Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/XT0r1xatcrf8NjjWTZF7b5a24HM.roa
File: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (raw, json)
Hash identifier: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=
Subject key identifier: 5D:3D:2B:D7:16:AD:72:B7:FC:36:38:D6:4D:91:7B:6F:96:B6:E0:73
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 019427B5E00C53B46B53CB4D6BB32297BC65
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/XT0r1xatcrf8NjjWTZF7b5a24HM.roa
Signing time: Thu 02 Jan 2025 15:50:18 +0000
ROA not before: Thu 02 Jan 2025 15:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51002
IP address blocks: 178.217.8.0/21 maxlen: 21
178.217.8.0/24 maxlen: 24
178.217.9.0/24 maxlen: 24
178.217.10.0/24 maxlen: 24
178.217.11.0/24 maxlen: 24
178.217.12.0/24 maxlen: 24
178.217.13.0/24 maxlen: 24
178.217.14.0/24 maxlen: 24
178.217.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e0:0c:53:b4:6b:53:cb:4d:6b:b3:22:97:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d3d2bd716ad72b7fc3638d64d917b6f96b6e073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:c8:ef:af:52:f7:fa:43:0a:d8:41:c8:fc:
45:48:93:54:4d:87:f9:57:73:e0:bd:b4:a4:69:6c:
cd:c0:98:63:7d:e6:ad:6f:27:c2:cb:20:fe:41:5a:
44:eb:cb:4b:6d:81:51:ae:7b:b1:b0:d9:75:68:dc:
9e:f3:11:e0:9f:d8:96:8d:ee:76:a0:ca:e2:c1:dc:
90:82:76:c0:d3:de:eb:f2:cf:7e:1d:94:29:ff:05:
7b:01:78:64:08:98:e5:69:d7:a8:89:89:47:7c:b0:
ef:86:2d:11:05:ae:06:01:a2:f8:a9:f3:4e:3a:0c:
8e:46:e9:53:15:4b:02:7a:4d:4a:42:11:de:21:a1:
7c:3b:c2:2e:31:62:79:2b:c6:0d:23:a6:69:cf:35:
4d:d6:6c:80:bd:eb:b2:94:7b:c7:e9:91:9a:b1:0b:
7b:5c:d4:a3:ae:cd:3b:8c:8f:f6:28:70:0c:c6:bf:
ee:2a:ea:03:99:35:b3:b2:d4:0b:00:fc:bd:2c:80:
57:c9:06:d5:3b:a1:a8:8b:34:f7:15:13:f0:69:59:
b9:93:29:a8:ac:09:6b:14:5f:2c:55:08:fb:13:69:
1c:db:61:d1:89:72:82:6c:27:27:9b:ce:37:6d:51:
bd:da:e7:d6:df:13:d4:4e:50:cb:af:76:1f:bf:0d:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:2B:D7:16:AD:72:B7:FC:36:38:D6:4D:91:7B:6F:96:B6:E0:73
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/XT0r1xatcrf8NjjWTZF7b5a24HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.8.0/21
Signature Algorithm: sha256WithRSAEncryption
84:10:24:b9:69:34:be:44:4e:ba:bd:4b:1f:44:f1:8f:ed:12:
11:3a:f9:e8:7c:8a:89:5f:0a:f4:0b:74:9c:90:66:44:67:16:
54:f6:fd:47:6d:93:b0:f8:7b:26:1c:7c:f9:a9:6b:41:ae:ab:
c6:9c:3b:cf:b4:98:ef:57:1c:85:86:a2:68:28:f1:2a:36:5a:
fc:11:f4:c0:d7:f7:78:c4:39:94:c7:02:36:f4:24:2a:d7:52:
4a:0d:59:1b:98:7f:40:09:5a:e9:69:94:7b:dc:51:ec:89:44:
71:1f:3a:9d:69:34:25:ca:0a:cf:92:02:20:30:fb:d4:9b:d5:
3f:79:40:ca:4a:b9:28:3d:3c:33:f8:da:71:d9:e7:31:48:f4:
fe:23:a7:1b:7d:68:16:ed:a2:51:50:7f:4c:4c:ed:69:f8:68:
c2:34:95:50:62:a0:1e:d4:a9:71:b3:fe:51:1f:49:4b:5e:ef:
20:86:77:7c:0c:e1:84:58:cd:8e:3a:ca:a7:78:c8:fd:8c:ed:
0e:8f:e7:c9:cd:47:10:62:db:e9:6a:92:dd:89:32:37:96:50:
7d:52:1d:18:71:97:92:df:32:11:bc:9d:84:44:c6:54:54:f7:
52:56:01:99:49:55:f4:65:8e:f9:5a:48:9f:65:ac:ea:10:67:
e2:11:df:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnteAMU7RrU8tNa7Mil7xlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzlkNWY1ZGI4NWFmNGMyNjA4ZmMwYzMzY2NjNGYyNzIw
MTcxODcwHhcNMjUwMTAyMTU1MDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDNkMmJkNzE2YWQ3MmI3ZmMzNjM4ZDY0ZDkxN2I2Zjk2YjZlMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31DI769S9/pDCthByPxFSJNUTYf5
V3PgvbSkaWzNwJhjfeatbyfCyyD+QVpE68tLbYFRrnuxsNl1aNye8xHgn9iWje52
oMriwdyQgnbA097r8s9+HZQp/wV7AXhkCJjladeoiYlHfLDvhi0RBa4GAaL4qfNO
OgyORulTFUsCek1KQhHeIaF8O8IuMWJ5K8YNI6ZpzzVN1myAveuylHvH6ZGasQt7
XNSjrs07jI/2KHAMxr/uKuoDmTWzstQLAPy9LIBXyQbVO6GoizT3FRPwaVm5kymo
rAlrFF8sVQj7E2kc22HRiXKCbCcnm843bVG92ufW3xPUTlDLr3Yfvw0vAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF09K9cWrXK3/DY41k2Re2+WtuBzMB8GA1UdIwQY
MBaAFM851fXbha9MJgj8DDPMxPJyAXGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yN2ZiYzYtY2NkZS00NjBiLTlmZjkt
YTFjYzIzMTYwYTQ4LzEvWFQwcjF4YXRjcmY4TmpqV1RaRjdiNWEyNEhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yN2ZiYzYtY2NkZS00NjBiLTlmZjktYTFjYzIzMTYwYTQ4
LzEvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstkIMA0G
CSqGSIb3DQEBCwUAA4IBAQCEECS5aTS+RE66vUsfRPGP7RIROvnofIqJXwr0C3Sc
kGZEZxZU9v1HbZOw+HsmHHz5qWtBrqvGnDvPtJjvVxyFhqJoKPEqNlr8EfTA1/d4
xDmUxwI29CQq11JKDVkbmH9ACVrpaZR73FHsiURxHzqdaTQlygrPkgIgMPvUm9U/
eUDKSrkoPTwz+Npx2ecxSPT+I6cbfWgW7aJRUH9MTO1p+GjCNJVQYqAe1Klxs/5R
H0lLXu8ghnd8DOGEWM2OOsqneMj9jO0Oj+fJzUcQYtvpapLdiTI3llB9Uh0YcZeS
3zIRvJ2ERMZUVPdSVgGZSVX0ZY75WkifZazqEGfiEd+P
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net