Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/XuX7uT8cb5cVhdOXna_jZRuc6JE.roa
File: XuX7uT8cb5cVhdOXna_jZRuc6JE.roa (raw, json)
Hash identifier: 6nSukjm2iQoWm9SssGRSJpva0KahTxgtp11M/o63UVs=
Subject key identifier: 5E:E5:FB:B9:3F:1C:6F:97:15:85:D3:97:9D:AF:E3:65:1B:9C:E8:91
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 0194228E26DA2397F3E022D786280EB468C6
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/XuX7uT8cb5cVhdOXna_jZRuc6JE.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209924
IP address blocks: 193.104.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:26:da:23:97:f3:e0:22:d7:86:28:0e:b4:68:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ee5fbb93f1c6f971585d3979dafe3651b9ce891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7e:be:32:83:5b:bc:87:d4:23:39:77:2e:2b:
bf:33:3d:7d:a3:d3:6e:bd:56:dd:b2:ab:84:d7:14:
be:4a:0c:c3:6a:15:8e:db:b1:a8:5c:73:5b:b3:30:
4e:1f:88:6b:4d:a5:fd:c3:ef:7c:7a:1d:e3:be:bc:
fe:e4:a1:05:40:cc:37:1c:a5:d2:b2:d6:4d:f0:bf:
a9:13:3e:9c:dd:39:36:b9:4f:ce:99:da:d3:2e:a5:
60:a8:3b:1a:a8:27:82:45:8d:7b:30:0e:01:e0:92:
2d:41:e3:23:b5:22:5d:a6:5a:4e:43:db:35:5b:7a:
58:b4:3c:1b:e6:e9:67:89:ed:5d:63:1c:cc:3f:cb:
00:9e:e0:e4:bc:3e:1e:ba:66:6a:94:0f:00:91:b2:
b9:89:ea:21:13:d3:2b:ff:14:28:e2:cb:b9:12:46:
f0:bb:ab:86:ee:94:db:46:c2:02:f1:d6:52:66:91:
0f:5e:11:4a:a6:ce:d1:b7:28:3b:42:a6:c3:54:16:
b4:e9:f5:7d:f9:2c:e4:8e:52:3f:13:4e:cf:4c:cb:
d0:23:4d:3a:65:52:58:50:60:60:cf:51:18:56:42:
8f:f7:a6:30:ff:3b:ab:3e:6e:35:7c:b6:65:d3:9f:
9c:56:f4:d1:64:5b:07:76:cc:3d:39:ab:17:2c:a5:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E5:FB:B9:3F:1C:6F:97:15:85:D3:97:9D:AF:E3:65:1B:9C:E8:91
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/XuX7uT8cb5cVhdOXna_jZRuc6JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.91.0/24
Signature Algorithm: sha256WithRSAEncryption
09:8b:51:9d:25:e1:b3:f4:b2:da:e8:17:c2:3d:80:11:94:32:
b4:de:52:54:c1:fc:04:99:05:8f:cf:3c:06:83:d2:37:8b:52:
94:b3:60:94:ef:c6:89:47:fc:78:2d:5b:54:54:ed:85:97:34:
2b:b1:45:56:8f:f6:e9:eb:fa:42:b4:86:64:05:80:c5:4d:cc:
58:3e:aa:63:de:91:99:03:f4:88:c0:1d:c0:3e:6a:cd:de:55:
d9:44:49:e9:e8:dd:b0:17:f1:f9:a8:2e:96:e8:94:cb:53:69:
51:19:1b:12:15:82:7e:8d:e9:ab:c5:99:33:90:14:ee:65:dc:
56:70:b9:c2:0e:48:79:9b:30:01:68:af:c5:f0:40:b0:c4:e6:
b1:82:91:c8:37:34:ca:be:9e:c2:ed:15:0f:df:75:81:6e:e0:
4f:c1:db:fb:ad:02:ee:ff:3c:7c:85:e9:76:28:84:1b:b5:a4:
4e:9d:fc:3e:5d:a5:42:07:9a:01:78:43:56:1d:58:aa:31:ab:
76:fb:4d:fb:02:ab:dd:bf:13:13:1d:93:d0:79:c8:a2:1d:54:
10:db:bd:8d:02:1a:71:19:7c:d8:bb:08:3f:30:d7:5d:bd:06:
68:34:a5:3e:f4:e6:9c:a5:6f:9a:4b:bd:6f:8b:5f:61:bc:4d:
3a:a2:ab:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijibaI5fz4CLXhigOtGjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjg1N2M0M2NhMWRmMDRjYjY5YTRhMGFhYzg2MjliZGYz
Mjc1NmIwHhcNMjUwMTAxMTU0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWU1ZmJiOTNmMWM2Zjk3MTU4NWQzOTc5ZGFmZTM2NTFiOWNlODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9n6+MoNbvIfUIzl3Liu/Mz19o9Nu
vVbdsquE1xS+SgzDahWO27GoXHNbszBOH4hrTaX9w+98eh3jvrz+5KEFQMw3HKXS
stZN8L+pEz6c3Tk2uU/OmdrTLqVgqDsaqCeCRY17MA4B4JItQeMjtSJdplpOQ9s1
W3pYtDwb5ulnie1dYxzMP8sAnuDkvD4eumZqlA8AkbK5ieohE9Mr/xQo4su5Ekbw
u6uG7pTbRsIC8dZSZpEPXhFKps7Rtyg7QqbDVBa06fV9+SzkjlI/E07PTMvQI006
ZVJYUGBgz1EYVkKP96Yw/zurPm41fLZl05+cVvTRZFsHdsw9OasXLKXqPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF7l+7k/HG+XFYXTl52v42UbnOiRMB8GA1UdIwQY
MBaAFGBoV8Q8od8Ey2mkoKrIYpvfMnVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEt
ZDQ3MTBkMDIyMzM2LzEvWHVYN3VUOGNiNWNWaGRPWG5hX2paUnVjNkpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEtZDQ3MTBkMDIyMzM2
LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWhbMA0G
CSqGSIb3DQEBCwUAA4IBAQAJi1GdJeGz9LLa6BfCPYARlDK03lJUwfwEmQWPzzwG
g9I3i1KUs2CU78aJR/x4LVtUVO2FlzQrsUVWj/bp6/pCtIZkBYDFTcxYPqpj3pGZ
A/SIwB3APmrN3lXZREnp6N2wF/H5qC6W6JTLU2lRGRsSFYJ+jemrxZkzkBTuZdxW
cLnCDkh5mzABaK/F8ECwxOaxgpHINzTKvp7C7RUP33WBbuBPwdv7rQLu/zx8hel2
KIQbtaROnfw+XaVCB5oBeENWHViqMat2+037AqvdvxMTHZPQeciiHVQQ272NAhpx
GXzYuwg/MNddvQZoNKU+9OacpW+aS71vi19hvE06oquH
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net