Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa
File: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (raw, json)
Hash identifier: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=
Subject key identifier: C6:69:76:75:C0:96:5C:A0:1A:16:C0:6D:30:CB:45:9C:E2:9D:3A:E4
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019424B33AECBE3FF7F1D6506A27451F7DC5
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa
Signing time: Thu 02 Jan 2025 01:48:33 +0000
ROA not before: Thu 02 Jan 2025 01:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5588
IP address blocks: 62.29.128.0/17 maxlen: 17
212.38.192.0/19 maxlen: 19
212.203.128.0/17 maxlen: 17
213.218.96.0/20 maxlen: 20
213.218.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:3a:ec:be:3f:f7:f1:d6:50:6a:27:45:1f:7d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Jan 2 01:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6697675c0965ca01a16c06d30cb459ce29d3ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:88:00:74:e4:65:2b:a7:2a:84:ac:c4:27:
32:a5:08:38:d3:cd:21:f9:4b:5c:a2:9d:43:d9:2a:
96:83:24:30:81:f5:39:8f:a6:4c:62:38:bf:11:89:
33:2e:3b:78:1d:37:b8:83:f4:f6:3b:a1:fd:e5:f9:
f3:a4:bf:21:d4:27:dc:75:1c:54:d7:1f:4c:68:79:
76:98:4c:32:c3:d4:d6:b8:8f:32:35:0f:38:87:4c:
45:2a:32:19:f2:2f:78:78:1d:41:13:94:06:8c:ce:
ce:0f:74:d3:b1:b5:e3:c9:15:90:3d:3c:08:de:be:
fe:eb:1a:9f:8b:d9:2d:b9:c4:69:64:67:6d:47:aa:
95:58:0c:99:5b:91:cc:b4:60:6e:95:14:a7:26:09:
30:9c:f2:b2:a9:06:96:a1:be:9c:76:18:10:c2:f7:
45:a4:9b:6b:ed:47:1b:c6:bb:1c:69:b1:d0:9e:76:
05:e3:41:d5:54:4f:11:82:5d:83:7f:09:43:25:71:
e2:b5:c4:8d:7b:f7:89:7a:31:fd:5f:b6:4a:22:62:
c6:e0:be:13:ac:e6:2c:36:75:96:ec:73:dd:59:23:
ab:71:8b:e5:51:9b:0b:1a:59:47:15:7a:c4:15:59:
65:d3:f1:88:86:d2:f7:22:cd:08:a0:11:9c:c0:0e:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:69:76:75:C0:96:5C:A0:1A:16:C0:6D:30:CB:45:9C:E2:9D:3A:E4
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.29.128.0/17
212.38.192.0/19
212.203.128.0/17
213.218.96.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:8d:41:cc:fe:78:1e:41:5f:16:b2:48:8d:b6:a0:e3:05:9e:
03:dc:42:62:75:de:8a:98:79:87:2b:53:40:ac:2b:28:3f:35:
c8:00:c2:41:2f:f4:a1:b2:64:9d:44:48:e2:bf:62:b6:61:07:
8a:76:0d:a5:8d:64:49:dc:44:39:ce:b3:70:fd:07:1a:5f:64:
69:81:7c:26:b1:67:a9:ee:5b:38:1d:8e:17:07:0f:14:6b:c5:
34:de:09:2e:f7:21:3c:e4:87:e5:34:20:5c:69:29:00:67:a5:
ae:d4:91:28:26:8f:45:85:f8:33:a1:ba:cf:5b:38:5e:fe:3e:
34:78:48:0d:33:69:2b:58:06:b9:ed:3c:2e:ef:06:ce:a2:80:
3c:7f:db:4d:37:b8:60:12:28:42:92:72:31:19:c4:66:17:50:
60:f8:d2:35:68:71:bf:04:ba:36:07:e7:e1:02:70:55:64:0f:
14:d4:b0:e7:70:65:5f:2b:ec:57:db:31:41:a4:de:59:ea:6e:
b7:9b:b8:f1:04:86:58:7b:1f:11:bc:e9:01:e1:ba:ff:44:e8:
cd:fd:76:32:65:01:98:df:e3:75:84:80:ca:22:1e:ec:d9:4d:
23:ce:2f:05:1d:df:24:c7:9f:85:73:9b:f3:20:41:df:e8:9d:
93:0b:59:c1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQkszrsvj/38dZQaidFH33FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMGJlOGU0OGRiYTA3ZGYyMTcxMTc0NWI4NjllMzkxMWNl
OThlMjAwHhcNMjUwMTAyMDE0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjY5NzY3NWMwOTY1Y2EwMWExNmMwNmQzMGNiNDU5Y2UyOWQzYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe6IAHTkZSunKoSsxCcypQg4080h
+Utcop1D2SqWgyQwgfU5j6ZMYji/EYkzLjt4HTe4g/T2O6H95fnzpL8h1CfcdRxU
1x9MaHl2mEwyw9TWuI8yNQ84h0xFKjIZ8i94eB1BE5QGjM7OD3TTsbXjyRWQPTwI
3r7+6xqfi9ktucRpZGdtR6qVWAyZW5HMtGBulRSnJgkwnPKyqQaWob6cdhgQwvdF
pJtr7UcbxrscabHQnnYF40HVVE8Rgl2DfwlDJXHitcSNe/eJejH9X7ZKImLG4L4T
rOYsNnWW7HPdWSOrcYvlUZsLGllHFXrEFVll0/GIhtL3Is0IoBGcwA6KcQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMZpdnXAllygGhbAbTDLRZzinTrkMB8GA1UdIwQY
MBaAFD4L6OSNugffIXEXRbhp45Ec6Y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5Zjgt
MjBmOWYwZGJmNDU4LzEveG1sMmRjQ1dYS0FhRnNCdE1NdEZuT0tkT3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5ZjgtMjBmOWYwZGJmNDU4
LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQHPh2AAwQF
1CbAAwQH1MuAAwQF1dpgMA0GCSqGSIb3DQEBCwUAA4IBAQAPjUHM/ngeQV8WskiN
tqDjBZ4D3EJidd6KmHmHK1NArCsoPzXIAMJBL/ShsmSdREjiv2K2YQeKdg2ljWRJ
3EQ5zrNw/QcaX2RpgXwmsWep7ls4HY4XBw8Ua8U03gku9yE85IflNCBcaSkAZ6Wu
1JEoJo9FhfgzobrPWzhe/j40eEgNM2krWAa57Twu7wbOooA8f9tNN7hgEihCknIx
GcRmF1Bg+NI1aHG/BLo2B+fhAnBVZA8U1LDncGVfK+xX2zFBpN5Z6m63m7jxBIZY
ex8RvOkB4br/ROjN/XYyZQGY3+N1hIDKIh7s2U0jzi8FHd8kx5+Fc5vzIEHf6J2T
C1nB
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:16:45 2025 by rpki-client