Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xfvBuYd7dJKAqjcb2O88YB-EZug.roa
File: xfvBuYd7dJKAqjcb2O88YB-EZug.roa (raw, json)
Hash identifier: YDWiOVaWOgxxVMp/JR7n/tcSbMcHgVuIrl0khCPidc4=
Subject key identifier: C5:FB:C1:B9:87:7B:74:92:80:AA:37:1B:D8:EF:3C:60:1F:84:66:E8
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194702C1BDCC756F56B90A512F48D3F69FA
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xfvBuYd7dJKAqjcb2O88YB-EZug.roa
Signing time: Thu 16 Jan 2025 17:32:06 +0000
ROA not before: Thu 16 Jan 2025 17:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.150.53.0/24 maxlen: 24
95.214.177.0/24 maxlen: 24
185.177.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:2c:1b:dc:c7:56:f5:6b:90:a5:12:f4:8d:3f:69:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 16 17:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5fbc1b9877b749280aa371bd8ef3c601f8466e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:6b:94:50:38:42:9e:67:18:7f:bb:58:58:
2e:0f:9e:95:c0:99:ea:c0:5d:36:10:e8:6c:e8:6f:
88:35:7c:8c:1e:bf:f7:f3:e3:a7:bd:f8:e8:0f:35:
32:85:67:8a:84:6f:29:de:3a:f1:3a:09:7b:c8:f7:
f4:1a:e0:3c:c2:77:7e:e0:6e:67:9c:f4:d1:c9:b4:
09:3f:40:bb:ed:b9:43:2a:87:f7:07:e7:3c:6b:81:
80:e2:65:c9:22:ab:e7:76:5d:c9:e9:2c:d6:5c:99:
e5:a0:a5:97:1a:dd:87:28:9f:5c:d4:ee:5d:18:f2:
39:7e:80:0b:bd:bb:15:53:55:b9:f4:59:9b:a0:2b:
17:51:02:5a:04:b8:e8:a6:45:37:d4:75:5a:1d:d8:
12:13:fc:13:0e:30:0e:06:2a:5e:78:2b:92:88:c9:
ca:76:9e:0e:1f:35:6b:2a:62:04:c9:99:cc:56:dd:
c8:b1:6b:db:68:ce:49:dd:0a:2a:f5:1b:93:f7:9f:
54:a2:20:a5:b9:b1:77:c5:3b:4f:6f:f0:d6:04:92:
78:5c:a4:d7:ca:30:30:d5:50:2c:88:c3:ad:9b:8d:
2d:94:60:73:86:ce:4f:1d:6e:28:92:46:55:9b:29:
e5:f5:e3:bb:aa:ce:ee:c4:f2:fa:3a:de:9a:4b:7e:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:C1:B9:87:7B:74:92:80:AA:37:1B:D8:EF:3C:60:1F:84:66:E8
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xfvBuYd7dJKAqjcb2O88YB-EZug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
95.214.177.0/24
185.177.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1f:75:b5:05:11:5a:25:33:83:b8:a7:44:60:7b:27:14:c1:
04:21:48:fb:52:c8:c1:16:51:1c:bd:3d:3e:e6:75:0b:99:43:
89:ed:02:cc:f9:b1:8c:f1:06:9f:3e:27:38:46:e3:c6:72:47:
10:4d:4e:cc:56:60:e3:0c:4e:27:67:a2:6e:0a:13:6d:e1:d1:
53:37:5c:f5:47:0f:38:37:4f:7c:ab:eb:08:09:20:2d:cc:9c:
8b:28:d6:94:7c:bf:9a:60:94:ed:8f:a1:ce:36:48:ea:01:34:
95:41:3d:42:46:c6:5b:78:c8:2e:db:ae:42:cd:d7:af:2c:73:
ab:2b:68:d5:d8:05:12:c5:2e:75:c6:d1:7b:00:50:95:1e:56:
63:be:01:bf:ad:47:6f:61:59:73:5b:e0:28:b0:1c:ef:dd:90:
b0:5c:ed:5b:fd:e7:d9:96:cb:ca:67:4d:00:58:b2:54:6c:bc:
cb:fd:52:2b:df:b8:97:fa:e0:ad:dc:57:4f:a0:2b:d6:c1:60:
0f:ad:30:c5:c6:94:88:7a:f8:a1:af:05:d5:bf:69:e8:eb:88:
fa:08:0f:36:06:dc:a6:c9:6a:3b:58:01:4e:21:14:17:50:70:
eb:5b:11:44:63:6d:e7:cc:5b:e3:b3:bf:ac:f6:81:1a:7e:d6:
0a:1c:3c:dc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZRwLBvcx1b1a5ClEvSNP2n6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTE2MTczMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWZiYzFiOTg3N2I3NDkyODBhYTM3MWJkOGVmM2M2MDFmODQ2NmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaNrlFA4Qp5nGH+7WFguD56VwJnq
wF02EOhs6G+INXyMHr/38+OnvfjoDzUyhWeKhG8p3jrxOgl7yPf0GuA8wnd+4G5n
nPTRybQJP0C77blDKof3B+c8a4GA4mXJIqvndl3J6SzWXJnloKWXGt2HKJ9c1O5d
GPI5foALvbsVU1W59FmboCsXUQJaBLjopkU31HVaHdgSE/wTDjAOBipeeCuSiMnK
dp4OHzVrKmIEyZnMVt3IsWvbaM5J3Qoq9RuT959UoiClubF3xTtPb/DWBJJ4XKTX
yjAw1VAsiMOtm40tlGBzhs5PHW4okkZVmynl9eO7qs7uxPL6Ot6aS359WQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMX7wbmHe3SSgKo3G9jvPGAfhGboMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEveGZ2QnVZZDdkSktBcWpjYjJPODhZQi1FWnVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZY1AwQA
X9axAwQAubEaMA0GCSqGSIb3DQEBCwUAA4IBAQBPH3W1BRFaJTODuKdEYHsnFMEE
IUj7UsjBFlEcvT0+5nULmUOJ7QLM+bGM8QafPic4RuPGckcQTU7MVmDjDE4nZ6Ju
ChNt4dFTN1z1Rw84N098q+sICSAtzJyLKNaUfL+aYJTtj6HONkjqATSVQT1CRsZb
eMgu265CzdevLHOrK2jV2AUSxS51xtF7AFCVHlZjvgG/rUdvYVlzW+AosBzv3ZCw
XO1b/efZlsvKZ00AWLJUbLzL/VIr37iX+uCt3FdPoCvWwWAPrTDFxpSIevihrwXV
v2no64j6CA82BtymyWo7WAFOIRQXUHDrWxFEY23nzFvjs7+s9oEaftYKHDzc
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:03:26 2025 by rpki-client