Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa
File: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (raw, json)
Hash identifier: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=
Subject key identifier: 5E:EA:01:D9:78:36:57:CB:03:2D:1D:05:71:71:3D:FC:A8:1E:68:D1
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 0195DC612938BFB4A798351C640330A48940
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa
Signing time: Fri 28 Mar 2025 10:51:49 +0000
ROA not before: Fri 28 Mar 2025 10:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9141
IP address blocks: 91.238.60.0/24 maxlen: 24
91.247.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:61:29:38:bf:b4:a7:98:35:1c:64:03:30:a4:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Mar 28 10:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5eea01d9783657cb032d1d0571713dfca81e68d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:5e:4f:9f:30:a3:fb:56:ad:33:35:a5:83:
86:85:04:70:a9:05:ac:cd:b3:42:b7:08:a2:07:a4:
55:98:1c:aa:12:44:62:6a:12:d5:dc:17:63:34:69:
c5:0e:3f:61:d2:57:de:2c:99:2f:be:fb:c3:b8:3d:
d4:49:eb:19:9e:4d:23:bf:9b:f5:e1:4a:d0:1a:21:
b7:67:c9:05:5f:2d:68:82:bf:a4:f1:35:bc:99:57:
17:2d:84:49:18:ed:f5:c2:fb:2f:48:4a:7e:ce:23:
d8:15:37:7c:45:bf:ad:7b:78:f7:4f:4d:38:0a:f2:
0c:2b:1c:06:1c:d1:f8:cc:ac:52:31:48:b0:2f:7f:
6a:6f:0b:44:6c:71:ae:ee:68:69:79:d5:10:79:ba:
7f:43:de:83:c1:9c:57:73:0b:14:8b:67:14:6f:c8:
22:59:0b:c1:11:92:6a:3a:b9:d1:ef:e0:e9:b6:e4:
03:ce:8f:77:7f:75:97:02:55:c1:aa:99:4a:d5:df:
19:2d:e2:89:9e:06:cf:da:dc:85:8d:a1:54:a2:14:
b9:6b:e3:e6:13:9a:ee:04:c2:7d:91:f3:b8:d9:b7:
e3:6e:bc:d1:ec:1a:32:98:97:2e:bc:71:04:37:30:
97:11:c1:3f:76:c9:50:04:65:a2:80:7a:e5:48:cf:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EA:01:D9:78:36:57:CB:03:2D:1D:05:71:71:3D:FC:A8:1E:68:D1
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.60.0/24
91.247.147.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9a:d4:fa:8b:f5:06:c8:9d:dc:45:ed:82:f4:d4:73:fc:d3:
1e:ca:54:60:95:a0:ce:40:97:f8:0e:b2:55:62:c4:19:dd:12:
6d:79:a7:f5:03:7b:d1:3f:72:d0:f9:a3:32:6d:b7:22:fd:37:
3e:e6:1f:b0:5c:1a:45:f6:4c:24:96:1e:cf:44:05:d2:04:6f:
4e:82:7f:c1:c5:c5:ed:92:a1:43:e3:f4:c0:c8:4c:70:c9:9b:
72:1c:1a:2e:9b:ff:28:1d:8b:bb:b0:af:d1:7b:b5:70:68:bc:
af:8a:d8:f4:8c:08:c7:e4:22:a3:4d:81:b4:6a:d0:a2:76:a4:
2e:39:47:3d:a7:1c:c4:49:dc:05:2f:80:24:98:df:9d:38:d6:
87:5a:11:a0:d8:9f:f0:f6:cb:a7:22:6c:87:e1:0f:11:8e:52:
e0:b2:42:7d:22:78:60:95:6f:e9:27:e6:94:57:4f:09:45:b0:
e8:dd:0d:22:91:8f:2e:23:c2:61:5a:b2:8c:81:1f:f2:86:52:
34:96:95:7e:c6:6c:a5:1d:0b:7d:2f:38:e7:d0:ea:81:17:26:
f0:a6:1e:6e:44:c9:8e:74:24:22:4f:81:b7:9a:e8:78:c1:d3:
c9:80:ca:29:ae:78:e9:11:96:17:92:35:45:eb:04:aa:3f:51:
a5:8b:74:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXcYSk4v7SnmDUcZAMwpIlAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjgxNzU2YjYxMTBmMmE3NTQ5NWM3NGM4MjBlMGU3MzRl
ZThhNmMwHhcNMjUwMzI4MTA1MTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWVhMDFkOTc4MzY1N2NiMDMyZDFkMDU3MTcxM2RmY2E4MWU2OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJVeT58wo/tWrTM1pYOGhQRwqQWs
zbNCtwiiB6RVmByqEkRiahLV3BdjNGnFDj9h0lfeLJkvvvvDuD3USesZnk0jv5v1
4UrQGiG3Z8kFXy1ogr+k8TW8mVcXLYRJGO31wvsvSEp+ziPYFTd8Rb+te3j3T004
CvIMKxwGHNH4zKxSMUiwL39qbwtEbHGu7mhpedUQebp/Q96DwZxXcwsUi2cUb8gi
WQvBEZJqOrnR7+DptuQDzo93f3WXAlXBqplK1d8ZLeKJngbP2tyFjaFUohS5a+Pm
E5ruBMJ9kfO42bfjbrzR7BoymJcuvHEENzCXEcE/dslQBGWigHrlSM830QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF7qAdl4NlfLAy0dBXFxPfyoHmjRMB8GA1UdIwQY
MBaAFKG4F1a2EQ8qdUlcdMgg4Oc07opsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUt
YWJjY2EyYjQ0ZTlmLzEvWHVvQjJYZzJWOHNETFIwRmNYRTlfS2dlYU5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUtYWJjY2EyYjQ0ZTlm
LzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+48AwQA
W/eTMA0GCSqGSIb3DQEBCwUAA4IBAQBjmtT6i/UGyJ3cRe2C9NRz/NMeylRglaDO
QJf4DrJVYsQZ3RJteaf1A3vRP3LQ+aMybbci/Tc+5h+wXBpF9kwklh7PRAXSBG9O
gn/BxcXtkqFD4/TAyExwyZtyHBoum/8oHYu7sK/Re7VwaLyvitj0jAjH5CKjTYG0
atCidqQuOUc9pxzESdwFL4AkmN+dONaHWhGg2J/w9sunImyH4Q8RjlLgskJ9Inhg
lW/pJ+aUV08JRbDo3Q0ikY8uI8JhWrKMgR/yhlI0lpV+xmylHQt9Lzjn0OqBFybw
ph5uRMmOdCQiT4G3muh4wdPJgMoprnjpEZYXkjVF6wSqP1Gli3RB
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:06 2025 by rpki-client