Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/XqyfpygCBb8Q3tIPPqdoPK94M0A.roa
File: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (raw, json)
Hash identifier: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=
Subject key identifier: 5E:AC:9F:A7:28:02:05:BF:10:DE:D2:0F:3E:A7:68:3C:AF:78:33:40
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0194252141CD1960C3D9B140A12ED6147546
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/XqyfpygCBb8Q3tIPPqdoPK94M0A.roa
Signing time: Thu 02 Jan 2025 03:48:43 +0000
ROA not before: Thu 02 Jan 2025 03:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42724
IP address blocks: 93.177.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:41:cd:19:60:c3:d9:b1:40:a1:2e:d6:14:75:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 03:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5eac9fa7280205bf10ded20f3ea7683caf783340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:27:84:44:f2:8b:97:16:51:3d:2f:75:5e:
53:eb:1c:d6:0c:ac:d2:92:2d:ab:06:73:11:36:b6:
6d:e0:bf:4f:3c:eb:2a:cd:f2:f9:6d:3d:84:c0:58:
d1:1c:f4:e3:59:3e:9d:b0:70:28:fb:7b:c5:28:c9:
c7:b3:82:cd:da:a9:01:c6:61:92:c6:12:c1:53:c6:
35:6d:69:1c:6b:b1:5f:b2:b9:fe:26:9d:fc:93:43:
78:36:4b:e5:bc:fc:1a:16:30:e6:da:ed:51:fd:91:
9c:a6:8c:5f:80:50:01:67:93:ac:77:4f:a1:29:b6:
bd:ee:cf:db:6d:ce:e6:6c:41:e6:20:7d:b1:6b:f9:
da:f4:dd:08:8a:50:9f:20:e1:d0:e4:8b:09:d9:ac:
04:01:c9:5a:a1:0c:e0:4e:60:fc:44:67:5b:96:f5:
17:60:b3:6b:99:ad:48:7c:3d:d8:57:1f:e5:57:c8:
08:57:f7:f6:1f:96:bb:8a:42:5f:61:4b:c8:00:93:
e1:4a:e2:bc:82:67:46:26:c5:87:91:df:4e:ac:78:
13:59:e6:e0:29:bd:b7:ae:ea:ad:af:cf:e3:d7:7b:
91:92:c2:a6:28:6c:bf:40:8c:c3:72:9c:7b:fd:e4:
e8:f6:6a:86:7d:d1:89:fc:d6:b3:ad:8e:6b:b9:0a:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AC:9F:A7:28:02:05:BF:10:DE:D2:0F:3E:A7:68:3C:AF:78:33:40
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/XqyfpygCBb8Q3tIPPqdoPK94M0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:1d:3f:7f:58:d8:34:ca:4f:f6:0f:ad:1e:52:a0:a1:fb:84:
ef:ac:13:e5:8f:9f:0f:78:19:4e:6d:56:92:e8:11:22:bb:89:
37:f5:c5:72:de:39:10:c5:88:1b:75:8c:05:89:3d:8f:95:90:
ec:4a:b8:e3:ad:08:5d:14:dd:08:b8:85:02:df:27:10:7b:98:
47:06:17:28:e8:b5:15:5e:81:5b:2f:c5:76:5e:13:37:f6:8e:
b1:11:0d:d8:f1:f5:46:50:6f:c1:59:38:67:8e:10:88:8b:6b:
d6:d4:37:cf:9e:4a:3f:73:f6:01:8e:73:1d:8d:a0:34:c2:59:
33:6c:68:31:57:41:94:84:dd:18:60:d7:76:29:72:83:00:93:
f5:65:3d:c0:59:1a:27:f5:4b:4b:97:49:a0:cd:9d:52:d6:00:
81:6e:12:7a:b0:04:0b:a9:bd:32:5b:52:d0:1c:31:15:35:dd:
8f:a1:34:f7:31:6e:db:3c:f9:14:3a:03:b2:c5:30:be:4e:8a:
b3:40:92:d7:fa:63:60:2f:f7:03:9d:5b:2c:b0:6a:53:17:a2:
32:ec:cf:d9:45:7a:da:a6:b7:0d:e4:74:82:0d:b5:b7:05:07:
1c:d1:89:48:db:15:5d:17:51:f3:49:6b:ea:6b:9e:96:dc:b1:
f3:29:89:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIUHNGWDD2bFAoS7WFHVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm
Y2M5YTAwHhcNMjUwMTAyMDM0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWFjOWZhNzI4MDIwNWJmMTBkZWQyMGYzZWE3NjgzY2FmNzgzMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJgnhETyi5cWUT0vdV5T6xzWDKzS
ki2rBnMRNrZt4L9PPOsqzfL5bT2EwFjRHPTjWT6dsHAo+3vFKMnHs4LN2qkBxmGS
xhLBU8Y1bWkca7Ffsrn+Jp38k0N4NkvlvPwaFjDm2u1R/ZGcpoxfgFABZ5Osd0+h
Kba97s/bbc7mbEHmIH2xa/na9N0IilCfIOHQ5IsJ2awEAclaoQzgTmD8RGdblvUX
YLNrma1IfD3YVx/lV8gIV/f2H5a7ikJfYUvIAJPhSuK8gmdGJsWHkd9OrHgTWebg
Kb23ruqtr8/j13uRksKmKGy/QIzDcpx7/eTo9mqGfdGJ/NazrY5ruQqEhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF6sn6coAgW/EN7SDz6naDyveDNAMB8GA1UdIwQY
MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt
NzQ1ZTA4ZmU1OGM2LzEvWHF5ZnB5Z0NCYjhRM3RJUFBxZG9QSzk0TTBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2
LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbFkMA0G
CSqGSIb3DQEBCwUAA4IBAQC0HT9/WNg0yk/2D60eUqCh+4TvrBPlj58PeBlObVaS
6BEiu4k39cVy3jkQxYgbdYwFiT2PlZDsSrjjrQhdFN0IuIUC3ycQe5hHBhco6LUV
XoFbL8V2XhM39o6xEQ3Y8fVGUG/BWThnjhCIi2vW1DfPnko/c/YBjnMdjaA0wlkz
bGgxV0GUhN0YYNd2KXKDAJP1ZT3AWRon9UtLl0mgzZ1S1gCBbhJ6sAQLqb0yW1LQ
HDEVNd2PoTT3MW7bPPkUOgOyxTC+ToqzQJLX+mNgL/cDnVsssGpTF6Iy7M/ZRXra
prcN5HSCDbW3BQcc0YlI2xVdF1HzSWvqa56W3LHzKYnc
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:25 2025 by rpki-client