Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/XcSRRWPjS2IHM7Gc0ff0hUfoq8g.roa
File: XcSRRWPjS2IHM7Gc0ff0hUfoq8g.roa (raw, json)
Hash identifier: JUaQHGh9t77Uvga65jZrbNmZpdHaanCdnDutb1BvQW4=
Subject key identifier: 5D:C4:91:45:63:E3:4B:62:07:33:B1:9C:D1:F7:F4:85:47:E8:AB:C8
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01951A480775CA3ABC32256A6DC3E539C30F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/XcSRRWPjS2IHM7Gc0ff0hUfoq8g.roa
Signing time: Tue 18 Feb 2025 18:18:02 +0000
ROA not before: Tue 18 Feb 2025 18:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 80.71.159.0/24 maxlen: 24
91.240.71.0/24 maxlen: 24
194.105.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:48:07:75:ca:3a:bc:32:25:6a:6d:c3:e5:39:c3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Feb 18 18:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dc4914563e34b620733b19cd1f7f48547e8abc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:57:ae:1a:cc:e3:fd:7d:f7:7d:2e:b8:90:
1b:81:c4:46:b1:28:96:a2:07:84:32:27:3b:3e:e2:
30:67:57:36:bc:2b:69:dd:a6:fe:22:37:43:25:f5:
47:08:9d:68:19:98:0a:c7:a5:bb:04:40:bf:fb:7c:
8a:80:ef:d6:15:80:34:f0:c9:89:a0:ab:22:c7:79:
24:38:6b:ce:8a:34:90:ef:f0:ed:fe:37:21:23:24:
b5:ed:cb:c5:03:0f:2f:e4:f6:c4:97:a6:68:9b:41:
f2:b0:bf:2f:fe:b2:8c:ed:ff:1f:2a:e9:26:55:93:
77:2e:91:05:10:a9:fd:3f:d9:2f:fc:ef:f1:22:44:
0f:ea:61:f4:c1:91:1d:c9:80:30:64:da:5a:e2:1a:
53:a4:80:1c:2f:ef:b0:5c:4b:c5:19:4c:6d:f9:cb:
3d:c7:44:24:c1:2e:0b:96:f5:2c:0b:92:36:3a:22:
b8:f6:da:7c:ed:6d:16:b9:48:b8:6b:8b:54:8e:4f:
78:ea:71:92:1c:de:a8:75:b3:21:09:8a:d2:44:3c:
aa:56:f1:79:2f:bd:d9:a2:39:08:a6:8a:08:14:8b:
5c:b5:40:77:8e:46:63:ac:da:56:55:9d:0b:57:19:
98:87:9c:50:1c:d7:e5:7a:cf:5f:cd:ff:03:85:58:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C4:91:45:63:E3:4B:62:07:33:B1:9C:D1:F7:F4:85:47:E8:AB:C8
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/XcSRRWPjS2IHM7Gc0ff0hUfoq8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.159.0/24
91.240.71.0/24
194.105.158.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:90:ae:e3:ec:d0:6e:e2:78:e5:35:3b:e2:14:dd:1f:40:d0:
be:77:ea:7f:0c:c5:30:15:55:39:41:28:e4:0d:ee:89:35:84:
6e:7c:6d:a0:38:0b:d7:97:01:ba:52:ef:94:d8:02:7d:ad:30:
71:62:23:b1:b6:b5:62:44:b7:49:7d:ff:be:ef:5b:48:45:cd:
5f:d3:a7:93:82:80:69:7b:a4:98:6e:f9:c9:a4:d3:90:79:99:
e9:85:3a:61:a2:ec:1e:d1:88:0e:38:ba:8f:44:5d:99:e0:bf:
4b:bf:19:e6:f0:c5:22:fb:01:d7:73:ae:a9:d6:4c:71:b5:a3:
b4:e1:a3:39:de:b1:5b:41:ca:16:29:29:c1:b3:79:43:4e:9b:
d5:f6:1b:f8:71:34:77:dd:43:62:b9:bb:c2:a5:82:a2:b7:d7:
6f:9a:f2:04:3e:54:f2:c7:aa:b2:92:c8:fa:3c:3e:c3:af:8e:
aa:bf:5f:30:84:e8:42:53:a1:75:ec:99:99:f4:77:26:17:40:
bf:28:b5:7a:bb:15:c5:93:0e:35:57:f6:ca:db:9d:44:fb:67:
96:49:bd:99:a3:7f:31:70:5c:d1:a7:03:65:4c:79:22:f5:22:
93:b4:56:59:85:58:d2:9e:a4:06:99:0a:62:c4:b2:ee:01:13:
6b:1f:80:5f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZUaSAd1yjq8MiVqbcPlOcMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMjE4MTgxODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGM0OTE0NTYzZTM0YjYyMDczM2IxOWNkMWY3ZjQ4NTQ3ZThhYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxVXrhrM4/19930uuJAbgcRGsSiW
ogeEMic7PuIwZ1c2vCtp3ab+IjdDJfVHCJ1oGZgKx6W7BEC/+3yKgO/WFYA08MmJ
oKsix3kkOGvOijSQ7/Dt/jchIyS17cvFAw8v5PbEl6Zom0HysL8v/rKM7f8fKukm
VZN3LpEFEKn9P9kv/O/xIkQP6mH0wZEdyYAwZNpa4hpTpIAcL++wXEvFGUxt+cs9
x0QkwS4LlvUsC5I2OiK49tp87W0WuUi4a4tUjk946nGSHN6odbMhCYrSRDyqVvF5
L73ZojkIpooIFItctUB3jkZjrNpWVZ0LVxmYh5xQHNfles9fzf8DhVix8wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFF3EkUVj40tiBzOxnNH39IVH6KvIMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvWGNTUlJXUGpTMklITTdHYzBmZjBoVWZvcThnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEefAwQA
W/BHAwQBwmmeMA0GCSqGSIb3DQEBCwUAA4IBAQBNkK7j7NBu4njlNTviFN0fQNC+
d+p/DMUwFVU5QSjkDe6JNYRufG2gOAvXlwG6Uu+U2AJ9rTBxYiOxtrViRLdJff++
71tIRc1f06eTgoBpe6SYbvnJpNOQeZnphTphouwe0YgOOLqPRF2Z4L9Lvxnm8MUi
+wHXc66p1kxxtaO04aM53rFbQcoWKSnBs3lDTpvV9hv4cTR33UNiubvCpYKit9dv
mvIEPlTyx6qyksj6PD7Dr46qv18whOhCU6F17JmZ9HcmF0C/KLV6uxXFkw41V/bK
251E+2eWSb2Zo38xcFzRpwNlTHki9SKTtFZZhVjSnqQGmQpixLLuARNrH4Bf
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:26 2025 by rpki-client