Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/xSp6XojOq8AHuBptBsMJn0ejtl8.roa
File: xSp6XojOq8AHuBptBsMJn0ejtl8.roa (raw, json)
Hash identifier: As0D1tFbvZDyE89/ZuOIeAirDGOGHpdYPzRD9NN17mw=
Subject key identifier: C5:2A:7A:5E:88:CE:AB:C0:07:B8:1A:6D:06:C3:09:9F:47:A3:B6:5F
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019421B1CD11B6CC3FE0513E0921AB9AFF59
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/xSp6XojOq8AHuBptBsMJn0ejtl8.roa
Signing time: Wed 01 Jan 2025 11:48:07 +0000
ROA not before: Wed 01 Jan 2025 11:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25436
IP address blocks: 95.85.82.0/24 maxlen: 24
95.181.145.0/24 maxlen: 24
188.68.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cd:11:b6:cc:3f:e0:51:3e:09:21:ab:9a:ff:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c52a7a5e88ceabc007b81a6d06c3099f47a3b65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:17:85:d3:d8:ba:c9:c5:76:9c:81:cf:f1:
45:90:52:af:bf:36:0d:06:62:0d:36:b9:7a:02:89:
93:2f:f8:bb:8d:88:5b:1d:00:d4:fe:ab:b4:83:1d:
07:0f:1b:90:2c:39:4f:28:e8:74:d8:38:b0:08:ff:
4d:49:23:77:86:b2:b3:35:fb:82:f5:b9:b9:1e:04:
47:2a:dd:24:e0:48:f2:7d:6b:44:4b:cf:c7:fe:24:
4c:74:21:8d:39:fc:f8:88:23:df:62:f6:e5:07:ca:
62:61:b8:66:59:82:2e:af:56:0e:7f:e0:c9:a4:58:
82:1c:46:22:8f:7d:33:6d:49:9e:8d:3e:9c:3e:dc:
6f:cd:bf:a3:a5:6c:3f:e5:cc:73:26:2c:fe:48:72:
6d:e8:5d:36:ee:ea:76:20:28:91:25:7c:88:6f:d2:
aa:dd:00:17:de:68:cd:9e:f0:a2:89:7c:bf:bd:26:
c7:d9:4d:21:03:fc:cc:21:b1:22:f7:22:c0:5d:79:
1a:85:7d:f1:27:74:85:fb:d6:c7:d5:7b:f3:7c:6b:
c7:9d:25:da:3c:86:f1:cc:4f:55:c7:f0:d6:c0:f6:
79:c0:6b:25:ee:e3:02:05:81:c9:9d:45:99:84:df:
69:a2:95:23:32:ba:52:56:9b:32:38:e4:72:2a:c3:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:7A:5E:88:CE:AB:C0:07:B8:1A:6D:06:C3:09:9F:47:A3:B6:5F
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/xSp6XojOq8AHuBptBsMJn0ejtl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.82.0/24
95.181.145.0/24
188.68.7.0/24
Signature Algorithm: sha256WithRSAEncryption
43:27:a5:e0:77:38:86:8e:04:7b:7f:65:7c:53:ef:2b:86:9f:
22:40:ce:13:c8:bd:cc:55:3a:c9:81:f9:45:d4:c2:60:48:7a:
02:8a:1e:95:ed:30:cb:32:42:6a:32:d2:4a:0f:11:77:ef:48:
9a:38:73:f1:0b:1b:68:e7:4c:05:28:32:d6:8e:65:23:71:38:
1c:b7:e2:c8:ca:81:1b:84:2b:31:db:74:89:9b:3d:b5:67:fb:
88:21:cf:af:ab:84:30:39:fe:70:04:64:9b:0e:3e:e2:f3:eb:
e4:87:3b:7d:73:70:ef:49:5e:4b:90:e8:6e:10:38:d0:aa:ca:
2c:08:f9:90:c2:92:3e:2d:eb:06:55:41:1e:7c:d4:81:dd:ae:
22:ac:21:8c:6d:f7:33:2a:34:d9:2b:02:df:ce:41:4b:48:98:
ce:04:82:09:24:63:1b:27:06:e5:c9:68:9c:11:b9:cb:0c:f6:
ab:82:95:b6:6f:09:6b:bd:f9:61:02:90:5d:ff:f2:16:24:d6:
53:99:f0:7d:79:c8:6a:44:34:21:2a:84:85:c0:85:89:6c:c2:
e6:be:fc:11:06:aa:64:20:fd:dd:ff:ec:16:66:0a:7a:ae:cf:
7d:8d:70:88:21:dd:8c:c4:3c:76:34:58:a2:9b:c7:28:fc:05:
8f:c9:07:e9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhsc0Rtsw/4FE+CSGrmv9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjUwMTAxMTE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTJhN2E1ZTg4Y2VhYmMwMDdiODFhNmQwNmMzMDk5ZjQ3YTNiNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa8XhdPYusnFdpyBz/FFkFKvvzYN
BmINNrl6AomTL/i7jYhbHQDU/qu0gx0HDxuQLDlPKOh02DiwCP9NSSN3hrKzNfuC
9bm5HgRHKt0k4EjyfWtES8/H/iRMdCGNOfz4iCPfYvblB8piYbhmWYIur1YOf+DJ
pFiCHEYij30zbUmejT6cPtxvzb+jpWw/5cxzJiz+SHJt6F027up2ICiRJXyIb9Kq
3QAX3mjNnvCiiXy/vSbH2U0hA/zMIbEi9yLAXXkahX3xJ3SF+9bH1XvzfGvHnSXa
PIbxzE9Vx/DWwPZ5wGsl7uMCBYHJnUWZhN9popUjMrpSVpsyOORyKsO5fQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMUqel6IzqvAB7gabQbDCZ9Ho7ZfMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEveFNwNlhvak9xOEFIdUJwdEJzTUpuMGVqdGw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX1VSAwQA
X7WRAwQAvEQHMA0GCSqGSIb3DQEBCwUAA4IBAQBDJ6XgdziGjgR7f2V8U+8rhp8i
QM4TyL3MVTrJgflF1MJgSHoCih6V7TDLMkJqMtJKDxF370iaOHPxCxto50wFKDLW
jmUjcTgct+LIyoEbhCsx23SJmz21Z/uIIc+vq4QwOf5wBGSbDj7i8+vkhzt9c3Dv
SV5LkOhuEDjQqsosCPmQwpI+LesGVUEefNSB3a4irCGMbfczKjTZKwLfzkFLSJjO
BIIJJGMbJwblyWicEbnLDPargpW2bwlrvflhApBd//IWJNZTmfB9echqRDQhKoSF
wIWJbMLmvvwRBqpkIP3d/+wWZgp6rs99jXCIId2MxDx2NFiim8co/AWPyQfp
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:50 2025 by rpki-client