Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xkaA2f25hqs91eSFk-dtBCWi6WM.roa
File: xkaA2f25hqs91eSFk-dtBCWi6WM.roa (raw, json)
Hash identifier: XdtTxpGVQ+aKegfz4RgKG5m/CVxoD8cKdWVP1vXEJdw=
Subject key identifier: C6:46:80:D9:FD:B9:86:AB:3D:D5:E4:85:93:E7:6D:04:25:A2:E9:63
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01951495280F591698C40ADD484DDC773EE9
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xkaA2f25hqs91eSFk-dtBCWi6WM.roa
Signing time: Mon 17 Feb 2025 15:44:34 +0000
ROA not before: Mon 17 Feb 2025 15:44:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 91.203.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:95:28:0f:59:16:98:c4:0a:dd:48:4d:dc:77:3e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Feb 17 15:44:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c64680d9fdb986ab3dd5e48593e76d0425a2e963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:a9:53:9c:54:5d:ac:fd:9a:2e:bb:e7:81:
09:cf:fa:cf:89:b6:1b:b0:13:23:88:fb:d0:7d:4a:
5a:16:aa:0e:ad:0f:94:25:19:5e:1b:40:bd:ef:ce:
cb:a5:bb:97:0c:40:03:1a:f2:16:76:fb:87:24:17:
a9:5e:0e:e5:ae:68:82:f2:07:7c:8f:0a:59:82:45:
91:27:1b:70:3c:75:7a:d8:5e:33:cf:c0:71:26:64:
58:8e:8d:c4:69:c6:fd:ac:80:3d:7d:01:3f:ba:87:
5e:4a:9f:68:f1:8c:b3:6c:d1:1a:03:79:f6:08:d6:
bb:95:c8:fc:ed:8a:40:c5:2c:81:1d:19:e3:14:04:
f9:b4:74:c5:1a:c8:a4:0f:b8:20:25:63:64:e2:d9:
58:6e:df:5d:9b:70:b6:c8:6d:af:e1:21:a9:81:47:
74:81:68:75:21:3f:83:cc:58:43:79:0a:ba:62:0d:
50:a9:8b:9d:14:0d:9c:b0:66:b3:76:fd:76:8a:57:
24:93:7f:ad:d7:77:0b:45:0b:b0:37:41:63:ee:25:
48:21:7c:93:fa:6b:c8:c0:de:23:7e:ed:8e:87:0f:
35:ee:c8:ef:4e:f3:7e:18:de:a8:63:7a:ca:ed:f0:
26:0e:84:81:88:ea:94:69:ec:3b:89:c8:d4:b4:da:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:46:80:D9:FD:B9:86:AB:3D:D5:E4:85:93:E7:6D:04:25:A2:E9:63
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xkaA2f25hqs91eSFk-dtBCWi6WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.235.0/24
Signature Algorithm: sha256WithRSAEncryption
10:77:54:55:fb:c5:7e:70:60:f5:e2:04:8d:cb:ad:6c:e2:51:
87:bb:af:40:ba:2e:57:5a:cd:b7:02:84:14:98:ad:8b:d1:50:
7f:3e:ef:f8:4d:6c:bc:8e:fa:6e:e4:57:10:fc:34:6a:6e:62:
18:31:e9:00:c9:d5:70:a9:0b:f8:40:31:c0:38:7a:54:34:7a:
6c:55:39:8f:4c:3d:70:ec:a1:9c:bc:2c:89:1e:ad:dd:76:67:
c3:c7:35:9a:72:76:b2:bc:fd:82:d0:cf:d1:54:0c:a4:26:ef:
50:43:f9:df:09:23:5d:14:37:60:0b:bb:8d:9c:df:0b:14:2c:
66:ce:a9:52:bb:e3:7f:85:b5:80:1c:17:1d:59:51:34:9f:99:
be:d8:f9:db:8d:e0:5a:5b:6a:6b:ba:bc:9c:4d:e3:6d:37:ec:
35:b3:77:7f:63:75:4c:ec:93:e7:07:58:8f:7e:72:72:ff:b8:
37:21:0c:cc:f3:af:e0:b0:32:44:60:11:01:7e:25:cb:4d:ed:
9d:f5:8e:ca:a2:b8:06:49:45:e8:1e:cb:33:89:33:fa:7f:2a:
99:25:d4:2e:a0:2f:6e:14:8e:56:87:40:c4:38:b5:9d:2f:9b:
49:11:69:38:97:c4:b0:55:6b:f2:e1:ff:03:13:29:a9:39:0b:
d1:71:51:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUUlSgPWRaYxArdSE3cdz7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjUwMjE3MTU0NDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjQ2ODBkOWZkYjk4NmFiM2RkNWU0ODU5M2U3NmQwNDI1YTJlOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGipU5xUXaz9mi6754EJz/rPibYb
sBMjiPvQfUpaFqoOrQ+UJRleG0C9787LpbuXDEADGvIWdvuHJBepXg7lrmiC8gd8
jwpZgkWRJxtwPHV62F4zz8BxJmRYjo3Eacb9rIA9fQE/uodeSp9o8YyzbNEaA3n2
CNa7lcj87YpAxSyBHRnjFAT5tHTFGsikD7ggJWNk4tlYbt9dm3C2yG2v4SGpgUd0
gWh1IT+DzFhDeQq6Yg1QqYudFA2csGazdv12ilckk3+t13cLRQuwN0Fj7iVIIXyT
+mvIwN4jfu2Ohw817sjvTvN+GN6oY3rK7fAmDoSBiOqUaew7icjUtNrozQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMZGgNn9uYarPdXkhZPnbQQlouljMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEveGthQTJmMjVocXM5MWVTRmstZHRCQ1dpNldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8vrMA0G
CSqGSIb3DQEBCwUAA4IBAQAQd1RV+8V+cGD14gSNy61s4lGHu69Aui5XWs23AoQU
mK2L0VB/Pu/4TWy8jvpu5FcQ/DRqbmIYMekAydVwqQv4QDHAOHpUNHpsVTmPTD1w
7KGcvCyJHq3ddmfDxzWacnayvP2C0M/RVAykJu9QQ/nfCSNdFDdgC7uNnN8LFCxm
zqlSu+N/hbWAHBcdWVE0n5m+2PnbjeBaW2prurycTeNtN+w1s3d/Y3VM7JPnB1iP
fnJy/7g3IQzM86/gsDJEYBEBfiXLTe2d9Y7KorgGSUXoHssziTP6fyqZJdQuoC9u
FI5Wh0DEOLWdL5tJEWk4l8SwVWvy4f8DEympOQvRcVEJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:25 2025 by rpki-client