Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/Xi938_LG0fo08PcIDueZffuVF3Q.roa
File: Xi938_LG0fo08PcIDueZffuVF3Q.roa (raw, json)
Hash identifier: 5cOzoa9nCO1ZRf33mVdI0qSK+ZoAQbsBPtAf2Kylv28=
Subject key identifier: 5E:2F:77:F3:F2:C6:D1:FA:34:F0:F7:08:0E:E7:99:7D:FB:95:17:74
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 0194228D9E5092AC299B927C64D0B8C24000
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/Xi938_LG0fo08PcIDueZffuVF3Q.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210329
IP address blocks: 45.147.249.0/24 maxlen: 24
212.115.108.0/24 maxlen: 24
212.115.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9e:50:92:ac:29:9b:92:7c:64:d0:b8:c2:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e2f77f3f2c6d1fa34f0f7080ee7997dfb951774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:e9:d9:50:4e:99:1b:c7:83:f9:f7:ec:ed:
fc:74:6f:92:c5:97:c7:7f:a4:30:2b:ef:dd:18:a7:
f2:bc:3b:73:51:e3:ef:b7:26:7b:7a:90:43:6d:db:
e3:7c:41:5e:7e:54:15:ae:4a:03:1e:ae:4f:c0:99:
10:3d:d8:af:8f:f7:93:c0:7d:44:8b:2a:c2:f8:e6:
96:c4:6f:c7:c3:48:42:c6:68:8a:52:8f:23:50:12:
33:c2:ea:a7:37:48:24:f0:fe:36:68:70:1d:d8:5a:
62:1c:e3:51:e9:be:0b:ae:b6:66:ce:33:c4:51:65:
cb:7b:1c:f9:9d:e4:1c:46:4d:54:b8:71:57:96:89:
38:a2:aa:8b:4e:da:87:4b:d1:54:e9:20:35:23:a0:
e4:19:2d:71:d0:b3:3c:b3:b3:a9:27:57:f0:80:0a:
94:f1:78:95:a5:80:1c:f7:2b:3a:0d:89:9f:fe:da:
9a:40:f6:32:2c:4d:52:27:ff:27:83:56:58:ab:3f:
2c:81:f8:5c:16:ca:a9:cf:4b:c1:ea:65:b6:10:ee:
48:3a:b0:21:d3:8d:94:80:3f:41:20:9f:47:9e:57:
08:0f:56:74:d1:b1:9f:7f:94:d5:7a:84:bc:81:42:
5f:bd:7a:4d:24:fe:39:e0:78:08:01:30:27:47:02:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2F:77:F3:F2:C6:D1:FA:34:F0:F7:08:0E:E7:99:7D:FB:95:17:74
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/Xi938_LG0fo08PcIDueZffuVF3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.249.0/24
212.115.108.0/23
Signature Algorithm: sha256WithRSAEncryption
45:a8:d6:d8:ff:a1:82:78:0b:f0:91:26:32:e8:96:d2:e8:8b:
11:ad:f9:67:01:36:a5:3c:65:3d:e2:f6:2f:f7:f2:19:7a:07:
4d:bd:a7:1f:d7:1f:60:66:4a:2c:92:4b:57:1d:d0:ec:9b:69:
c3:0f:b2:1e:be:25:a1:fe:eb:9f:05:43:1f:ec:4f:01:e6:fa:
f2:13:47:80:7c:1b:26:2d:fb:ca:80:78:b6:64:11:5d:0c:54:
bd:6e:6a:99:37:a8:d7:e0:9d:cf:58:3d:c6:1f:23:58:c5:3a:
2e:6b:d9:8c:20:a7:5f:ef:24:58:2b:61:5d:fc:c5:b1:3f:61:
9a:ac:33:0f:42:26:49:8b:d3:8f:08:ee:3f:6f:1e:e2:18:93:
2e:f1:ca:d1:4a:3a:ca:1a:9e:e4:de:15:48:ee:15:5d:b9:65:
ac:70:d4:6e:00:97:40:3d:c1:56:ee:4e:13:c3:68:c4:d3:9f:
53:6d:b9:59:d8:db:03:88:bc:6c:34:c7:4b:6e:4a:f5:c2:95:
db:ec:90:78:a8:0a:45:d0:cd:b2:02:6f:49:11:94:91:fc:95:
8c:fc:36:57:cd:55:ea:2a:1c:21:5e:26:2d:e8:e7:ad:18:26:
9e:8f:3a:bd:e6:a9:ef:a1:a1:92:6b:e4:b1:5b:4e:9d:6d:f5:
58:bf:33:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijZ5Qkqwpm5J8ZNC4wkAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh
MzVhNTUwHhcNMjUwMTAxMTU0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTJmNzdmM2YyYzZkMWZhMzRmMGY3MDgwZWU3OTk3ZGZiOTUxNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhHp2VBOmRvHg/n37O38dG+SxZfH
f6QwK+/dGKfyvDtzUePvtyZ7epBDbdvjfEFeflQVrkoDHq5PwJkQPdivj/eTwH1E
iyrC+OaWxG/Hw0hCxmiKUo8jUBIzwuqnN0gk8P42aHAd2FpiHONR6b4LrrZmzjPE
UWXLexz5neQcRk1UuHFXlok4oqqLTtqHS9FU6SA1I6DkGS1x0LM8s7OpJ1fwgAqU
8XiVpYAc9ys6DYmf/tqaQPYyLE1SJ/8ng1ZYqz8sgfhcFsqpz0vB6mW2EO5IOrAh
042UgD9BIJ9HnlcID1Z00bGff5TVeoS8gUJfvXpNJP454HgIATAnRwL4MQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF4vd/PyxtH6NPD3CA7nmX37lRd0MB8GA1UdIwQY
MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt
ZmUwYTY1OGQ5ZGVkLzEvWGk5MzhfTEcwZm8wOFBjSUR1ZVpmZnVWRjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk
LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZP5AwQB
1HNsMA0GCSqGSIb3DQEBCwUAA4IBAQBFqNbY/6GCeAvwkSYy6JbS6IsRrflnATal
PGU94vYv9/IZegdNvacf1x9gZkoskktXHdDsm2nDD7IeviWh/uufBUMf7E8B5vry
E0eAfBsmLfvKgHi2ZBFdDFS9bmqZN6jX4J3PWD3GHyNYxToua9mMIKdf7yRYK2Fd
/MWxP2GarDMPQiZJi9OPCO4/bx7iGJMu8crRSjrKGp7k3hVI7hVduWWscNRuAJdA
PcFW7k4Tw2jE059TbblZ2NsDiLxsNMdLbkr1wpXb7JB4qApF0M2yAm9JEZSR/JWM
/DZXzVXqKhwhXiYt6OetGCaejzq95qnvoaGSa+SxW06dbfVYvzNG
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:10:05 2025 by rpki-client