Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/xtUXT43-BRZjSXfzgYwsdvWONyU.roa
File: xtUXT43-BRZjSXfzgYwsdvWONyU.roa (raw, json)
Hash identifier: XIX/2/DEXGpEq7Fa1+fLdDSHO+aZ+aRUlNZrrkIr4rc=
Subject key identifier: C6:D5:17:4F:8D:FE:05:16:63:49:77:F3:81:8C:2C:76:F5:8E:37:25
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C611F982FD14F81072DDCA79F2C36
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/xtUXT43-BRZjSXfzgYwsdvWONyU.roa
Signing time: Thu 02 Jan 2025 09:50:24 +0000
ROA not before: Thu 02 Jan 2025 09:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16301
IP address blocks: 78.81.0.0/17 maxlen: 17
78.81.192.0/18 maxlen: 18
84.242.192.0/18 maxlen: 18
89.252.64.0/18 maxlen: 18
213.148.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:61:1f:98:2f:d1:4f:81:07:2d:dc:a7:9f:2c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6d5174f8dfe0516634977f3818c2c76f58e3725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e0:30:e2:a7:23:26:ae:e4:9c:44:a4:e2:64:
42:81:26:55:df:21:e1:e0:3f:d7:a2:f4:80:b8:a5:
50:97:a5:29:99:15:59:02:89:46:c2:92:08:e8:de:
b5:f6:d7:97:14:7d:b9:b7:88:d7:b5:42:6f:20:8f:
0b:31:1a:fd:1d:c1:ca:06:1b:9e:86:bd:d5:13:b5:
9f:94:72:84:f9:b5:f2:c4:4f:a7:46:d4:b2:4d:2d:
6d:70:8d:e0:17:66:20:a4:cd:42:95:d7:bb:1a:20:
d3:b4:c8:26:08:ef:68:6b:f8:f2:e2:60:7a:cd:6a:
9e:04:b2:b2:ba:06:32:5a:1c:1e:5b:0b:0f:f9:c7:
88:d5:26:b8:80:c3:b9:c9:21:26:7a:01:a8:ea:f7:
84:19:ed:78:82:55:26:81:dc:eb:9b:7d:07:ab:9e:
f0:5b:84:69:3c:89:1a:8d:08:07:4a:83:f9:09:f5:
59:f5:d3:f3:af:b8:c4:a6:c5:b6:1d:37:47:bf:60:
9e:85:ec:36:21:aa:92:fb:8b:aa:4a:62:01:98:80:
75:89:9a:70:58:14:0c:dc:e1:2b:3e:a4:64:79:3f:
fe:eb:7f:24:59:b7:d3:1b:34:6a:08:13:de:d5:e7:
c3:8c:4f:7c:02:f8:fa:96:c9:09:7d:27:90:21:67:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:17:4F:8D:FE:05:16:63:49:77:F3:81:8C:2C:76:F5:8E:37:25
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/xtUXT43-BRZjSXfzgYwsdvWONyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.81.0.0/17
78.81.192.0/18
84.242.192.0/18
89.252.64.0/18
213.148.160.0/19
Signature Algorithm: sha256WithRSAEncryption
68:0d:66:ba:47:d7:bb:c0:7f:53:d8:59:5c:db:27:ff:14:54:
9e:0f:5e:fe:09:37:f4:a3:b6:38:f3:f8:f0:8a:26:7c:a0:64:
c7:27:a1:15:ef:2a:5a:2b:f7:5b:6f:a9:b3:ac:63:17:e0:18:
31:dc:b3:91:0c:41:4d:ea:e5:55:cf:35:ed:bf:bf:18:4d:6f:
fb:09:23:58:45:d2:c4:0e:a4:6b:01:61:58:c6:72:cd:50:83:
a4:0c:f3:ea:c7:16:97:38:3b:47:28:b3:e8:06:14:16:aa:d0:
4f:06:07:d4:ee:0a:66:64:97:96:ba:a6:f6:c1:a0:e6:c6:a7:
3e:57:7e:61:b5:bd:c8:46:0b:d7:8a:26:a1:2a:e3:83:bf:db:
da:75:c1:07:54:52:79:6b:82:67:23:16:18:80:9c:f4:52:f7:
1e:40:c5:e5:2a:55:6e:49:a0:31:89:f6:45:52:61:2f:67:1a:
13:7c:8e:ff:56:ed:0a:37:6a:3d:51:fc:bc:16:da:f3:d1:d0:
f9:fa:12:fb:0c:bc:0b:ef:9a:e4:d9:a2:f9:dc:e9:ad:68:d6:
8a:0a:78:c1:ec:b7:57:5b:09:03:2e:b7:10:bb:c5:c8:df:71:
a6:c5:20:fd:8c:ed:10:fa:a6:e6:0b:95:93:63:08:54:d0:62:
35:a3:58:99
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQmbGEfmC/RT4EHLdynnyw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwMTAyMDk1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmQ1MTc0ZjhkZmUwNTE2NjM0OTc3ZjM4MThjMmM3NmY1OGUzNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eAw4qcjJq7knESk4mRCgSZV3yHh
4D/XovSAuKVQl6UpmRVZAolGwpII6N619teXFH25t4jXtUJvII8LMRr9HcHKBhue
hr3VE7WflHKE+bXyxE+nRtSyTS1tcI3gF2YgpM1Clde7GiDTtMgmCO9oa/jy4mB6
zWqeBLKyugYyWhweWwsP+ceI1Sa4gMO5ySEmegGo6veEGe14glUmgdzrm30Hq57w
W4RpPIkajQgHSoP5CfVZ9dPzr7jEpsW2HTdHv2Cehew2IaqS+4uqSmIBmIB1iZpw
WBQM3OErPqRkeT/+638kWbfTGzRqCBPe1efDjE98Avj6lskJfSeQIWe51wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMbVF0+N/gUWY0l384GMLHb1jjclMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEveHRVWFQ0My1CUlpqU1hmemdZd3NkdldPTnlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQHTlEAAwQG
TlHAAwQGVPLAAwQGWfxAAwQF1ZSgMA0GCSqGSIb3DQEBCwUAA4IBAQBoDWa6R9e7
wH9T2Flc2yf/FFSeD17+CTf0o7Y48/jwiiZ8oGTHJ6EV7ypaK/dbb6mzrGMX4Bgx
3LORDEFN6uVVzzXtv78YTW/7CSNYRdLEDqRrAWFYxnLNUIOkDPPqxxaXODtHKLPo
BhQWqtBPBgfU7gpmZJeWuqb2waDmxqc+V35htb3IRgvXiiahKuODv9vadcEHVFJ5
a4JnIxYYgJz0UvceQMXlKlVuSaAxifZFUmEvZxoTfI7/Vu0KN2o9Ufy8Ftrz0dD5
+hL7DLwL75rk2aL53OmtaNaKCnjB7LdXWwkDLrcQu8XI33GmxSD9jO0Q+qbmC5WT
YwhU0GI1o1iZ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net