Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/xzr06xbQWPKGyePi4W8ezv0xyXU.roa
File: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (raw, json)
Hash identifier: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=
Subject key identifier: C7:3A:F4:EB:16:D0:58:F2:86:C9:E3:E2:E1:6F:1E:CE:FD:31:C9:75
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 01942143D549BE9D55DAB7B06B86CF9D45B9
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/xzr06xbQWPKGyePi4W8ezv0xyXU.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50767
IP address blocks: 91.206.154.0/23 maxlen: 23
91.224.128.0/23 maxlen: 23
91.227.0.0/22 maxlen: 22
185.233.24.0/22 maxlen: 22
193.106.228.0/22 maxlen: 22
193.107.248.0/22 maxlen: 22
2a0c:d300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d5:49:be:9d:55:da:b7:b0:6b:86:cf:9d:45:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c73af4eb16d058f286c9e3e2e16f1ecefd31c975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:ac:6c:d4:0c:66:1c:cb:20:6f:ce:0e:bb:
d6:c3:78:4d:5e:87:15:a1:0e:fe:93:1e:db:63:3a:
2b:6e:06:c4:56:63:d9:0f:30:bc:af:7f:1c:8e:ee:
c8:30:f4:a9:6a:2c:c2:d5:2c:a9:e3:c0:39:c2:0d:
01:94:a0:10:bb:43:62:0f:08:71:f1:86:92:95:fd:
75:71:32:34:66:a6:94:5f:a5:4c:1b:b4:5f:be:43:
db:30:3b:e1:01:37:44:e8:e5:41:65:f5:c9:e9:04:
74:af:65:e4:5d:7f:6f:ff:8a:33:22:81:9d:b9:2c:
b9:0c:c2:8c:bb:db:5b:9b:ae:7f:fe:9c:10:fd:23:
13:20:bc:eb:22:f6:0b:92:e6:47:2d:1f:76:eb:ec:
87:81:eb:b9:56:cb:0a:ab:42:05:1c:c2:27:67:23:
d8:2c:7e:f9:01:93:53:09:ff:98:83:72:bc:e8:3c:
09:d0:bf:ce:6a:a4:ee:65:b3:ef:69:23:3d:29:95:
cb:02:34:32:27:58:4e:b3:5f:50:5d:69:c3:35:1f:
1e:d5:b1:74:64:af:39:63:b0:95:b0:2f:1b:3a:79:
f3:e2:58:2b:1f:df:87:72:04:ce:a9:60:ee:e2:36:
9b:e6:6f:d5:46:ae:dc:6d:3a:2a:26:06:13:32:4f:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3A:F4:EB:16:D0:58:F2:86:C9:E3:E2:E1:6F:1E:CE:FD:31:C9:75
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/xzr06xbQWPKGyePi4W8ezv0xyXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.154.0/23
91.224.128.0/23
91.227.0.0/22
185.233.24.0/22
193.106.228.0/22
193.107.248.0/22
IPv6:
2a0c:d300::/29
Signature Algorithm: sha256WithRSAEncryption
7e:06:83:39:ee:fb:d4:e0:de:5b:31:1f:4c:06:39:ba:40:63:
b6:b2:c2:a7:3d:e0:bf:12:f7:4f:05:5c:79:79:8f:a3:69:e3:
ef:80:e9:d5:89:ed:b1:35:83:c8:08:28:61:9d:34:53:66:28:
c4:cc:91:e9:e2:a8:94:30:1e:43:25:be:16:b9:db:69:16:98:
07:21:e5:1e:32:e0:3a:50:2a:f2:75:6b:23:0b:24:86:e1:62:
25:45:a8:79:0f:c1:16:74:21:7f:b4:33:df:ed:60:da:4f:f8:
c8:8d:48:6c:69:43:f5:73:fc:d3:ea:b7:28:6f:b3:69:28:5d:
29:97:e4:2a:e3:74:11:89:07:93:9b:20:e5:40:22:a6:b9:97:
2d:97:a9:ad:ce:d7:04:41:6a:2a:60:95:64:58:47:33:ab:a8:
f4:d1:e5:2f:a0:a2:18:08:22:d8:5d:9c:47:b4:bd:7c:cd:a5:
96:03:69:fb:46:b2:38:1b:3b:bb:ca:3a:dd:1c:8b:1f:f1:ac:
9a:74:6d:21:28:24:a9:b5:30:d6:c2:23:63:b0:07:05:50:b1:
7a:14:1b:81:cd:c3:69:c3:0f:07:36:34:09:49:e4:54:5f:35:
62:97:c1:0a:78:a0:2c:e2:d4:63:72:78:46:62:95:a1:67:dd:
8d:2e:20:f4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQhQ9VJvp1V2rewa4bPnUW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjI3ODc1OTlmMTc5OGUyNDVmOTkzZjhjYjgxODJmOTlj
ZmQxMDQwHhcNMjUwMTAxMDk0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzNhZjRlYjE2ZDA1OGYyODZjOWUzZTJlMTZmMWVjZWZkMzFjOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgasbNQMZhzLIG/ODrvWw3hNXocV
oQ7+kx7bYzorbgbEVmPZDzC8r38cju7IMPSpaizC1Syp48A5wg0BlKAQu0NiDwhx
8YaSlf11cTI0ZqaUX6VMG7RfvkPbMDvhATdE6OVBZfXJ6QR0r2XkXX9v/4ozIoGd
uSy5DMKMu9tbm65//pwQ/SMTILzrIvYLkuZHLR926+yHgeu5VssKq0IFHMInZyPY
LH75AZNTCf+Yg3K86DwJ0L/OaqTuZbPvaSM9KZXLAjQyJ1hOs19QXWnDNR8e1bF0
ZK85Y7CVsC8bOnnz4lgrH9+HcgTOqWDu4jab5m/VRq7cbToqJgYTMk8zlQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFMc69OsW0Fjyhsnj4uFvHs79Mcl1MB8GA1UdIwQY
MBaAFLUieHWZ8XmOJF+ZP4y4GC+Zz9EEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUt
MGEyNDZhYjA1OTQ2LzEveHpyMDZ4YlFXUEtHeWVQaTRXOGV6djB4eVhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85YTRjY2UtZmQxMi00NzA3LWJlOTUtMGEyNDZhYjA1OTQ2
LzEvdFNKNGRabnhlWTRrWDVrX2pMZ1lMNW5QMFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBW86aAwQB
W+CAAwQCW+MAAwQCuekYAwQCwWrkAwQCwWv4MA0EAgACMAcDBQMqDNMAMA0GCSqG
SIb3DQEBCwUAA4IBAQB+BoM57vvU4N5bMR9MBjm6QGO2ssKnPeC/EvdPBVx5eY+j
aePvgOnVie2xNYPICChhnTRTZijEzJHp4qiUMB5DJb4WudtpFpgHIeUeMuA6UCry
dWsjCySG4WIlRah5D8EWdCF/tDPf7WDaT/jIjUhsaUP1c/zT6rcob7NpKF0pl+Qq
43QRiQeTmyDlQCKmuZctl6mtztcEQWoqYJVkWEczq6j00eUvoKIYCCLYXZxHtL18
zaWWA2n7RrI4Gzu7yjrdHIsf8ayadG0hKCSptTDWwiNjsAcFULF6FBuBzcNpww8H
NjQJSeRUXzVil8EKeKAs4tRjcnhGYpWhZ92NLiD0
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:27 2025 by rpki-client