Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/xnIhO_V6znbwtZB6V8eJPnLqQCs.roa
File: xnIhO_V6znbwtZB6V8eJPnLqQCs.roa (raw, json)
Hash identifier: IRu7nrDNePUaPeVpuQbPMik1WlqyPoJDWiEI/S8/35Y=
Subject key identifier: C6:72:21:3B:F5:7A:CE:76:F0:B5:90:7A:57:C7:89:3E:72:EA:40:2B
Certificate issuer: /CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Certificate serial: 0BAB4A05
Authority key identifier: 0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/xnIhO_V6znbwtZB6V8eJPnLqQCs.roa
Signing time: Sat 01 Jan 2022 15:57:56 +0000
ROA not before: Sat 01 Jan 2022 15:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8987
IP address blocks: 178.236.0.0/20 maxlen: 24
176.32.64.0/18 maxlen: 24
176.34.0.0/16 maxlen: 24
79.125.0.0/17 maxlen: 24
87.238.80.0/21 maxlen: 24
185.48.120.0/22 maxlen: 24
46.51.128.0/17 maxlen: 24
46.137.0.0/16 maxlen: 24
2a05:d000::/25 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195774981 (0xbab4a05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Validity
Not Before: Jan 1 15:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c672213bf57ace76f0b5907a57c7893e72ea402b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:c7:f4:2f:08:60:3d:22:fa:90:ea:f9:1c:
bf:f3:21:36:f7:6b:49:f9:21:fb:06:1f:7f:55:92:
2c:55:ec:14:93:d7:87:6a:47:76:a8:ce:1e:71:0c:
cd:d1:c7:47:63:56:80:ca:40:ba:b6:cd:59:1b:97:
87:4d:82:0f:1a:df:a7:17:8d:35:00:ee:22:e4:34:
b2:3a:42:5b:33:1a:b8:46:8b:de:cc:a7:7f:9b:84:
f5:71:7f:e1:83:33:ed:6e:6c:7e:cc:76:fa:32:fb:
7f:15:90:90:94:36:01:16:61:6c:fd:e3:63:3d:90:
c9:5c:80:a3:02:46:4f:87:d4:11:37:10:4f:93:c3:
10:e1:2f:41:17:a9:c5:62:dd:9d:fe:61:a6:01:72:
ad:5a:ce:73:06:43:9b:8a:0b:9e:db:7d:37:46:84:
16:fc:aa:74:ad:2a:ef:b2:26:6c:4e:09:37:14:68:
c5:a7:39:66:44:c6:fb:d6:1e:7f:00:f5:ca:0d:76:
a2:a9:ac:4e:a4:16:f6:0a:c1:a2:1b:8b:76:0c:5f:
72:d6:fb:9f:74:10:fd:fa:cd:f7:6b:7f:98:78:d0:
12:79:06:bd:2f:df:c4:d7:ed:19:8b:51:cb:e5:1d:
1b:05:5d:ec:97:9e:88:84:97:23:11:e9:85:5e:57:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:21:3B:F5:7A:CE:76:F0:B5:90:7A:57:C7:89:3E:72:EA:40:2B
X509v3 Authority Key Identifier:
keyid:0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/xnIhO_V6znbwtZB6V8eJPnLqQCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/Dbz_q_X6vIvLBEV8HqbMZl9idA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
46.137.0.0/16
79.125.0.0/17
87.238.80.0/21
176.32.64.0/18
176.34.0.0/16
178.236.0.0/20
185.48.120.0/22
IPv6:
2a05:d000::/25
Signature Algorithm: sha256WithRSAEncryption
ca:68:78:45:45:76:c7:9a:aa:91:d4:ba:b0:58:fb:ff:ef:1c:
d1:50:40:8c:fb:f0:6f:b0:11:9f:f6:53:5b:3c:55:29:37:b7:
82:ea:e6:ff:fd:4d:f9:2e:12:98:4d:5f:a6:a4:93:99:12:cb:
92:6c:da:07:ac:4a:84:d8:b4:9d:ac:84:fa:b3:6f:18:a4:ce:
15:84:d5:01:81:c3:73:ae:ea:87:fc:89:63:83:82:be:48:45:
6d:e9:9c:73:63:f3:13:e6:00:39:af:3a:e1:48:c1:2d:19:63:
0c:8f:9b:8a:60:52:c2:7e:0e:45:af:64:d3:ba:59:8a:fe:1d:
8a:67:99:f2:43:4b:68:5b:0b:97:3b:56:5d:a3:cd:93:ab:36:
38:aa:5b:d7:7b:73:81:e3:90:38:e2:41:8a:fd:3a:56:0f:ef:
47:99:0d:09:e0:e1:d2:f0:e8:ab:91:20:1e:07:5b:25:91:73:
4b:af:8d:41:55:cc:24:0c:3b:57:dd:34:42:03:e8:cf:28:10:
41:b8:78:8e:2b:32:f3:c9:21:d9:ca:fb:25:05:1c:4d:ca:11:
fc:ec:dd:eb:11:f6:77:c4:96:cb:6b:e7:42:ae:16:d0:04:c6:
69:07:95:7a:f8:8b:25:87:4c:33:14:fb:1f:13:8e:a0:cd:31:
c9:22:ba:45
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIEC6tKBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZGJjZmZhYmY1ZmFiYzhiY2IwNDQ1N2MxZWE2Y2M2NjVmNjI3NDBmMB4XDTIyMDEw
MTE1NTc1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzY3MjIxM2JmNTdh
Y2U3NmYwYjU5MDdhNTdjNzg5M2U3MmVhNDAyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMIux/QvCGA9IvqQ6vkcv/MhNvdrSfkh+wYff1WSLFXsFJPX
h2pHdqjOHnEMzdHHR2NWgMpAurbNWRuXh02CDxrfpxeNNQDuIuQ0sjpCWzMauEaL
3synf5uE9XF/4YMz7W5sfsx2+jL7fxWQkJQ2ARZhbP3jYz2QyVyAowJGT4fUETcQ
T5PDEOEvQRepxWLdnf5hpgFyrVrOcwZDm4oLntt9N0aEFvyqdK0q77ImbE4JNxRo
xac5ZkTG+9YefwD1yg12oqmsTqQW9grBohuLdgxfctb7n3QQ/frN92t/mHjQEnkG
vS/fxNftGYtRy+UdGwVd7JeeiISXIxHphV5XO48CAwEAAaOCAkAwggI8MB0GA1Ud
DgQWBBTGciE79XrOdvC1kHpXx4k+cupAKzAfBgNVHSMEGDAWgBQNvP+r9fq8i8sE
RXwepsxmX2J0DzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Riel9xX1g2dkl2TEJFVjhIcWJNWmw5aWRBOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvMWU2NTYxLTM5NWItNGJkZS1iY2QxLWMwMmQ1ODVjZmZjYS8x
L3huSWhPX1Y2em5id3RaQjZWOGVKUG5McVFDcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
MWU2NTYxLTM5NWItNGJkZS1iY2QxLWMwMmQ1ODVjZmZjYS8xL0Riel9xX1g2dkl2
TEJFVjhIcWJNWmw5aWRBOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBW
BggrBgEFBQcBBwEB/wRHMEUwNAQCAAEwLgMEBy4zgAMDAC6JAwQHT30AAwQDV+5Q
AwQGsCBAAwMAsCIDBASy7AADBAK5MHgwDQQCAAIwBwMFByoF0AAwDQYJKoZIhvcN
AQELBQADggEBAMpoeEVFdseaqpHUurBY+//vHNFQQIz78G+wEZ/2U1s8VSk3t4Lq
5v/9TfkuEphNX6akk5kSy5Js2gesSoTYtJ2shPqzbxikzhWE1QGBw3Ou6of8iWOD
gr5IRW3pnHNj8xPmADmvOuFIwS0ZYwyPm4pgUsJ+DkWvZNO6WYr+HYpnmfJDS2hb
C5c7Vl2jzZOrNjiqW9d7c4HjkDjiQYr9OlYP70eZDQng4dLw6KuRIB4HWyWRc0uv
jUFVzCQMO1fdNEID6M8oEEG4eI4rMvPJIdnK+yUFHE3KEfzs3esR9nfElstr50Ku
FtAExmkHlXr4iyWHTDMU+x8TjqDNMckiukU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:23 2024 by rpki-client on console-fra.rpki-client.org