b:
32:8d:f1:c0:82:61:98:a2:0a:c6:dc:79:9c:16:fa:
76:83:9f:1e:6d:3c:67:d5:8f:05:a6:48:d4:de:47:
0f:a7:c7:87:1f:a1:33:c5:4d:5d:ab:b5:a6:84:15:
3b:75:a9:98:8a:60:57:01:99:ef:6d:4b:6c:43:c0:
14:70:c8:d9:77:ea:64:f6:63:92:ec:5a:5c:eb:3e:
db:d6:7d:63:92:bf:4c:63:b0:3e:c2:8c:f4:68:b9:
88:19:bc:03:5a:9c:6d:8c:b7:3b:35:55:0b:63:57:
f7:c3:ff:78:e4:29:f4:4d:50:df:80:c1:95:35:2f:
67:fd:ef:3d:42:69:a8:52:55:c6:85:ed:32:14:4f:
86:0a:74:ac:54:d1:35:c4:4b:19:a5:48:2a:89:31:
06:5a:21:69:66:3d:40:7b:4d:2e:82:b0:d8:76:f3:
3e:23:cc:81:dd:c3:25:a7:a1:6d:b0:f0:41:63:24:
4c:1e:24:64:91:1a:52:7e:1e:a9:5d:f6:63:d2:66:
8d:dd:64:dc:0f:f6:14:4f:39:1b:8a:99:aa:cf:30:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:31:DB:50:EE:2E:E5:0B:AD:A5:66:2D:67:2A:9F:51:42:2B:45:32
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/XzHbUO4u5QutpWYtZyqfUUIrRTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.224.0/20
80.69.208.0/20
Signature Algorithm: sha256WithRSAEncryption
20:ed:c0:f6:93:ea:60:0e:a7:63:07:a5:a7:0d:b7:57:3c:9c:
4f:6e:79:7b:f4:79:cb:9a:87:90:73:80:77:6d:18:5d:2e:0f:
47:f4:c3:ac:95:55:8c:73:1a:90:3f:93:93:f6:c3:82:68:57:
c4:28:7f:0d:32:31:c5:99:34:7a:54:9a:5e:47:80:c4:3b:39:
ae:2d:ef:f7:65:0d:92:af:bb:2b:07:a5:67:83:aa:71:4f:02:
45:d6:e5:30:d8:53:63:af:30:17:0b:79:d4:89:b1:13:61:24:
c0:64:1e:0e:7f:9f:77:af:f7:08:61:0e:a5:1d:e8:1d:42:7e:
2c:99:9f:49:65:6a:f6:b7:94:4b:30:a6:73:4a:4f:06:43:63:
60:db:1c:fb:9a:c4:57:b6:1e:3d:32:a9:40:42:2a:48:44:b9:
9e:0f:07:c8:74:5b:1d:38:3b:d5:57:cb:6c:26:be:fa:21:f0:
25:bd:2f:0f:96:a9:f9:24:70:35:3c:91:3a:ab:cc:fc:02:a8:
4a:a8:66:17:0d:17:37:d5:76:0e:ad:e5:ed:61:31:5e:11:d6:
99:d4:92:5a:bd:9b:78:73:03:05:93:d9:bd:eb:8f:e0:c1:99:
bd:9b:1f:66:47:76:e4:f3:0c:64:84:a0:b6:fc:6e:f6:09:12:
d5:4a:e8:b0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfi/5gXCuwV5N6ezbiXRcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YjgwZTYwYjVhZGY0NWFlYmE1YzBjOGFiY2NjNjM5OTdh
MGYxZGIwHhcNMjUwMTAxMDE0NzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjMxZGI1MGVlMmVlNTBiYWRhNTY2MmQ2NzJhOWY1MTQyMmI0NTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUcG7fhhy+fX93pmdQu4zilzZayh
Xb10DwWY7U603D5bphffLG5B4aK/QAsyjfHAgmGYogrG3HmcFvp2g58ebTxn1Y8F
pkjU3kcPp8eHH6EzxU1dq7WmhBU7damYimBXAZnvbUtsQ8AUcMjZd+pk9mOS7Fpc
6z7b1n1jkr9MY7A+woz0aLmIGbwDWpxtjLc7NVULY1f3w/945Cn0TVDfgMGVNS9n
/e89QmmoUlXGhe0yFE+GCnSsVNE1xEsZpUgqiTEGWiFpZj1Ae00ugrDYdvM+I8yB
3cMlp6FtsPBBYyRMHiRkkRpSfh6pXfZj0maN3WTcD/YUTzkbipmqzzAjdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF8x21DuLuULraVmLWcqn1FCK0UyMB8GA1UdIwQY
MBaAFFe4DmC1rfRa66XAyKvMxjmXoPHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMt
ZTZlOGFhZTM0ODI2LzEvWHpIYlVPNHU1UXV0cFdZdFp5cWZVVUlyUlRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMtZTZlOGFhZTM0ODI2
LzEvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETmzgAwQE
UEXQMA0GCSqGSIb3DQEBCwUAA4IBAQAg7cD2k+pgDqdjB6WnDbdXPJxPbnl79HnL
moeQc4B3bRhdLg9H9MOslVWMcxqQP5OT9sOCaFfEKH8NMjHFmTR6VJpeR4DEOzmu
Le/3ZQ2Sr7srB6Vng6pxTwJF1uUw2FNjrzAXC3nUibETYSTAZB4Of593r/cIYQ6l
HegdQn4smZ9JZWr2t5RLMKZzSk8GQ2Ng2xz7msRXth49MqlAQipIRLmeDwfIdFsd
ODvVV8tsJr76IfAlvS8Plqn5JHA1PJE6q8z8AqhKqGYXDRc31XYOreXtYTFeEdaZ
1JJavZt4cwMFk9m964/gwZm9mx9mR3bk8wxkhKC2/G72CRLVSuiw
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:20 2025 by rpki-client