Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/xnla-gkpcBUVPYOVIJpYOBhiVYg.roa
File: xnla-gkpcBUVPYOVIJpYOBhiVYg.roa (raw, json)
Hash identifier: b4AvHdZr9tHfuvWsxEIi1RycV3mf4QfdrLXsAIHWdc0=
Subject key identifier: C6:79:5A:FA:09:29:70:15:15:3D:83:95:20:9A:58:38:18:62:55:88
Certificate issuer: /CN=23accae620e9e49f1ab69a1e6979c288bc0136ba
Certificate serial: C8E958
Authority key identifier: 23:AC:CA:E6:20:E9:E4:9F:1A:B6:9A:1E:69:79:C2:88:BC:01:36:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6zK5iDp5J8atpoeaXnCiLwBNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/xnla-gkpcBUVPYOVIJpYOBhiVYg.roa
Signing time: Sat 01 Jan 2022 12:58:39 +0000
ROA not before: Sat 01 Jan 2022 12:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41626
IP address blocks: 86.111.224.0/22 maxlen: 22
86.111.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13166936 (0xc8e958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23accae620e9e49f1ab69a1e6979c288bc0136ba
Validity
Not Before: Jan 1 12:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6795afa09297015153d8395209a583818625588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:08:34:3b:1a:d3:20:f0:8d:af:77:09:59:
f0:bc:39:e1:ef:66:35:8d:58:7a:b0:0a:f9:4d:9a:
07:c4:29:79:8c:f6:3d:39:62:ea:4a:bb:01:1a:b7:
be:e9:ab:1c:eb:06:7c:15:95:78:42:ea:2f:2f:a9:
fe:78:83:a2:ea:97:98:38:92:09:35:fe:61:4f:4e:
90:e2:c8:d9:4e:43:e1:5e:56:44:c5:79:ae:ea:8a:
46:08:ce:73:ef:6a:01:94:bd:44:87:93:0a:f8:6a:
7f:5b:c8:aa:3d:ec:f4:f1:aa:11:89:da:3e:7c:94:
a3:d5:d7:f7:a0:ea:8b:d0:51:97:c3:31:62:7f:1b:
c9:a5:85:dd:e0:b5:71:78:08:dd:76:f1:5d:17:0f:
8d:93:04:d2:e3:6f:ba:da:5c:2b:58:4b:fb:23:18:
f7:b7:ed:bf:91:b2:04:fa:84:19:72:84:e7:f1:df:
fd:af:95:c3:1f:b7:d8:8e:e7:6e:22:be:0a:cd:07:
e2:a8:f5:bf:a4:b9:dd:c8:51:22:cc:1f:05:ce:c7:
0f:7a:8e:ea:47:db:83:45:3c:cb:cf:26:66:90:75:
0e:bd:24:4d:10:62:f3:c1:45:66:d0:ca:a5:f5:d9:
75:ec:0d:76:74:15:af:cd:ef:02:93:6b:f4:ed:76:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:79:5A:FA:09:29:70:15:15:3D:83:95:20:9A:58:38:18:62:55:88
X509v3 Authority Key Identifier:
keyid:23:AC:CA:E6:20:E9:E4:9F:1A:B6:9A:1E:69:79:C2:88:BC:01:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6zK5iDp5J8atpoeaXnCiLwBNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/xnla-gkpcBUVPYOVIJpYOBhiVYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/I6zK5iDp5J8atpoeaXnCiLwBNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.224.0/22
86.111.230.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:be:c1:c4:f0:fc:d1:a4:dd:b8:ce:80:a3:f0:c6:02:15:f8:
fe:f5:60:b5:4e:62:da:82:50:0b:1f:07:c2:5e:47:3b:00:5a:
dc:57:ce:48:aa:c3:59:cf:88:53:97:7a:f7:0b:ac:d5:63:31:
c1:fe:09:c2:e2:bd:c9:e4:64:08:b6:9a:08:c9:aa:92:8a:f6:
2d:c6:a1:5e:7e:5a:08:d7:0c:10:00:21:fc:dd:ef:ef:0a:e5:
8d:1f:2f:19:a8:b9:b9:9e:12:65:4c:37:8c:86:0f:40:00:77:
12:4a:50:46:f8:41:07:57:f3:f7:0a:a6:48:31:19:fa:6e:c8:
91:3d:c2:79:08:16:4a:c3:3e:93:b1:85:93:81:ea:04:cd:fb:
41:bf:d6:35:22:58:bd:89:2b:08:69:67:08:df:e7:4e:44:90:
59:85:f8:ca:25:de:76:b8:4b:d4:be:4d:78:6e:35:3e:f5:cb:
9f:f4:3c:c6:c0:47:83:9f:7d:66:27:14:f8:31:8f:5a:68:ff:
92:a9:7a:b7:61:55:98:1e:40:ae:e2:1c:9b:4f:eb:e3:eb:95:
da:2a:c3:a1:13:bc:a3:5d:30:14:11:ed:08:28:f9:a3:ff:db:
a0:52:af:ea:ba:4d:60:c4:4c:63:43:66:ba:78:53:49:4e:6a:
9e:6c:13:1a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAMjpWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
M2FjY2FlNjIwZTllNDlmMWFiNjlhMWU2OTc5YzI4OGJjMDEzNmJhMB4XDTIyMDEw
MTEyNTgzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzY3OTVhZmEwOTI5
NzAxNTE1M2Q4Mzk1MjA5YTU4MzgxODYyNTU4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMSXCDQ7GtMg8I2vdwlZ8Lw54e9mNY1YerAK+U2aB8QpeYz2
PTli6kq7ARq3vumrHOsGfBWVeELqLy+p/niDouqXmDiSCTX+YU9OkOLI2U5D4V5W
RMV5ruqKRgjOc+9qAZS9RIeTCvhqf1vIqj3s9PGqEYnaPnyUo9XX96Dqi9BRl8Mx
Yn8byaWF3eC1cXgI3XbxXRcPjZME0uNvutpcK1hL+yMY97ftv5GyBPqEGXKE5/Hf
/a+Vwx+32I7nbiK+Cs0H4qj1v6S53chRIswfBc7HD3qO6kfbg0U8y88mZpB1Dr0k
TRBi88FFZtDKpfXZdewNdnQVr83vApNr9O12ihMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTGeVr6CSlwFRU9g5Ugmlg4GGJViDAfBgNVHSMEGDAWgBQjrMrmIOnknxq2
mh5pecKIvAE2ujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0k2eks1aURwNUo4YXRwb2VhWG5DaUx3Qk5yby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvYjgwNzBkLWI1OTgtNDQ0MC1iNDI0LTExNjJmMDI3MjE4Zi8x
L3hubGEtZ2twY0JVVlBZT1ZJSnBZT0JoaVZZZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
YjgwNzBkLWI1OTgtNDQ0MC1iNDI0LTExNjJmMDI3MjE4Zi8xL0k2eks1aURwNUo4
YXRwb2VhWG5DaUx3Qk5yby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlZv4AMEAVZv5jANBgkqhkiG9w0B
AQsFAAOCAQEAXb7BxPD80aTduM6Ao/DGAhX4/vVgtU5i2oJQCx8Hwl5HOwBa3FfO
SKrDWc+IU5d69wus1WMxwf4JwuK9yeRkCLaaCMmqkor2LcahXn5aCNcMEAAh/N3v
7wrljR8vGai5uZ4SZUw3jIYPQAB3EkpQRvhBB1fz9wqmSDEZ+m7IkT3CeQgWSsM+
k7GFk4HqBM37Qb/WNSJYvYkrCGlnCN/nTkSQWYX4yiXedrhL1L5NeG41PvXLn/Q8
xsBHg599ZicU+DGPWmj/kql6t2FVmB5AruIcm0/r4+uV2irDoRO8o10wFBHtCCj5
o//boFKv6rpNYMRMY0NmunhTSU5qnmwTGg==
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:08:53 2025 by rpki-client