Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/XqND0wzVKfotYYo_bAK0zCAmMH4.roa
File: XqND0wzVKfotYYo_bAK0zCAmMH4.roa (raw, json)
Hash identifier: +F+ctZwnM5x7VbTPr/m6vshTxzt2jT9bJAwza0v8PjU=
Subject key identifier: 5E:A3:43:D3:0C:D5:29:FA:2D:61:8A:3F:6C:02:B4:CC:20:26:30:7E
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 0194236A07A5A10DB47FA128CF0CBB659194
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/XqND0wzVKfotYYo_bAK0zCAmMH4.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203953
IP address blocks: 89.150.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:07:a5:a1:0d:b4:7f:a1:28:cf:0c:bb:65:91:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ea343d30cd529fa2d618a3f6c02b4cc2026307e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:4e:39:1a:91:c0:4b:72:b7:ee:2f:86:ec:
fa:93:1e:e7:5f:1d:b1:8d:63:35:57:1a:1e:65:1e:
1f:1e:3c:83:93:2a:ea:61:aa:7d:63:c7:9b:58:65:
7e:99:15:bc:08:d5:63:63:e2:c6:62:b2:72:f1:3f:
04:9a:78:dd:5b:33:08:67:cb:ae:6c:0f:e7:75:ac:
b0:b2:a1:83:49:cb:9f:e8:50:40:e8:54:16:ea:0e:
6c:db:86:de:27:6d:af:3e:7b:d0:b8:7f:75:b0:da:
e2:e8:a3:c3:ef:f5:0c:0a:53:96:80:7c:92:ba:7c:
2d:4e:9b:ad:df:7f:48:3a:9d:06:7f:40:39:da:6f:
4c:ca:bd:67:76:8e:0d:38:e6:83:f0:b3:46:89:0f:
89:9e:39:80:71:b4:94:1b:d8:85:46:62:8f:ad:55:
dd:a7:06:02:cc:01:43:b1:29:48:6b:e2:30:90:4a:
6b:bf:af:8c:4b:35:ca:d5:fd:6e:29:85:10:31:bf:
44:6f:65:83:db:3b:b4:f1:53:bb:32:7b:63:b1:06:
c5:ae:cf:1d:43:44:83:e3:0b:14:fc:14:94:f3:22:
22:a3:14:1d:45:e0:8f:90:33:94:2a:76:a5:a3:11:
e7:19:b4:ca:9a:31:d0:f5:59:92:7f:36:77:d6:64:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:43:D3:0C:D5:29:FA:2D:61:8A:3F:6C:02:B4:CC:20:26:30:7E
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/XqND0wzVKfotYYo_bAK0zCAmMH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.128.0/18
Signature Algorithm: sha256WithRSAEncryption
33:53:16:2b:cb:33:e7:37:1d:20:c3:7c:ce:24:62:23:60:f2:
eb:dd:4a:a3:96:66:bb:8f:cf:70:e4:67:ae:42:81:1c:5b:59:
26:a5:13:ea:b4:ce:bf:c9:46:92:df:58:75:f9:37:7c:ce:03:
68:0f:8a:5a:7f:31:f1:45:48:1e:5f:c1:b1:0c:a8:94:a4:84:
2a:3c:fd:b6:7d:33:be:d6:fb:74:4f:19:ff:81:ec:74:7b:81:
72:62:da:0b:4a:19:b7:10:d9:2a:95:91:21:0c:9b:f1:02:6c:
de:1e:43:3a:2f:52:3b:f9:67:2b:06:62:4b:cf:3e:57:06:f0:
b0:39:1d:fb:39:12:8e:19:19:41:ce:d3:ff:9a:dc:d8:c8:48:
70:02:8e:95:b2:ee:20:13:bb:c3:f1:e6:84:ef:f1:1d:3f:cc:
9c:c9:17:30:c0:22:7d:22:a5:f6:bd:48:02:4d:a4:9c:b0:04:
47:02:2b:82:0c:a5:d5:29:c0:c1:fd:67:6d:8b:65:73:53:cd:
30:bd:ce:83:c9:fe:86:c4:08:cf:84:24:b2:a1:f8:66:04:6f:
9d:71:9b:2a:2a:e4:8e:6a:8f:b9:e5:64:ac:10:8d:1a:c4:7b:
48:5e:8c:52:ab:1c:50:50:4d:4f:a6:9b:5e:59:52:6f:14:68:
ca:7e:ea:73
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQjageloQ20f6Eozwy7ZZGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm
ZGExMzUwHhcNMjUwMTAxMTk0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWEzNDNkMzBjZDUyOWZhMmQ2MThhM2Y2YzAyYjRjYzIwMjYzMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6hOORqRwEtyt+4vhuz6kx7nXx2x
jWM1VxoeZR4fHjyDkyrqYap9Y8ebWGV+mRW8CNVjY+LGYrJy8T8EmnjdWzMIZ8uu
bA/ndaywsqGDScuf6FBA6FQW6g5s24beJ22vPnvQuH91sNri6KPD7/UMClOWgHyS
unwtTput339IOp0Gf0A52m9Myr1ndo4NOOaD8LNGiQ+JnjmAcbSUG9iFRmKPrVXd
pwYCzAFDsSlIa+IwkEprv6+MSzXK1f1uKYUQMb9Eb2WD2zu08VO7MntjsQbFrs8d
Q0SD4wsU/BSU8yIioxQdReCPkDOUKnaloxHnGbTKmjHQ9VmSfzZ31mRiWwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFF6jQ9MM1Sn6LWGKP2wCtMwgJjB+MB8GA1UdIwQY
MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1
LTUyMWZhNDFkZmM5Ni8xL1hxTkQwd3pWS2ZvdFlZb19iQUswekNBbU1INC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1LTUyMWZhNDFkZmM5
Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZZloAw
DQYJKoZIhvcNAQELBQADggEBADNTFivLM+c3HSDDfM4kYiNg8uvdSqOWZruPz3Dk
Z65CgRxbWSalE+q0zr/JRpLfWHX5N3zOA2gPilp/MfFFSB5fwbEMqJSkhCo8/bZ9
M77W+3RPGf+B7HR7gXJi2gtKGbcQ2SqVkSEMm/ECbN4eQzovUjv5ZysGYkvPPlcG
8LA5Hfs5Eo4ZGUHO0/+a3NjISHACjpWy7iATu8Px5oTv8R0/zJzJFzDAIn0ipfa9
SAJNpJywBEcCK4IMpdUpwMH9Z22LZXNTzTC9zoPJ/obECM+EJLKh+GYEb51xmyoq
5I5qj7nlZKwQjRrEe0hejFKrHFBQTU+mm15ZUm8UaMp+6nM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:00 2025 by rpki-client