Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/xk5JW7mEcm3gYIGJEbgbndDf_D4.roa
File: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (raw, json)
Hash identifier: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=
Subject key identifier: C6:4E:49:5B:B9:84:72:6D:E0:60:81:89:11:B8:1B:9D:D0:DF:FC:3E
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 0194228D534E022243C0C88E59BB0F3F5165
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/xk5JW7mEcm3gYIGJEbgbndDf_D4.roa
Signing time: Wed 01 Jan 2025 15:47:54 +0000
ROA not before: Wed 01 Jan 2025 15:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41432
IP address blocks: 193.164.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:53:4e:02:22:43:c0:c8:8e:59:bb:0f:3f:51:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Jan 1 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c64e495bb984726de060818911b81b9dd0dffc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f6:89:71:c6:5e:10:c1:e7:82:8e:0d:2b:4a:
da:01:b5:07:b0:d8:f3:fa:a1:81:1b:dd:1a:91:d0:
ac:79:68:b9:c0:83:5c:8b:60:cf:b0:f0:cc:dc:eb:
53:a0:1b:90:db:bc:fe:96:c3:22:5b:26:e8:65:af:
29:06:65:f5:51:f4:69:ce:0d:c7:3b:f4:0c:8f:72:
aa:be:cb:02:9b:17:6b:79:d2:c8:bb:c7:b9:25:e2:
4a:dd:83:c3:9c:b4:3b:69:8b:ec:59:ba:c3:3c:7e:
ed:ee:f7:5a:d3:8a:71:a2:ca:d1:93:1f:07:43:e4:
8d:b4:d7:b3:81:36:b7:91:54:b8:b8:84:da:35:d0:
bc:3e:e3:21:3e:db:5f:08:79:0b:d3:21:a3:67:25:
00:2b:d7:3f:19:1b:ce:6b:67:32:ee:53:3e:b6:da:
6f:1d:d9:6b:30:00:70:66:33:7e:94:f4:59:a9:65:
ce:6b:51:76:6f:d1:19:60:9f:96:21:95:72:c0:2b:
ca:a3:3c:36:58:9f:c1:9f:93:39:d7:d4:97:41:4b:
08:63:a6:2b:e8:9a:d9:47:42:e3:28:49:ad:4c:64:
1e:85:b0:06:df:d5:df:8e:68:ea:b6:fb:2a:09:1e:
c1:0b:ce:90:b0:2c:57:f0:91:65:56:7f:be:65:04:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:49:5B:B9:84:72:6D:E0:60:81:89:11:B8:1B:9D:D0:DF:FC:3E
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/xk5JW7mEcm3gYIGJEbgbndDf_D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.136.0/24
Signature Algorithm: sha256WithRSAEncryption
06:da:58:0f:f4:05:4c:ae:dd:57:b7:2d:84:86:09:69:64:b6:
bb:b8:a2:63:c5:82:db:89:c4:0a:22:93:dd:1c:96:1f:fe:62:
2c:9f:d3:5d:b2:ae:34:1f:12:a1:3e:3e:18:3a:4d:2f:12:07:
62:b9:64:db:43:29:c2:9b:37:75:06:23:35:b7:c6:27:ee:95:
c0:18:0b:da:40:c3:1a:07:e8:9c:d1:39:78:79:63:0e:e2:c9:
db:a7:d7:87:51:4d:18:73:c7:8d:b7:f8:ab:02:ab:b7:dc:5a:
20:74:d4:55:f7:8c:98:fb:bf:f0:3e:5b:53:6c:ad:9d:36:7d:
f7:6c:e7:f9:b6:2c:8c:71:17:49:f6:10:90:57:50:4b:99:19:
d1:4d:a9:d9:c6:dd:ec:b0:b6:45:94:1f:c4:71:03:47:ee:93:
46:98:72:0b:75:78:a7:b0:42:41:d3:87:e6:9a:1a:a3:3b:c3:
ee:24:bb:05:38:2f:50:24:b7:d2:85:80:14:6b:db:23:51:4e:
75:40:32:13:73:80:94:69:fd:12:53:f2:a4:0f:41:7c:8e:ac:
9b:f8:76:c1:4e:05:01:3d:0d:b3:06:16:2c:5a:17:77:fe:52:
10:be:e4:3b:9d:e4:ff:44:2d:8e:8d:94:9c:d4:52:c9:ba:1a:
d5:77:2c:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijVNOAiJDwMiOWbsPP1FlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MGRkN2NkY2U1ODhiZGFhMmI3YThjYjA1NmQ0ZGIwMTY3
MDE1MzIwHhcNMjUwMTAxMTU0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjRlNDk1YmI5ODQ3MjZkZTA2MDgxODkxMWI4MWI5ZGQwZGZmYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vaJccZeEMHngo4NK0raAbUHsNjz
+qGBG90akdCseWi5wINci2DPsPDM3OtToBuQ27z+lsMiWyboZa8pBmX1UfRpzg3H
O/QMj3KqvssCmxdredLIu8e5JeJK3YPDnLQ7aYvsWbrDPH7t7vda04pxosrRkx8H
Q+SNtNezgTa3kVS4uITaNdC8PuMhPttfCHkL0yGjZyUAK9c/GRvOa2cy7lM+ttpv
HdlrMABwZjN+lPRZqWXOa1F2b9EZYJ+WIZVywCvKozw2WJ/Bn5M519SXQUsIY6Yr
6JrZR0LjKEmtTGQehbAG39XfjmjqtvsqCR7BC86QsCxX8JFlVn++ZQQY9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMZOSVu5hHJt4GCBiRG4G53Q3/w+MB8GA1UdIwQY
MBaAFJYN183OWIvaoreoywVtTbAWcBUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzIt
OTAyZmYxN2JjNDk0LzEveGs1Slc3bUVjbTNnWUlHSkViZ2JuZERmX0Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzItOTAyZmYxN2JjNDk0
LzEvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaSIMA0G
CSqGSIb3DQEBCwUAA4IBAQAG2lgP9AVMrt1Xty2EhglpZLa7uKJjxYLbicQKIpPd
HJYf/mIsn9Ndsq40HxKhPj4YOk0vEgdiuWTbQynCmzd1BiM1t8Yn7pXAGAvaQMMa
B+ic0Tl4eWMO4snbp9eHUU0Yc8eNt/irAqu33FogdNRV94yY+7/wPltTbK2dNn33
bOf5tiyMcRdJ9hCQV1BLmRnRTanZxt3ssLZFlB/EcQNH7pNGmHILdXinsEJB04fm
mhqjO8PuJLsFOC9QJLfShYAUa9sjUU51QDITc4CUaf0SU/KkD0F8jqyb+HbBTgUB
PQ2zBhYsWhd3/lIQvuQ7neT/RC2OjZSc1FLJuhrVdywJ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:03 2025 by rpki-client on console.sobornost.net