Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xeXsIqRyNQ8tCJjLiS_SWkibat0.roa
File: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (raw, json)
Hash identifier: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=
Subject key identifier: C5:E5:EC:22:A4:72:35:0F:2D:08:98:CB:89:2F:D2:5A:48:9B:6A:DD
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC10C441BB7FBE5775C9D88CA803C8
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xeXsIqRyNQ8tCJjLiS_SWkibat0.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60860
IP address blocks: 89.185.8.0/24 maxlen: 24
89.185.12.0/24 maxlen: 24
93.185.214.0/24 maxlen: 24
109.72.122.0/24 maxlen: 24
185.30.200.0/23 maxlen: 23
185.30.202.0/24 maxlen: 24
185.30.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:10:c4:41:bb:7f:be:57:75:c9:d8:8c:a8:03:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5e5ec22a472350f2d0898cb892fd25a489b6add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:36:25:58:95:3c:5d:07:84:eb:26:3d:29:
de:ac:61:57:80:0f:98:fb:fb:4d:f2:b1:6f:62:51:
46:67:ff:c8:e6:dd:89:7b:90:9e:1e:89:ad:58:54:
d0:09:02:d9:f6:d1:79:08:63:89:74:25:85:03:cc:
4f:cb:7e:f1:64:e1:99:d7:d7:f4:23:55:f9:16:6c:
fc:38:18:04:b5:43:93:2c:b5:51:78:2b:5d:45:b8:
4f:57:73:88:21:32:c1:b5:07:2e:e2:4a:15:83:b8:
5f:9f:9d:a6:6a:78:64:bb:15:99:05:30:59:4f:32:
4f:7f:41:95:28:eb:75:4b:55:30:40:67:04:52:60:
0a:61:6f:f8:64:b9:d8:08:3b:6b:00:41:6c:82:13:
3f:e4:bf:47:07:ea:10:58:6f:be:8d:fc:61:51:42:
8a:5d:8d:0b:f7:bc:df:81:2c:bb:2e:02:4b:b3:e8:
ca:b5:2e:00:7e:4a:47:c4:19:e7:c0:21:e6:42:fb:
d6:76:05:d2:4a:56:e5:87:6a:5c:37:19:a6:bb:10:
0f:e4:4f:98:1c:32:eb:32:fd:f1:77:25:46:4c:40:
c8:f5:3d:cc:2d:32:c2:27:a8:b1:c7:a3:66:e5:4f:
8c:c9:00:e6:1b:3d:03:74:fe:7b:31:4d:47:f0:11:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:EC:22:A4:72:35:0F:2D:08:98:CB:89:2F:D2:5A:48:9B:6A:DD
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xeXsIqRyNQ8tCJjLiS_SWkibat0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.8.0/24
89.185.12.0/24
93.185.214.0/24
109.72.122.0/24
185.30.200.0/22
Signature Algorithm: sha256WithRSAEncryption
06:d7:76:c1:47:65:1d:55:60:0c:2a:0f:66:9a:6f:7b:ba:a4:
93:70:8d:62:97:ef:c0:65:7b:79:57:c4:b7:19:70:b1:cc:ac:
08:87:d9:44:de:9b:a3:1f:61:aa:f7:15:fc:58:f2:16:9d:fa:
8c:49:b0:4f:1f:d1:51:16:e5:cb:65:cd:5b:85:87:07:50:e0:
a4:ec:f7:93:07:1c:a7:18:62:ee:8f:6f:a1:2f:4c:c3:2b:cf:
03:66:69:53:97:59:f6:fd:ac:c6:da:de:dd:aa:b9:05:8d:b0:
26:d3:e4:43:1e:78:53:d1:ff:c9:39:76:87:00:c5:bc:c9:8f:
bb:ad:7f:dc:78:92:f5:3d:4a:76:e5:78:fd:fc:49:73:b0:42:
d0:be:f8:d8:23:d0:c8:08:6c:e3:75:32:6f:d5:5a:b3:da:2c:
34:90:bb:28:9c:b1:38:00:02:a2:9a:71:65:66:5a:9d:eb:45:
1c:7b:9f:a3:af:3b:af:7a:80:a8:31:a1:4d:42:df:be:fc:ba:
a9:65:cb:f2:6a:27:54:29:74:9c:66:b0:c8:0e:12:d9:e1:06:
38:a7:5e:19:fc:49:b5:82:09:9a:7f:d5:62:6b:5b:a7:24:93:
13:e3:71:d2:4b:85:6b:c8:00:4b:b2:e8:98:0f:d2:11:4c:94:
a1:b6:39:52
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQi/BDEQbt/vld1ydiMqAPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjUwMTAxMTc0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWU1ZWMyMmE0NzIzNTBmMmQwODk4Y2I4OTJmZDI1YTQ4OWI2YWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzik2JViVPF0HhOsmPSnerGFXgA+Y
+/tN8rFvYlFGZ//I5t2Je5CeHomtWFTQCQLZ9tF5CGOJdCWFA8xPy37xZOGZ19f0
I1X5Fmz8OBgEtUOTLLVReCtdRbhPV3OIITLBtQcu4koVg7hfn52manhkuxWZBTBZ
TzJPf0GVKOt1S1UwQGcEUmAKYW/4ZLnYCDtrAEFsghM/5L9HB+oQWG++jfxhUUKK
XY0L97zfgSy7LgJLs+jKtS4AfkpHxBnnwCHmQvvWdgXSSlblh2pcNxmmuxAP5E+Y
HDLrMv3xdyVGTEDI9T3MLTLCJ6ixx6Nm5U+MyQDmGz0DdP57MU1H8BFGOQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMXl7CKkcjUPLQiYy4kv0lpIm2rdMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEveGVYc0lxUnlOUTh0Q0pqTGlTX1NXa2liYXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWbkIAwQA
WbkMAwQAXbnWAwQAbUh6AwQCuR7IMA0GCSqGSIb3DQEBCwUAA4IBAQAG13bBR2Ud
VWAMKg9mmm97uqSTcI1il+/AZXt5V8S3GXCxzKwIh9lE3pujH2Gq9xX8WPIWnfqM
SbBPH9FRFuXLZc1bhYcHUOCk7PeTBxynGGLuj2+hL0zDK88DZmlTl1n2/azG2t7d
qrkFjbAm0+RDHnhT0f/JOXaHAMW8yY+7rX/ceJL1PUp25Xj9/ElzsELQvvjYI9DI
CGzjdTJv1Vqz2iw0kLsonLE4AAKimnFlZlqd60Uce5+jrzuveoCoMaFNQt++/Lqp
ZcvyaidUKXScZrDIDhLZ4QY4p14Z/Em1ggmaf9Via1unJJMT43HSS4VryABLsuiY
D9IRTJShtjlS
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:41:39 2025 by rpki-client