Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/xT_cHkX9miZbsMvc7yYpjkfX3zc.roa
File: xT_cHkX9miZbsMvc7yYpjkfX3zc.roa (raw, json)
Hash identifier: MAGu+VbFwRGwGQOut2CLfQFpcWvB1OYzYgzup1WQgKE=
Subject key identifier: C5:3F:DC:1E:45:FD:9A:26:5B:B0:CB:DC:EF:26:29:8E:47:D7:DF:37
Certificate issuer: /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Certificate serial: 019420D607BBC2DC3EC3E7815D1B53DDC1F1
Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/xT_cHkX9miZbsMvc7yYpjkfX3zc.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12480
IP address blocks: 91.201.100.0/22 maxlen: 24
194.76.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:07:bb:c2:dc:3e:c3:e7:81:5d:1b:53:dd:c1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c53fdc1e45fd9a265bb0cbdcef26298e47d7df37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:e2:54:f5:c5:84:9c:1d:00:b9:cc:a6:45:
18:c6:50:27:73:eb:65:a6:79:a1:70:4b:9e:26:ad:
7d:4e:ab:c1:1a:bc:90:f6:8c:4d:90:87:ac:55:c1:
15:2a:7c:3d:df:1c:64:62:70:06:eb:dd:1c:e3:9e:
a7:e2:5f:f4:19:10:64:f0:55:4e:7b:39:ea:b0:cc:
7e:51:62:27:fa:84:f1:29:77:94:b6:24:41:f1:8f:
21:5e:94:ad:65:27:e6:08:cb:b7:57:00:72:72:41:
62:75:07:8f:da:b3:19:67:59:9a:6f:48:5b:2b:5d:
aa:a4:74:96:2c:b8:b5:6e:3c:b0:ab:a7:4a:61:a5:
31:fa:55:c1:bb:ba:51:8b:47:73:31:45:7c:5c:1a:
12:cd:20:ef:d1:bd:20:35:d0:11:15:f0:dd:30:dd:
23:d3:0f:f6:47:e4:d2:63:38:68:b5:82:5b:ba:ee:
95:20:c0:db:91:78:c9:70:6c:7e:0c:34:8e:93:71:
bf:a2:1f:b3:ee:ee:2a:b3:db:12:35:16:93:a6:bc:
f8:94:d4:51:69:27:f5:e8:f3:40:cf:66:52:33:33:
5d:46:b1:8c:e1:bf:35:25:05:e4:25:b0:89:c2:39:
57:42:db:47:09:37:08:d9:2a:15:cd:18:73:4f:f4:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:DC:1E:45:FD:9A:26:5B:B0:CB:DC:EF:26:29:8E:47:D7:DF:37
X509v3 Authority Key Identifier:
keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/xT_cHkX9miZbsMvc7yYpjkfX3zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.100.0/22
194.76.193.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d3:ea:18:75:43:b2:df:5d:22:33:ad:20:b8:8b:75:ac:bf:
e9:7c:b5:a9:87:b0:df:16:95:4e:20:60:98:ad:ce:1b:3e:83:
e0:0a:46:c6:72:40:ee:6c:0b:06:27:29:d5:ab:35:9e:78:41:
4d:9b:02:45:d3:bb:6b:77:e1:3f:48:26:80:97:fb:93:62:9f:
4a:a1:c2:55:75:30:78:9e:4c:3a:b4:43:a2:c5:b3:94:48:18:
eb:74:d6:11:91:9b:44:1a:30:cc:7d:87:82:98:d4:c7:ea:b6:
77:cb:92:1f:f4:75:7e:3d:cd:82:b2:9f:67:9c:55:f6:29:6a:
1a:b2:04:ad:38:f0:1e:5f:45:36:d0:65:d6:a6:0d:25:6c:9f:
87:49:a7:42:86:e5:42:53:be:a1:77:05:ea:b1:be:69:b6:92:
69:97:78:d2:4e:5a:cb:8f:be:97:72:7b:ec:de:9a:29:ec:5e:
d8:ea:6f:01:bf:eb:4e:0b:59:32:77:bb:03:64:f7:bd:f6:60:
22:e6:37:e3:1f:79:65:2d:6c:37:15:bc:d9:54:6e:87:38:b6:
fc:ce:24:75:be:6c:ab:55:34:0e:02:fc:0a:bd:c8:90:3a:a5:
29:bb:47:99:ed:f9:0f:c3:a2:41:ca:39:57:fe:cd:57:10:d0:
89:6a:aa:bd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1ge7wtw+w+eBXRtT3cHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YTEwMjM0Y2ZiNTUyMmFhMjliMzI2MGE3NWY4YTlmNzk5
MzNlN2IwHhcNMjUwMTAxMDc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTNmZGMxZTQ1ZmQ5YTI2NWJiMGNiZGNlZjI2Mjk4ZTQ3ZDdkZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DTiVPXFhJwdALnMpkUYxlAnc+tl
pnmhcEueJq19TqvBGryQ9oxNkIesVcEVKnw93xxkYnAG690c456n4l/0GRBk8FVO
eznqsMx+UWIn+oTxKXeUtiRB8Y8hXpStZSfmCMu3VwByckFidQeP2rMZZ1mab0hb
K12qpHSWLLi1bjywq6dKYaUx+lXBu7pRi0dzMUV8XBoSzSDv0b0gNdARFfDdMN0j
0w/2R+TSYzhotYJbuu6VIMDbkXjJcGx+DDSOk3G/oh+z7u4qs9sSNRaTprz4lNRR
aSf16PNAz2ZSMzNdRrGM4b81JQXkJbCJwjlXQttHCTcI2SoVzRhzT/T7VQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMU/3B5F/ZomW7DL3O8mKY5H1983MB8GA1UdIwQY
MBaAFBehAjTPtVIqopsyYKdfip95kz57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMt
MmFkMmJiNTMyNjEzLzEveFRfY0hrWDltaVpic012Yzd5WXBqa2ZYM3pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMtMmFkMmJiNTMyNjEz
LzEvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8lkAwQA
wkzBMA0GCSqGSIb3DQEBCwUAA4IBAQAX0+oYdUOy310iM60guIt1rL/pfLWph7Df
FpVOIGCYrc4bPoPgCkbGckDubAsGJynVqzWeeEFNmwJF07trd+E/SCaAl/uTYp9K
ocJVdTB4nkw6tEOixbOUSBjrdNYRkZtEGjDMfYeCmNTH6rZ3y5If9HV+Pc2Csp9n
nFX2KWoasgStOPAeX0U20GXWpg0lbJ+HSadChuVCU76hdwXqsb5ptpJpl3jSTlrL
j76Xcnvs3pop7F7Y6m8Bv+tOC1kyd7sDZPe99mAi5jfjH3llLWw3FbzZVG6HOLb8
ziR1vmyrVTQOAvwKvciQOqUpu0eZ7fkPw6JByjlX/s1XENCJaqq9
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:51 2025 by rpki-client