Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/xwfx9ufuOsgm1siM6EMT-MYBGNE.roa
File: xwfx9ufuOsgm1siM6EMT-MYBGNE.roa (raw, json)
Hash identifier: wSWa8+rRDAc3UHer8Oh2qjsoVDDzVbU+fUyH1NYxiK0=
Subject key identifier: C7:07:F1:F6:E7:EE:3A:C8:26:D6:C8:8C:E8:43:13:F8:C6:01:18:D1
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018401EABCBC5EDD79935E086F708D08097D
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/xwfx9ufuOsgm1siM6EMT-MYBGNE.roa
Signing time: Sat 22 Oct 2022 22:57:51 +0000
ROA not before: Sat 22 Oct 2022 22:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.230.0/24 maxlen: 24
45.95.215.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:ea:bc:bc:5e:dd:79:93:5e:08:6f:70:8d:08:09:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Oct 22 22:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c707f1f6e7ee3ac826d6c88ce84313f8c60118d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:f0:27:4a:43:09:71:18:2b:24:1f:a9:c5:
90:e6:d1:40:e6:fb:b6:6d:95:43:5c:7e:83:5e:e4:
d2:31:8b:a2:50:9f:7b:2b:07:ff:a0:a3:13:3f:fd:
84:42:62:1d:80:96:60:df:6c:c2:b0:2c:fd:50:4a:
2d:08:cb:1a:78:3a:a4:1a:64:ad:fb:6c:33:50:83:
75:25:87:e1:b2:c8:e3:f9:71:50:eb:57:56:65:26:
f0:cb:f8:ad:ca:1e:3c:1e:d8:72:68:89:11:c9:0d:
0d:f2:15:50:bd:02:00:e1:0c:38:c7:18:33:89:42:
97:35:5b:d6:e5:65:95:27:5d:62:15:68:13:3c:47:
c6:61:d0:0c:5c:c3:3c:d1:83:4c:40:ee:1f:c0:e1:
65:fe:78:55:8f:96:ad:5d:a1:c3:01:5c:96:c2:82:
b7:22:50:e6:d9:b2:80:95:ca:38:ad:c1:74:44:79:
58:fd:e3:8c:e8:a8:2b:13:29:d9:47:63:cb:11:53:
6a:6e:37:1f:05:d9:74:04:ba:70:f3:93:ab:cb:57:
c8:bd:0f:3c:6b:87:bb:4d:8e:80:3e:44:28:eb:63:
3a:b9:3f:ad:f5:65:db:64:66:6c:ce:6b:20:e7:ac:
6b:76:74:fb:b8:23:55:1d:1b:82:b7:ec:68:f1:86:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:07:F1:F6:E7:EE:3A:C8:26:D6:C8:8C:E8:43:13:F8:C6:01:18:D1
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/xwfx9ufuOsgm1siM6EMT-MYBGNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
45.95.215.0/24
85.209.230.0/24
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:ef:93:fc:a3:c0:0a:ba:90:68:53:d1:d8:8f:6e:59:3a:43:
65:e5:56:ec:fc:a1:0f:70:59:23:91:11:98:b5:28:55:eb:8b:
05:87:3c:0a:fd:77:28:25:de:36:f0:77:b1:fb:dd:f1:a9:04:
9a:aa:f9:46:92:5f:f9:d3:02:a2:36:fd:0a:f6:2d:8e:a7:61:
60:88:28:49:7c:f9:77:42:f6:6f:44:c8:8b:85:de:c5:e2:dd:
95:d7:b6:b4:c8:8a:b3:34:67:07:55:8d:e4:7a:f1:67:b2:d1:
9b:d3:0c:4d:82:e6:70:65:0c:de:ea:67:94:a0:f4:96:13:59:
d0:49:1f:b7:8d:1c:54:86:6a:ad:04:54:d4:c9:cf:b8:93:3b:
b2:ce:4a:d7:e7:54:a5:bb:fc:96:3a:7f:60:a7:50:26:3f:09:
85:55:c4:bc:d8:7f:b8:8a:62:c1:3e:4d:9c:7b:14:38:35:ba:
1c:48:9d:77:d8:52:fe:02:e5:4a:56:92:d7:16:f9:a2:29:cc:
32:88:44:f9:93:27:16:99:5e:fa:3c:09:dc:5d:cf:0b:37:db:
2e:23:22:95:15:d4:d9:51:ce:06:aa:60:a1:b8:85:ca:d8:8f:
cc:d4:79:8a:21:91:3b:5c:ed:34:39:63:72:49:a6:a6:1c:6d:
74:c7:19:6b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYQB6ry8Xt15k14Ib3CNCAl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDAzOTM5OTAxN2ZhMDkzZGM4ZDUwMzc5OWY2Y2E0MDNm
MGJkMDUwHhcNMjIxMDIyMjI1NzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzA3ZjFmNmU3ZWUzYWM4MjZkNmM4OGNlODQzMTNmOGM2MDExOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHjwJ0pDCXEYKyQfqcWQ5tFA5vu2
bZVDXH6DXuTSMYuiUJ97Kwf/oKMTP/2EQmIdgJZg32zCsCz9UEotCMsaeDqkGmSt
+2wzUIN1JYfhssjj+XFQ61dWZSbwy/ityh48HthyaIkRyQ0N8hVQvQIA4Qw4xxgz
iUKXNVvW5WWVJ11iFWgTPEfGYdAMXMM80YNMQO4fwOFl/nhVj5atXaHDAVyWwoK3
IlDm2bKAlco4rcF0RHlY/eOM6KgrEynZR2PLEVNqbjcfBdl0BLpw85Ory1fIvQ88
a4e7TY6APkQo62M6uT+t9WXbZGZszmsg56xrdnT7uCNVHRuCt+xo8YaHQQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMcH8fbn7jrIJtbIjOhDE/jGARjRMB8GA1UdIwQY
MBaAFGJAOTmQF/oJPcjVA3mfbKQD8L0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYt
MzI1OTQ5NmU3YzVmLzEveHdmeDl1ZnVPc2dtMXNpTTZFTVQtTVlCR05FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYtMzI1OTQ5NmU3YzVm
LzEvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAjs8AwQA
LV/XAwQAVdHmAwQBwh/EMA0GCSqGSIb3DQEBCwUAA4IBAQCw75P8o8AKupBoU9HY
j25ZOkNl5Vbs/KEPcFkjkRGYtShV64sFhzwK/XcoJd428Hex+93xqQSaqvlGkl/5
0wKiNv0K9i2Op2FgiChJfPl3QvZvRMiLhd7F4t2V17a0yIqzNGcHVY3kevFnstGb
0wxNguZwZQze6meUoPSWE1nQSR+3jRxUhmqtBFTUyc+4kzuyzkrX51Slu/yWOn9g
p1AmPwmFVcS82H+4imLBPk2cexQ4NbocSJ132FL+AuVKVpLXFvmiKcwyiET5kycW
mV76PAncXc8LN9suIyKVFdTZUc4GqmChuIXK2I/M1HmKIZE7XO00OWNySaamHG10
xxlr
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:58 2025 by rpki-client