Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/Xt9-3dTi-N6VdVWh8QIceqGpgJw.roa
File: Xt9-3dTi-N6VdVWh8QIceqGpgJw.roa (raw, json)
Hash identifier: 6HyY9+1SZcuBRZtKawrioqnMaSkmaySlE/05wP6o0TA=
Subject key identifier: 5E:DF:7E:DD:D4:E2:F8:DE:95:75:55:A1:F1:02:1C:7A:A1:A9:80:9C
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 01825E96E376A8518035C7F15C1DCFF98961
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/Xt9-3dTi-N6VdVWh8QIceqGpgJw.roa
Signing time: Tue 02 Aug 2022 12:45:23 +0000
ROA not before: Tue 02 Aug 2022 12:45:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44514
IP address blocks: 46.228.224.0/20 maxlen: 20
217.170.160.0/20 maxlen: 20
212.67.128.0/19 maxlen: 19
91.192.250.0/23 maxlen: 23
2a02:78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:96:e3:76:a8:51:80:35:c7:f1:5c:1d:cf:f9:89:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Aug 2 12:45:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5edf7eddd4e2f8de957555a1f1021c7aa1a9809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:16:e8:67:69:13:d1:73:1a:9f:62:1a:6a:
c0:ae:f0:34:19:a5:41:d3:77:2c:4d:7a:a9:11:a2:
2f:1d:4a:e9:35:bf:a3:ea:ee:94:ec:52:ea:e1:09:
66:5b:1e:d3:e4:95:eb:9b:bc:0b:fa:a4:80:3f:b0:
e7:e0:ce:01:de:eb:fc:c7:e8:22:fb:57:5e:d2:b2:
44:80:42:be:c6:71:69:3a:95:55:c2:85:33:0d:88:
5a:9c:0d:3e:aa:b0:5f:54:df:09:dc:89:84:68:7c:
77:8e:a3:2c:18:8f:dc:c2:9a:2e:b9:bc:45:f7:c8:
77:66:75:7f:bd:f9:cc:ec:4d:58:8a:e3:51:fd:59:
1a:68:30:38:42:c6:de:97:b2:e5:f5:d5:03:b2:95:
0e:47:cf:89:59:64:c9:6c:ec:eb:fb:a3:0e:63:08:
02:a4:13:73:fa:76:e4:eb:1d:f2:06:f9:bc:b0:c9:
30:23:2f:25:93:25:ba:bc:b9:0c:cc:5a:6f:07:94:
42:13:c6:c1:f3:43:fe:3e:a2:7b:65:3b:6c:13:5a:
f9:41:ff:ab:4a:dd:ee:e3:d8:cc:ba:89:c9:6e:e3:
91:ac:24:a9:f4:1c:db:28:ed:8c:3b:7e:c6:ac:d9:
1a:8f:43:43:de:ce:3f:f7:12:f0:83:7b:fe:67:fe:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DF:7E:DD:D4:E2:F8:DE:95:75:55:A1:F1:02:1C:7A:A1:A9:80:9C
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/Xt9-3dTi-N6VdVWh8QIceqGpgJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.224.0/20
91.192.250.0/23
212.67.128.0/19
217.170.160.0/20
IPv6:
2a02:78::/32
Signature Algorithm: sha256WithRSAEncryption
cf:9e:8f:89:08:7d:33:38:e8:1e:96:43:e8:53:9c:66:c8:21:
c4:f9:b5:88:ab:5a:0c:e0:e0:37:37:35:4a:11:59:a2:c8:8f:
69:3b:34:03:8d:48:7a:a5:f3:e8:61:e8:35:20:44:67:66:d4:
aa:69:92:93:3b:fc:dc:f7:62:4c:99:65:af:7a:9d:f9:45:ec:
80:54:b4:2f:17:c6:bd:b1:ba:37:d5:ca:8b:bc:44:94:44:32:
cd:f8:31:d6:e3:56:31:59:ec:48:96:c9:8c:24:70:c2:26:58:
26:3f:8b:0c:3b:a3:be:b5:4c:9f:a5:59:47:82:ae:d5:79:24:
63:6c:e4:98:5b:d6:9b:78:d2:66:17:1b:18:bb:7b:2d:f7:02:
65:c3:0c:4d:f0:c8:bb:b5:af:b2:5d:f9:4d:2a:3a:ff:97:24:
bd:68:a0:e8:48:57:52:77:c5:f3:bc:53:d1:e6:3c:a8:f2:5a:
98:ef:1b:57:43:bd:5c:aa:04:95:17:48:cf:f1:08:1d:b5:e8:
c0:49:8d:f2:ca:20:e3:d2:75:a7:b0:5a:5f:fa:0d:02:6b:aa:
19:47:04:09:3e:41:f3:ee:96:72:54:82:d4:04:65:bd:80:cf:
2b:b2:69:5f:13:78:b8:99:ae:3f:c1:7a:a4:2d:37:e7:6a:e7:
27:9a:df:ce
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYJeluN2qFGANcfxXB3P+YlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz
YmMwNzgwHhcNMjIwODAyMTI0NTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWRmN2VkZGQ0ZTJmOGRlOTU3NTU1YTFmMTAyMWM3YWExYTk4MDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFcW6GdpE9FzGp9iGmrArvA0GaVB
03csTXqpEaIvHUrpNb+j6u6U7FLq4QlmWx7T5JXrm7wL+qSAP7Dn4M4B3uv8x+gi
+1de0rJEgEK+xnFpOpVVwoUzDYhanA0+qrBfVN8J3ImEaHx3jqMsGI/cwpouubxF
98h3ZnV/vfnM7E1YiuNR/VkaaDA4Qsbel7Ll9dUDspUOR8+JWWTJbOzr+6MOYwgC
pBNz+nbk6x3yBvm8sMkwIy8lkyW6vLkMzFpvB5RCE8bB80P+PqJ7ZTtsE1r5Qf+r
St3u49jMuonJbuORrCSp9BzbKO2MO37GrNkaj0ND3s4/9xLwg3v+Z/4thwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFF7fft3U4vjelXVVofECHHqhqYCcMB8GA1UdIwQY
MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt
ZTc0ZDhkMWQ0ZTAyLzEvWHQ5LTNkVGktTjZWZFZXaDhRSWNlcUdwZ0p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy
LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQELuTgAwQB
W8D6AwQF1EOAAwQE2aqgMA0EAgACMAcDBQAqAgB4MA0GCSqGSIb3DQEBCwUAA4IB
AQDPno+JCH0zOOgelkPoU5xmyCHE+bWIq1oM4OA3NzVKEVmiyI9pOzQDjUh6pfPo
Yeg1IERnZtSqaZKTO/zc92JMmWWvep35ReyAVLQvF8a9sbo31cqLvESURDLN+DHW
41YxWexIlsmMJHDCJlgmP4sMO6O+tUyfpVlHgq7VeSRjbOSYW9abeNJmFxsYu3st
9wJlwwxN8Mi7ta+yXflNKjr/lyS9aKDoSFdSd8XzvFPR5jyo8lqY7xtXQ71cqgSV
F0jP8QgdtejASY3yyiDj0nWnsFpf+g0Ca6oZRwQJPkHz7pZyVILUBGW9gM8rsmlf
E3i4ma4/wXqkLTfnaucnmt/O
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:35 2025 by rpki-client