Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/XAAB7ErjyjCfUt-bBjZ5UZySstM.roa
File: XAAB7ErjyjCfUt-bBjZ5UZySstM.roa (raw, json)
Hash identifier: xgD/DWg6heYAPl/OR3IjIUBhRfp/RJ6utRTPnuEm3I8=
Subject key identifier: 5C:00:01:EC:4A:E3:CA:30:9F:52:DF:9B:06:36:79:51:9C:92:B2:D3
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01942827AC2C41FB43BF8A3DF2BF5CF513E6
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/XAAB7ErjyjCfUt-bBjZ5UZySstM.roa
Signing time: Thu 02 Jan 2025 17:54:36 +0000
ROA not before: Thu 02 Jan 2025 17:54:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24768
IP address blocks: 195.216.164.0/22 maxlen: 22
213.182.195.0/24 maxlen: 24
213.182.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ac:2c:41:fb:43:bf:8a:3d:f2:bf:5c:f5:13:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 17:54:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c0001ec4ae3ca309f52df9b063679519c92b2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:3a:bf:29:ab:aa:6d:08:92:ab:b3:f0:2a:
60:5d:47:c5:a0:81:76:58:7b:19:2b:71:a9:89:5b:
8f:11:2e:01:24:dd:c6:e0:8f:96:db:78:a4:71:47:
17:00:ae:4b:f3:c9:98:0c:f1:9f:d0:48:47:2f:d7:
e9:33:1f:84:e0:ae:ff:d9:b6:40:0c:15:f8:6d:57:
b5:19:54:63:f6:a2:66:b7:d9:6e:91:92:aa:38:ee:
01:e0:13:b6:0d:a9:f0:94:6e:68:67:06:91:9c:cc:
6d:68:c4:f6:1e:9a:a3:f0:40:24:f5:21:0a:a7:35:
dc:59:82:55:ac:11:18:5f:7b:b4:7e:35:45:42:bb:
de:7e:e8:6f:5f:88:d1:c3:ac:d8:5b:55:cd:51:69:
f2:c2:fa:15:39:ed:8f:02:35:48:c8:8a:70:42:fc:
88:fe:8e:7e:c4:3b:04:bd:dd:87:71:9e:db:7f:52:
ad:99:1c:c0:f3:67:a0:f8:f5:c2:5c:cc:90:21:f2:
ed:25:34:1b:5c:9b:ff:14:ee:08:fc:ba:d8:a3:71:
15:76:81:00:3d:3d:1a:48:88:77:fe:f5:ca:a1:18:
ad:71:df:e2:40:82:14:c3:c0:91:3b:44:f2:a6:e6:
df:48:6c:3f:28:2d:45:17:cb:f6:55:18:ba:e9:e9:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:01:EC:4A:E3:CA:30:9F:52:DF:9B:06:36:79:51:9C:92:B2:D3
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/XAAB7ErjyjCfUt-bBjZ5UZySstM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.164.0/22
213.182.195.0/24
213.182.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:9d:ac:9e:4b:d0:a2:cd:76:b6:14:1f:1c:fa:1c:55:cc:f8:
26:f7:25:5f:c7:1e:f1:d4:00:58:b4:da:a6:9f:80:ab:93:92:
32:73:15:7a:32:d0:2b:5c:ad:76:b3:17:c7:ab:2a:f0:a0:87:
67:3d:06:e5:6b:52:35:1d:4a:92:d6:a6:97:cc:70:94:1e:f2:
e6:c8:cd:54:de:65:d5:6e:14:96:bd:48:be:fb:10:6e:25:7f:
f8:2c:12:ad:28:6a:b9:dc:2e:4f:54:07:0e:15:e4:30:fd:15:
b8:09:b9:d7:7b:af:39:a5:61:df:3c:1c:76:e9:09:e5:e8:01:
f6:6b:d2:9e:bd:71:6d:2e:06:5f:d4:be:46:14:f2:ab:ff:fd:
b3:df:f8:38:30:e2:62:31:10:db:df:0d:fa:f0:bd:f0:31:d9:
22:8f:48:23:74:e8:de:28:3a:4c:03:3f:db:f3:41:e8:4d:a7:
76:9e:3e:c4:ec:cd:8e:6f:56:02:54:14:c5:b3:17:35:5c:d4:
07:cb:c4:b0:f1:a7:ad:cf:2a:5d:73:fc:42:b8:12:9e:79:0f:
01:80:4f:60:68:c2:ef:47:bd:ff:ea:da:4b:fc:f8:c1:34:92:
ca:ff:ab:bd:d0:da:20:f2:3c:66:56:71:f1:4c:26:0b:f0:cb:
07:65:5a:cc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJ6wsQftDv4o98r9c9RPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwMTAyMTc1NDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzAwMDFlYzRhZTNjYTMwOWY1MmRmOWIwNjM2Nzk1MTljOTJiMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2c6vymrqm0Ikquz8CpgXUfFoIF2
WHsZK3GpiVuPES4BJN3G4I+W23ikcUcXAK5L88mYDPGf0EhHL9fpMx+E4K7/2bZA
DBX4bVe1GVRj9qJmt9lukZKqOO4B4BO2DanwlG5oZwaRnMxtaMT2Hpqj8EAk9SEK
pzXcWYJVrBEYX3u0fjVFQrvefuhvX4jRw6zYW1XNUWnywvoVOe2PAjVIyIpwQvyI
/o5+xDsEvd2HcZ7bf1KtmRzA82eg+PXCXMyQIfLtJTQbXJv/FO4I/LrYo3EVdoEA
PT0aSIh3/vXKoRitcd/iQIIUw8CRO0TypubfSGw/KC1FF8v2VRi66elNKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFwAAexK48own1LfmwY2eVGckrLTMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvWEFBQjdFcmp5akNmVXQtYkJqWjVVWnlTc3RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCw9ikAwQA
1bbDAwQC1bbUMA0GCSqGSIb3DQEBCwUAA4IBAQAMnayeS9CizXa2FB8c+hxVzPgm
9yVfxx7x1ABYtNqmn4Crk5IycxV6MtArXK12sxfHqyrwoIdnPQbla1I1HUqS1qaX
zHCUHvLmyM1U3mXVbhSWvUi++xBuJX/4LBKtKGq53C5PVAcOFeQw/RW4CbnXe685
pWHfPBx26Qnl6AH2a9KevXFtLgZf1L5GFPKr//2z3/g4MOJiMRDb3w368L3wMdki
j0gjdOjeKDpMAz/b80HoTad2nj7E7M2Ob1YCVBTFsxc1XNQHy8Sw8aetzypdc/xC
uBKeeQ8BgE9gaMLvR73/6tpL/PjBNJLK/6u90Nog8jxmVnHxTCYL8MsHZVrM
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:48 2025 by rpki-client