Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/XG_KGn5rYzAdXtsWqWU5hquWcd0.roa
File: XG_KGn5rYzAdXtsWqWU5hquWcd0.roa (raw, json)
Hash identifier: i+zuL0/mMG3R+SOWU8hhpW6Zl1Prc/R0YV53Q1hvfl8=
Subject key identifier: 5C:6F:CA:1A:7E:6B:63:30:1D:5E:DB:16:A9:65:39:86:AB:96:71:DD
Certificate issuer: /CN=9eb5e717cef9f6644cd8849b8a18d41dc74f408a
Certificate serial: 363E458A
Authority key identifier: 9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrXnF8759mRM2ISbihjUHcdPQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/XG_KGn5rYzAdXtsWqWU5hquWcd0.roa
Signing time: Wed 04 May 2022 14:44:57 +0000
ROA not before: Wed 04 May 2022 14:44:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30781
IP address blocks: 46.231.216.0/21 maxlen: 24
185.146.220.0/22 maxlen: 24
88.212.144.0/21 maxlen: 24
88.212.152.0/22 maxlen: 24
212.85.229.0/24 maxlen: 24
212.85.230.0/23 maxlen: 23
31.172.160.0/22 maxlen: 24
185.4.60.0/23 maxlen: 24
185.4.60.0/22 maxlen: 24
185.91.220.0/22 maxlen: 24
185.91.224.0/22 maxlen: 24
82.196.24.0/21 maxlen: 24
82.196.25.0/24 maxlen: 24
82.196.27.0/24 maxlen: 24
88.202.236.0/22 maxlen: 24
212.18.242.0/24 maxlen: 24
212.18.240.0/21 maxlen: 24
82.163.36.0/22 maxlen: 24
2a00:78c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910050698 (0x363e458a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb5e717cef9f6644cd8849b8a18d41dc74f408a
Validity
Not Before: May 4 14:44:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c6fca1a7e6b63301d5edb16a9653986ab9671dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:ce:15:9d:68:d5:20:0a:ae:f1:76:ab:5e:
bb:76:a3:f2:1c:f7:36:bc:bc:18:b9:3e:e5:d9:d5:
bf:a9:e5:21:ee:a6:e7:8f:af:06:d2:f3:71:00:b3:
89:01:34:50:4a:64:03:98:13:1c:0c:f4:57:5c:bf:
4f:0c:cb:08:8b:6c:02:54:4f:cd:7f:c2:f7:be:37:
3e:b2:44:22:a8:4c:c6:39:fc:31:1a:38:a8:f8:0e:
33:2c:ef:92:f8:a0:93:63:3c:7b:6f:87:85:f3:b5:
ee:1c:fb:a6:59:c1:92:1c:ca:c6:02:9c:2d:d6:b7:
05:a7:1e:a6:b4:6a:05:83:43:e7:64:c0:12:1d:ed:
fd:1a:9e:9f:a8:f3:6a:c7:6b:37:b4:44:b6:73:fe:
fb:e9:b8:4d:f6:fb:b4:85:21:91:d4:d2:81:5b:2b:
2a:45:2c:bb:1b:88:e5:55:d9:72:ea:86:15:17:50:
95:da:21:b9:31:e4:2e:86:57:a7:b5:6b:9b:98:72:
e4:85:0f:c6:d8:20:e0:d2:e3:37:f5:1e:56:cc:18:
d7:ff:e7:4b:72:b7:8c:81:05:ac:03:65:c2:86:cc:
e1:c6:d3:3a:07:f1:56:da:0e:9b:09:42:35:13:d7:
fa:40:a7:92:fc:11:11:e9:37:2c:72:9f:ea:25:1d:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6F:CA:1A:7E:6B:63:30:1D:5E:DB:16:A9:65:39:86:AB:96:71:DD
X509v3 Authority Key Identifier:
keyid:9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrXnF8759mRM2ISbihjUHcdPQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/XG_KGn5rYzAdXtsWqWU5hquWcd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/nrXnF8759mRM2ISbihjUHcdPQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.160.0/22
46.231.216.0/21
82.163.36.0/22
82.196.24.0/21
88.202.236.0/22
88.212.144.0-88.212.155.255
185.4.60.0/22
185.91.220.0-185.91.227.255
185.146.220.0/22
212.18.240.0/21
212.85.229.0-212.85.231.255
IPv6:
2a00:78c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:72:61:ff:f7:68:eb:3b:d8:70:c4:46:ac:ae:b1:80:b5:98:
1b:bb:d3:3a:e3:f8:61:69:b7:79:56:c2:a1:98:3c:b5:38:fa:
08:42:e9:b1:0a:50:56:67:0f:d8:c5:f4:f1:42:f7:db:29:0a:
5b:5e:a7:bf:f0:10:20:06:86:97:fd:24:62:f8:a7:18:eb:71:
55:76:0d:e4:7c:00:22:c2:52:29:4a:e4:e7:85:84:fc:77:2d:
42:4f:df:67:c7:b2:80:aa:98:62:cb:67:12:d1:6c:50:3a:a5:
ab:7e:d4:65:e7:40:9f:80:b8:50:2f:ad:34:60:0f:18:af:c8:
2e:41:c1:94:8f:62:30:ba:5d:d9:ee:1a:75:01:b8:9a:8b:f9:
46:0d:82:04:66:ba:ef:d6:1a:71:76:cb:72:65:c3:96:54:27:
95:38:4c:06:69:e0:2f:d3:7c:44:28:d8:2c:ad:f8:58:91:ef:
52:ca:b6:ec:0d:e0:9e:0b:bf:79:dd:5b:66:a3:00:47:df:49:
81:56:98:de:65:c3:24:e5:c1:28:b7:55:15:ca:b1:a2:25:3f:
b8:5a:25:9b:f8:40:c3:ab:32:61:9c:4f:0c:fd:0e:67:c2:1e:
cd:71:3f:26:cc:3b:bd:30:68:a7:e2:04:a3:3f:1b:ef:65:9d:
d9:0c:f5:15
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIENj5FijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZWI1ZTcxN2NlZjlmNjY0NGNkODg0OWI4YTE4ZDQxZGM3NGY0MDhhMB4XDTIyMDUw
NDE0NDQ1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWM2ZmNhMWE3ZTZi
NjMzMDFkNWVkYjE2YTk2NTM5ODZhYjk2NzFkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+SzhWdaNUgCq7xdqteu3aj8hz3Nry8GLk+5dnVv6nlIe6m
54+vBtLzcQCziQE0UEpkA5gTHAz0V1y/TwzLCItsAlRPzX/C9743PrJEIqhMxjn8
MRo4qPgOMyzvkvigk2M8e2+HhfO17hz7plnBkhzKxgKcLda3BaceprRqBYND52TA
Eh3t/Rqen6jzasdrN7REtnP+++m4Tfb7tIUhkdTSgVsrKkUsuxuI5VXZcuqGFRdQ
ldohuTHkLoZXp7Vrm5hy5IUPxtgg4NLjN/UeVswY1//nS3K3jIEFrANlwobM4cbT
OgfxVtoOmwlCNRPX+kCnkvwREek3LHKf6iUdU3sCAwEAAaOCAm0wggJpMB0GA1Ud
DgQWBBRcb8oafmtjMB1e2xapZTmGq5Zx3TAfBgNVHSMEGDAWgBSetecXzvn2ZEzY
hJuKGNQdx09AijAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25yWG5GODc1OW1STTJJU2JpaGpVSGNkUFFJby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvYjg5MzJhLTA4NzktNDc1MS05ODhjLTZlZTNmNTAwN2VhYi8x
L1hHX0tHbjVyWXpBZFh0c1dxV1U1aHF1V2NkMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
Yjg5MzJhLTA4NzktNDc1MS05ODhjLTZlZTNmNTAwN2VhYi8xL25yWG5GODc1OW1S
TTJJU2JpaGpVSGNkUFFJby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
ggYIKwYBBQUHAQcBAf8EczBxMGAEAgABMFoDBAIfrKADBAMu59gDBAJSoyQDBANS
xBgDBAJYyuwwDAMEBFjUkAMEAljUmAMEArkEPDAMAwQCuVvcAwQCuVvgAwQCuZLc
AwQD1BLwMAwDBADUVeUDBAPUVeAwDQQCAAIwBwMFAyoAeMAwDQYJKoZIhvcNAQEL
BQADggEBABByYf/3aOs72HDERqyusYC1mBu70zrj+GFpt3lWwqGYPLU4+ghC6bEK
UFZnD9jF9PFC99spCltep7/wECAGhpf9JGL4pxjrcVV2DeR8ACLCUilK5OeFhPx3
LUJP32fHsoCqmGLLZxLRbFA6pat+1GXnQJ+AuFAvrTRgDxivyC5BwZSPYjC6Xdnu
GnUBuJqL+UYNggRmuu/WGnF2y3Jlw5ZUJ5U4TAZp4C/TfEQo2Cyt+FiR71LKtuwN
4J4Lv3ndW2ajAEffSYFWmN5lwyTlwSi3VRXKsaIlP7haJZv4QMOrMmGcTwz9DmfC
Hs1xPybMO70waKfiBKM/G+9lndkM9RU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:22 2024 by rpki-client on console-fra.rpki-client.org