Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/xBYzLNgtWEdItwv5XiwC0f2BVHs.roa
File: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (raw, json)
Hash identifier: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=
Subject key identifier: C4:16:33:2C:D8:2D:58:47:48:B7:0B:F9:5E:2C:02:D1:FD:81:54:7B
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 0194214458AFC9F0BC8F0538A6E1857C900D
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/xBYzLNgtWEdItwv5XiwC0f2BVHs.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205055
IP address blocks: 185.231.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:58:af:c9:f0:bc:8f:05:38:a6:e1:85:7c:90:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c416332cd82d584748b70bf95e2c02d1fd81547b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:bc:0f:2b:17:81:b3:88:d8:1f:00:1a:71:
81:55:ea:5b:fc:5f:a1:75:3a:7d:94:57:bd:06:ab:
41:e3:55:68:37:ad:f5:41:9e:65:b6:a8:6a:f2:4e:
e6:49:11:c1:14:73:13:4d:9b:4a:07:7a:e4:06:4b:
e8:31:55:dc:40:80:b2:30:10:a1:b4:5d:a4:44:ff:
65:7a:0e:d8:2f:d5:63:64:5c:99:9a:91:b1:87:55:
1e:19:00:c3:2f:6f:ce:e3:c6:0e:04:b6:cf:44:23:
f1:65:9d:2b:17:5e:54:c5:3d:74:93:3c:37:bb:7e:
e6:80:9a:05:c1:8b:4b:6e:c2:69:c9:39:07:ac:fb:
a3:23:bb:6a:67:f2:bb:5d:5c:fe:a4:4f:e3:af:43:
5c:b9:e8:d1:b2:42:c3:22:3a:c6:97:b6:52:a2:62:
b5:34:55:cd:38:cc:af:e2:9f:92:5c:82:7f:be:0f:
53:15:32:86:39:18:cd:ba:57:ea:cf:63:19:b3:e9:
18:f2:be:7e:ad:89:91:f5:cc:45:bc:b5:59:d2:bc:
f4:c5:a7:6c:d6:05:37:0f:df:7d:91:46:7a:70:59:
78:75:65:02:f0:2b:28:f1:31:eb:b3:09:28:f9:87:
8d:9d:60:e0:cf:43:fe:79:fc:11:6f:fa:41:cc:bf:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:16:33:2C:D8:2D:58:47:48:B7:0B:F9:5E:2C:02:D1:FD:81:54:7B
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/xBYzLNgtWEdItwv5XiwC0f2BVHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:13:6c:65:4b:51:21:fb:c7:4b:16:7d:f7:a4:9a:0a:d9:20:
d5:51:b3:4b:68:b8:9b:6f:3c:09:6b:cc:06:12:de:16:bd:c2:
44:dd:5d:dc:b4:af:85:d3:50:fb:31:b2:f6:3b:3f:1b:94:8e:
74:7f:56:0d:8c:35:08:34:48:65:aa:b0:71:f7:46:94:cb:12:
d9:d6:2d:ba:d4:52:ad:4b:8d:aa:2e:3d:d3:ba:95:c5:f5:f4:
d3:a5:9f:cf:cf:e9:18:83:1f:7b:15:d1:ef:fe:74:a3:c5:db:
b3:33:32:4b:27:8e:00:55:34:5d:3b:6f:12:24:d1:3e:a1:87:
e9:90:74:ad:b0:46:81:dc:d8:a3:16:72:35:cc:80:b5:20:eb:
ed:d4:ef:82:3d:d8:f0:96:90:25:2c:a9:01:89:2c:9f:d1:a5:
ae:09:30:0b:97:c4:b9:db:cc:9d:99:84:e0:d9:47:49:85:f4:
07:13:ec:17:62:30:bd:49:ea:81:e8:0b:4a:2e:ea:42:fc:fe:
10:ab:52:50:ed:2e:74:e4:9e:79:da:1e:af:6b:db:d4:bb:24:
f2:90:df:e0:78:b1:5c:bc:04:1e:9c:25:ea:73:05:01:31:67:
20:a9:fb:40:8f:e7:84:a0:7b:1d:01:67:cf:d5:79:d5:a0:88:
1d:60:4e:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRFivyfC8jwU4puGFfJANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzNhZDQ1ZjhhM2ViZTY2N2FiYjE5NmEyODlkNjcxOWJl
YmI4MmQwHhcNMjUwMTAxMDk0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDE2MzMyY2Q4MmQ1ODQ3NDhiNzBiZjk1ZTJjMDJkMWZkODE1NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q68DysXgbOI2B8AGnGBVepb/F+h
dTp9lFe9BqtB41VoN631QZ5ltqhq8k7mSRHBFHMTTZtKB3rkBkvoMVXcQICyMBCh
tF2kRP9leg7YL9VjZFyZmpGxh1UeGQDDL2/O48YOBLbPRCPxZZ0rF15UxT10kzw3
u37mgJoFwYtLbsJpyTkHrPujI7tqZ/K7XVz+pE/jr0NcuejRskLDIjrGl7ZSomK1
NFXNOMyv4p+SXIJ/vg9TFTKGORjNulfqz2MZs+kY8r5+rYmR9cxFvLVZ0rz0xads
1gU3D999kUZ6cFl4dWUC8Cso8THrswko+YeNnWDgz0P+efwRb/pBzL+seQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMQWMyzYLVhHSLcL+V4sAtH9gVR7MB8GA1UdIwQY
MBaAFC5zrUX4o+vmZ6uxlqKJ1nGb67gtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5PdFJmaWo2LVpucTdHV29vbldjWnZydUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85YTYwY2YtOWQ5NC00NTg1LWEyNWIt
NWU3Zjk1ODExNTYyLzEveEJZekxOZ3RXRWRJdHd2NVhpd0MwZjJCVkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85YTYwY2YtOWQ5NC00NTg1LWEyNWItNWU3Zjk1ODExNTYy
LzEvTG5PdFJmaWo2LVpucTdHV29vbldjWnZydUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueewMA0G
CSqGSIb3DQEBCwUAA4IBAQCoE2xlS1Eh+8dLFn33pJoK2SDVUbNLaLibbzwJa8wG
Et4WvcJE3V3ctK+F01D7MbL2Oz8blI50f1YNjDUINEhlqrBx90aUyxLZ1i261FKt
S42qLj3TupXF9fTTpZ/Pz+kYgx97FdHv/nSjxduzMzJLJ44AVTRdO28SJNE+oYfp
kHStsEaB3NijFnI1zIC1IOvt1O+CPdjwlpAlLKkBiSyf0aWuCTALl8S528ydmYTg
2UdJhfQHE+wXYjC9SeqB6AtKLupC/P4Qq1JQ7S505J552h6va9vUuyTykN/geLFc
vAQenCXqcwUBMWcgqftAj+eEoHsdAWfP1XnVoIgdYE7R
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:33:53 2025 by rpki-client