Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/CxnZqY6W7GyCne__tebynjswM7Q.roa
File: CxnZqY6W7GyCne__tebynjswM7Q.roa (raw, json)
Hash identifier: eEEfCn1QHZ4P1noZ0wCwdMYjCemGb8zbcydb2TJApOI=
Subject key identifier: 0B:19:D9:A9:8E:96:EC:6C:82:9D:EF:FF:B5:E6:F2:9E:3B:30:33:B4
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D786298FF0C63E34E0B593443D13AC1
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/CxnZqY6W7GyCne__tebynjswM7Q.roa
Signing time: Sun 01 Jan 2023 13:14:43 +0000
ROA not before: Sun 01 Jan 2023 13:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.229.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.215.0/24 maxlen: 24
5.181.187.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:62:98:ff:0c:63:e3:4e:0b:59:34:43:d1:3a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b19d9a98e96ec6c829defffb5e6f29e3b3033b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:2d:fc:bb:93:c6:cf:73:0f:ca:76:af:1a:
1d:d5:c2:bc:1a:df:bc:09:7b:87:40:68:7b:ed:cb:
f1:ef:37:94:30:ef:43:cb:3b:6b:94:ad:4e:b1:eb:
bd:12:e5:7d:72:23:b7:21:e3:51:f8:86:f8:c8:c3:
e4:64:12:c9:ac:5a:f9:e0:d2:36:ae:e2:f7:52:69:
50:cb:c9:5d:2a:71:fe:6b:a2:0a:eb:8f:33:96:d5:
78:e3:0d:04:eb:70:e5:a6:70:12:8d:a0:de:a9:0f:
6a:43:9a:4d:39:42:ea:bb:d6:82:0d:c3:8c:26:6a:
e6:c9:9f:a3:0a:4a:fe:80:f4:d9:33:d3:f8:e5:30:
be:ce:78:d5:c2:c8:06:46:e5:e6:eb:c3:6c:4e:d2:
8d:17:48:ce:bc:40:8f:5f:8a:6d:e8:8f:77:9e:15:
22:90:c8:5e:d2:68:35:3b:9e:0c:f3:d6:1b:3e:9f:
08:87:52:6a:50:16:b9:cb:54:7d:8b:52:83:e4:a8:
d5:d5:f2:53:6e:43:29:2d:3a:62:0d:df:30:71:b8:
31:19:66:55:23:c8:13:30:88:12:18:0a:21:75:a5:
e7:ca:35:a1:d5:2f:a0:13:8e:7a:25:0a:3f:7a:87:
29:4b:1d:ac:d5:42:e9:0c:83:60:b0:21:00:e7:b1:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:19:D9:A9:8E:96:EC:6C:82:9D:EF:FF:B5:E6:F2:9E:3B:30:33:B4
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/CxnZqY6W7GyCne__tebynjswM7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
5.181.187.0/24
45.95.215.0/24
85.209.229.0-85.209.230.255
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:e1:b0:01:a3:34:d5:4f:d1:99:26:79:4d:db:98:a3:d7:98:
a2:03:4f:84:3f:27:42:c8:6b:89:e6:cd:17:36:c0:6e:48:c0:
01:78:67:0b:5f:88:43:af:7c:ea:61:c4:6e:00:17:03:86:ba:
51:d7:d4:48:46:82:31:30:af:1b:3d:05:ba:28:2a:db:b0:ec:
c4:48:9d:9f:9f:96:09:80:27:b5:48:d1:d5:b4:5e:40:fe:be:
c4:2f:2a:11:d8:21:f4:00:88:01:19:d0:93:79:2b:4b:55:c4:
cd:70:12:5c:1c:c8:a7:78:1d:f2:0c:77:45:9c:52:82:89:4e:
04:39:d6:9f:53:98:a0:fe:79:39:6c:b8:73:c9:8f:dc:9f:a4:
23:db:8e:6d:b4:29:42:fb:5f:3d:c0:ec:51:3c:2f:7d:59:63:
17:60:6a:d1:ad:7c:85:a6:48:61:03:ea:01:69:0d:2f:e4:c0:
ca:f0:29:8f:f6:d6:d6:c6:1d:4a:ec:83:73:b7:de:ce:74:1a:
fd:11:7c:10:19:f2:53:12:f1:af:f2:be:79:54:7d:a6:a7:8c:
c0:04:04:b8:53:28:24:54:d6:4b:1d:b4:7b:40:70:0e:74:80:
0f:9a:4f:e1:b8:5e:d1:b0:1f:9d:fc:e2:5f:8e:bb:c2:39:30:
88:da:d2:4d
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVteGKY/wxj404LWTRD0TrBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDAzOTM5OTAxN2ZhMDkzZGM4ZDUwMzc5OWY2Y2E0MDNm
MGJkMDUwHhcNMjMwMTAxMTMxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjE5ZDlhOThlOTZlYzZjODI5ZGVmZmZiNWU2ZjI5ZTNiMzAzM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU4t/LuTxs9zD8p2rxod1cK8Gt+8
CXuHQGh77cvx7zeUMO9DyztrlK1Oseu9EuV9ciO3IeNR+Ib4yMPkZBLJrFr54NI2
ruL3UmlQy8ldKnH+a6IK648zltV44w0E63DlpnASjaDeqQ9qQ5pNOULqu9aCDcOM
JmrmyZ+jCkr+gPTZM9P45TC+znjVwsgGRuXm68NsTtKNF0jOvECPX4pt6I93nhUi
kMhe0mg1O54M89YbPp8Ih1JqUBa5y1R9i1KD5KjV1fJTbkMpLTpiDd8wcbgxGWZV
I8gTMIgSGAohdaXnyjWh1S+gE456JQo/eocpSx2s1ULpDINgsCEA57GFqwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFAsZ2amOluxsgp3v/7Xm8p47MDO0MB8GA1UdIwQY
MBaAFGJAOTmQF/oJPcjVA3mfbKQD8L0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYt
MzI1OTQ5NmU3YzVmLzEvQ3huWnFZNlc3R3lDbmVfX3RlYnluanN3TTdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYtMzI1OTQ5NmU3YzVm
LzEvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAAjs8AwQA
BbW7AwQALV/XMAwDBABV0eUDBABV0eYDBAHCH8QwDQYJKoZIhvcNAQELBQADggEB
AKThsAGjNNVP0ZkmeU3bmKPXmKIDT4Q/J0LIa4nmzRc2wG5IwAF4ZwtfiEOvfOph
xG4AFwOGulHX1EhGgjEwrxs9BbooKtuw7MRInZ+flgmAJ7VI0dW0XkD+vsQvKhHY
IfQAiAEZ0JN5K0tVxM1wElwcyKd4HfIMd0WcUoKJTgQ51p9TmKD+eTlsuHPJj9yf
pCPbjm20KUL7Xz3A7FE8L31ZYxdgatGtfIWmSGED6gFpDS/kwMrwKY/21tbGHUrs
g3O33s50Gv0RfBAZ8lMS8a/yvnlUfaanjMAEBLhTKCRU1ksdtHtAcA50gA+aT+G4
XtGwH5384l+Ou8I5MIja0k0=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:11:08 2025 by rpki-client