Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa
File: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (raw, json)
Hash identifier: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=
Subject key identifier: C5:86:CE:21:48:61:8B:C7:FA:13:3C:76:40:AA:5D:E2:44:0D:8B:12
Certificate issuer: /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Certificate serial: 019422FB405C0B47076B1CC2962BF4FDD491
Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa
Signing time: Wed 01 Jan 2025 17:47:58 +0000
ROA not before: Wed 01 Jan 2025 17:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43323
IP address blocks: 95.87.96.0/21 maxlen: 21
95.87.96.0/24 maxlen: 24
95.87.97.0/24 maxlen: 24
95.87.98.0/24 maxlen: 24
95.87.99.0/24 maxlen: 24
95.87.100.0/24 maxlen: 24
95.87.101.0/24 maxlen: 24
95.87.102.0/24 maxlen: 24
95.87.103.0/24 maxlen: 24
193.53.164.0/22 maxlen: 22
193.53.164.0/24 maxlen: 24
193.53.165.0/24 maxlen: 24
193.53.166.0/24 maxlen: 24
193.53.167.0/24 maxlen: 24
194.107.16.0/24 maxlen: 24
2a03:4d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:40:5c:0b:47:07:6b:1c:c2:96:2b:f4:fd:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Validity
Not Before: Jan 1 17:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c586ce2148618bc7fa133c7640aa5de2440d8b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:d3:32:36:8e:b9:2f:88:f5:49:ba:92:f7:
a8:97:61:d4:bb:05:fd:f4:84:bb:13:1d:1c:ec:31:
6d:48:a1:f4:6e:25:21:56:00:79:2f:49:b6:21:bb:
1f:b1:67:13:8d:ed:8d:c7:db:0a:83:ca:c0:f9:ea:
26:ef:ce:41:02:a1:a5:f5:9a:30:5b:de:d9:09:88:
a3:13:36:5f:87:a8:9a:94:1d:8c:29:59:33:8a:52:
f7:4d:fd:a4:0e:12:b0:51:2f:f0:26:b4:ed:b8:3f:
4c:ad:94:60:8e:14:86:60:2a:fe:0e:dc:07:8f:b1:
8b:a2:11:86:f3:80:e2:09:61:4c:ce:78:bf:97:ab:
89:5a:5b:f2:19:e3:c9:d8:6d:a8:79:c8:89:90:53:
d4:7f:12:ce:92:13:a3:56:9e:b5:a0:78:99:64:a8:
c1:d2:29:11:81:a3:b3:6b:f2:1e:89:e1:bd:84:45:
c9:54:d3:19:f5:d7:8b:c2:6d:f6:b0:cb:b9:c5:26:
af:37:e8:76:63:76:5e:44:6c:da:74:c6:15:0e:84:
ce:cc:eb:c3:17:08:47:64:a8:61:39:18:f9:a6:ee:
91:45:03:71:3b:50:fb:91:d5:24:64:a6:6c:00:fd:
25:0b:11:51:3b:a7:02:d7:63:45:eb:24:fb:c6:27:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:CE:21:48:61:8B:C7:FA:13:3C:76:40:AA:5D:E2:44:0D:8B:12
X509v3 Authority Key Identifier:
keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.87.96.0/21
193.53.164.0/22
194.107.16.0/24
IPv6:
2a03:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
7e:62:54:d8:4f:25:be:a8:ab:f6:71:78:64:b6:13:98:7a:1d:
c7:16:58:5a:41:61:9f:f6:fb:a0:51:b7:65:94:30:97:85:9b:
8d:fc:bd:da:84:4c:1f:c0:e8:a2:32:15:dd:f7:ea:df:5e:6b:
21:9c:b8:ed:75:43:ad:a7:c3:d5:b9:23:0e:7c:ef:de:b8:ad:
a3:f9:5e:af:9c:e7:44:25:f4:6e:b0:ce:2a:ac:54:87:15:bb:
b9:56:f9:87:33:bb:63:8f:e1:41:e6:64:36:53:d6:99:2c:b2:
c2:b5:52:78:11:46:4c:bd:1b:65:02:0d:48:4a:fb:07:91:8d:
bb:55:ff:1d:44:c9:a3:36:27:de:fc:5d:ac:7b:4a:81:13:69:
b4:77:57:1d:54:de:6a:c0:f3:b3:c6:c2:a3:e1:93:c5:0e:15:
40:2d:77:4e:92:95:f9:6d:ee:96:48:4d:fd:92:46:30:8e:00:
32:b0:ed:8c:90:e4:3e:0e:82:52:96:99:b8:9a:d3:d8:05:da:
93:1b:4d:0b:e0:c2:a8:c1:3e:67:60:d2:4a:0e:3a:f5:ec:0c:
d6:b2:46:9b:f1:f4:ae:28:aa:d1:06:22:c7:a8:5f:13:4d:0a:
f4:f6:61:61:8f:9d:98:cd:31:cd:4c:d8:bb:c8:a5:ec:5d:0c:
b0:c7:08:1c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQi+0BcC0cHaxzCliv0/dSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGJmYjNkNjRlYjEwYzc4MjU2MmEzNzg1NWIwNzMyYmQx
OGViM2YwHhcNMjUwMTAxMTc0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTg2Y2UyMTQ4NjE4YmM3ZmExMzNjNzY0MGFhNWRlMjQ0MGQ4YjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rjTMjaOuS+I9Um6kveol2HUuwX9
9IS7Ex0c7DFtSKH0biUhVgB5L0m2IbsfsWcTje2Nx9sKg8rA+eom785BAqGl9Zow
W97ZCYijEzZfh6ialB2MKVkzilL3Tf2kDhKwUS/wJrTtuD9MrZRgjhSGYCr+DtwH
j7GLohGG84DiCWFMzni/l6uJWlvyGePJ2G2oeciJkFPUfxLOkhOjVp61oHiZZKjB
0ikRgaOza/IeieG9hEXJVNMZ9deLwm32sMu5xSavN+h2Y3ZeRGzadMYVDoTOzOvD
FwhHZKhhORj5pu6RRQNxO1D7kdUkZKZsAP0lCxFRO6cC12NF6yT7xidfdQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMWGziFIYYvH+hM8dkCqXeJEDYsSMB8GA1UdIwQY
MBaAFHfb+z1k6xDHglYqN4VbBzK9GOs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEt
NTRiNDFlNGZjNjNiLzEveFliT0lVaGhpOGY2RXp4MlFLcGQ0a1FOaXhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEtNTRiNDFlNGZjNjNi
LzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDX1dgAwQC
wTWkAwQAwmsQMA0EAgACMAcDBQAqA02AMA0GCSqGSIb3DQEBCwUAA4IBAQB+YlTY
TyW+qKv2cXhkthOYeh3HFlhaQWGf9vugUbdllDCXhZuN/L3ahEwfwOiiMhXd9+rf
XmshnLjtdUOtp8PVuSMOfO/euK2j+V6vnOdEJfRusM4qrFSHFbu5VvmHM7tjj+FB
5mQ2U9aZLLLCtVJ4EUZMvRtlAg1ISvsHkY27Vf8dRMmjNife/F2se0qBE2m0d1cd
VN5qwPOzxsKj4ZPFDhVALXdOkpX5be6WSE39kkYwjgAysO2MkOQ+DoJSlpm4mtPY
BdqTG00L4MKowT5nYNJKDjr17AzWskab8fSuKKrRBiLHqF8TTQr09mFhj52YzTHN
TNi7yKXsXQywxwgc
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net