Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/sxXN0PSZnz70EQ1882VnxAeHdVc.roa
File: sxXN0PSZnz70EQ1882VnxAeHdVc.roa (raw, json)
Hash identifier: wgNf1nfr6v4ipINnpFd2+cpJB7DbP4vk3rSweCeyaM8=
Subject key identifier: B3:15:CD:D0:F4:99:9F:3E:F4:11:0D:7C:F3:65:67:C4:07:87:75:57
Certificate issuer: /CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Certificate serial: 09E2B7C6
Authority key identifier: 97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/sxXN0PSZnz70EQ1882VnxAeHdVc.roa
Signing time: Sat 01 Jan 2022 11:00:40 +0000
ROA not before: Sat 01 Jan 2022 11:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34534
IP address blocks: 37.44.239.0/24 maxlen: 24
185.157.246.0/23 maxlen: 24
2a09:ca00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165853126 (0x9e2b7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac47b51244ef49c52378aecd29c58cfb72089b
Validity
Not Before: Jan 1 11:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b315cdd0f4999f3ef4110d7cf36567c407877557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:13:d6:ba:3a:bf:09:f7:f2:61:3d:94:7d:
13:a7:f6:d6:16:e7:d2:8b:53:21:58:14:89:9b:43:
92:4f:fd:a4:60:8c:46:49:39:d3:67:9a:f8:f2:d0:
17:fe:1c:ef:2e:c9:48:f3:3f:f3:ca:c9:b2:39:96:
1f:5e:c0:88:33:f5:fe:0d:43:fc:13:47:f6:b5:72:
54:70:4c:0a:31:c2:a8:7c:cc:b0:f2:fe:85:cc:88:
f0:ae:08:4e:5a:f9:4f:d3:08:61:e1:ac:aa:26:cf:
a1:b0:71:59:24:90:b8:42:5c:4c:be:88:f4:12:8e:
f4:46:60:b8:88:8b:69:98:6a:6f:27:10:ab:e2:87:
74:e2:dc:e9:04:c3:8f:2e:72:d3:6e:32:b7:ff:77:
aa:d9:72:d2:48:ee:8e:bf:60:7e:7d:ab:2b:a9:a5:
dc:da:da:eb:a5:ac:e3:81:36:f8:7a:55:9c:bf:84:
f1:d0:5a:db:58:b2:30:e5:c0:e8:35:31:f8:bf:f8:
5d:f9:35:e7:68:c4:1b:3f:68:6c:3c:8f:65:08:ff:
05:d0:c3:1d:b6:f4:b8:7e:05:f3:e5:80:37:88:81:
2d:2c:49:64:19:82:7a:fd:a3:bb:b7:61:1f:ad:10:
42:b1:fe:2f:68:94:10:5d:56:32:ef:06:4b:5d:54:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:15:CD:D0:F4:99:9F:3E:F4:11:0D:7C:F3:65:67:C4:07:87:75:57
X509v3 Authority Key Identifier:
keyid:97:AC:47:B5:12:44:EF:49:C5:23:78:AE:CD:29:C5:8C:FB:72:08:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6xHtRJE70nFI3iuzSnFjPtyCJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/sxXN0PSZnz70EQ1882VnxAeHdVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5f063f-100d-4310-a046-3f6568b59589/1/l6xHtRJE70nFI3iuzSnFjPtyCJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.239.0/24
185.157.246.0/23
IPv6:
2a09:ca00::/48
Signature Algorithm: sha256WithRSAEncryption
77:6b:83:ac:98:13:6b:49:f7:0d:49:1b:71:cc:d4:b6:40:af:
fb:82:36:4a:ea:06:7f:14:d1:fe:92:9d:79:23:35:4e:64:09:
3a:84:ac:17:68:ed:ed:1c:78:de:a2:6a:73:62:56:40:3c:c0:
10:03:77:a7:64:74:b3:cc:f4:e1:26:76:64:55:21:a9:35:4d:
07:ad:88:55:62:ff:82:ff:95:83:65:69:35:9c:ab:ee:09:01:
55:84:42:07:1a:12:13:a7:54:7c:2f:a6:c7:8c:14:a9:fa:b3:
70:66:ce:d4:58:79:66:a7:cd:2b:af:14:09:c0:55:e0:62:21:
c8:a1:cd:2e:12:72:b9:d8:75:0d:34:89:16:4d:06:b4:f6:4c:
d1:cd:ab:0c:90:5b:70:1c:43:9c:9e:ef:f3:7c:1d:7b:ef:8a:
89:26:be:b6:ed:9b:e8:c4:b3:84:bc:04:29:55:76:ed:6c:37:
dd:7e:94:6e:0d:fe:98:36:9c:4e:e2:ab:40:e0:8b:0f:c4:60:
38:81:a1:39:8d:c6:ae:01:9f:0e:45:e3:2b:57:35:92:11:2d:
eb:72:9c:fe:31:3a:b9:d0:69:86:95:44:4e:2e:b0:a8:96:a7:
b6:dc:22:ca:3c:9b:f8:87:85:d0:25:fc:07:92:78:04:a9:41:
94:7c:cb:8c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIECeK3xjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
N2FjNDdiNTEyNDRlZjQ5YzUyMzc4YWVjZDI5YzU4Y2ZiNzIwODliMB4XDTIyMDEw
MTExMDA0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjMxNWNkZDBmNDk5
OWYzZWY0MTEwZDdjZjM2NTY3YzQwNzg3NzU1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKwHE9a6Or8J9/JhPZR9E6f21hbn0otTIVgUiZtDkk/9pGCM
Rkk502ea+PLQF/4c7y7JSPM/88rJsjmWH17AiDP1/g1D/BNH9rVyVHBMCjHCqHzM
sPL+hcyI8K4ITlr5T9MIYeGsqibPobBxWSSQuEJcTL6I9BKO9EZguIiLaZhqbycQ
q+KHdOLc6QTDjy5y024yt/93qtly0kjujr9gfn2rK6ml3Nra66Ws44E2+HpVnL+E
8dBa21iyMOXA6DUx+L/4Xfk152jEGz9obDyPZQj/BdDDHbb0uH4F8+WAN4iBLSxJ
ZBmCev2ju7dhH60QQrH+L2iUEF1WMu8GS11UJN0CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBSzFc3Q9JmfPvQRDXzzZWfEB4d1VzAfBgNVHSMEGDAWgBSXrEe1EkTvScUj
eK7NKcWM+3IImzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2w2eEh0UkpFNzBuRkkzaXV6U25GalB0eUNKcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvNWYwNjNmLTEwMGQtNDMxMC1hMDQ2LTNmNjU2OGI1OTU4OS8x
L3N4WE4wUFNabno3MEVRMTg4MlZueEFlSGRWYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
NWYwNjNmLTEwMGQtNDMxMC1hMDQ2LTNmNjU2OGI1OTU4OS8xL2w2eEh0UkpFNzBu
RkkzaXV6U25GalB0eUNKcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEACUs7wMEAbmd9jAPBAIAAjAJAwcA
KgnKAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQB3a4OsmBNrSfcNSRtxzNS2QK/7gjZK
6gZ/FNH+kp15IzVOZAk6hKwXaO3tHHjeompzYlZAPMAQA3enZHSzzPThJnZkVSGp
NU0HrYhVYv+C/5WDZWk1nKvuCQFVhEIHGhITp1R8L6bHjBSp+rNwZs7UWHlmp80r
rxQJwFXgYiHIoc0uEnK52HUNNIkWTQa09kzRzasMkFtwHEOcnu/zfB1774qJJr62
7ZvoxLOEvAQpVXbtbDfdfpRuDf6YNpxO4qtA4IsPxGA4gaE5jcauAZ8OReMrVzWS
ES3rcpz+MTq50GmGlUROLrColqe23CLKPJv4h4XQJfwHkngEqUGUfMuM
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:44 2025 by rpki-client