Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa
File: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (raw, json)
Hash identifier: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=
Subject key identifier: C4:89:D2:E0:E0:59:13:85:D9:84:22:18:3E:D7:04:27:82:F4:B1:6D
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 019424457DE2D3364B0B405443BBA7DDF2E3
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41568
IP address blocks: 91.192.104.0/24 maxlen: 24
91.192.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7d:e2:d3:36:4b:0b:40:54:43:bb:a7:dd:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c489d2e0e0591385d98422183ed7042782f4b16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:17:55:c9:ab:4b:16:1d:52:eb:c5:69:c0:
44:7a:08:61:04:03:1e:1d:4c:ea:35:ac:52:0a:0c:
73:a8:5b:89:94:e5:48:dd:fe:d0:73:cd:01:47:25:
a8:47:15:30:2c:1b:03:dd:f8:bb:be:5e:de:b4:e9:
21:c3:fa:0b:d6:86:17:7e:43:9c:9a:58:62:55:c1:
b2:0b:94:4c:39:47:91:5e:0e:2d:3e:f1:2e:4c:76:
eb:19:34:be:05:2e:c1:87:0a:c0:a2:81:70:a4:37:
55:11:30:74:e4:2b:bc:3c:cf:f5:09:ce:89:87:6f:
dc:de:f9:49:ff:2e:9d:3c:e4:92:ed:74:ed:17:7c:
2e:56:80:00:bb:79:a3:a9:64:12:86:1b:e5:65:f0:
69:df:e4:02:0c:1e:3c:75:f2:75:7e:78:28:d9:3e:
4f:25:75:35:3a:35:dd:34:c7:47:48:21:61:95:d4:
7a:f9:00:18:fc:67:50:e7:ed:49:5a:8f:18:db:85:
b1:05:a8:52:d9:56:e2:c0:06:3e:d9:c6:b6:b5:7c:
48:78:53:c0:49:e9:ec:2d:54:6a:74:f1:64:56:b1:
a5:ef:16:1a:0e:28:a3:5e:24:82:42:d6:38:b8:9d:
74:9d:51:47:09:e7:81:4f:43:08:a8:99:74:75:fa:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:D2:E0:E0:59:13:85:D9:84:22:18:3E:D7:04:27:82:F4:B1:6D
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.104.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:62:70:98:f3:12:bb:f8:53:c0:9a:64:f2:3c:db:45:99:42:
a9:ac:e2:ea:f5:d0:c8:a5:2e:ec:7b:72:08:f1:f7:89:c7:fa:
8f:a5:0b:19:9f:88:fd:8c:52:1e:82:bc:73:d7:68:f5:7a:98:
23:65:64:b2:a4:d8:aa:fa:c0:7a:23:1b:2d:2e:f2:f2:e0:70:
27:c1:34:79:f4:ce:d7:69:d4:da:0b:2d:61:43:a6:ab:16:d3:
13:76:68:c0:52:b5:9f:bb:b1:ad:9b:04:c1:60:d0:30:6f:cb:
b0:b1:9b:e6:e5:65:48:3a:c0:23:00:fc:7f:69:c4:c1:da:8e:
c6:d5:0f:34:6e:18:4d:8a:62:80:bd:5f:c9:ef:61:ad:a2:e9:
68:da:12:1a:d1:65:32:65:f9:29:d7:bf:c7:4d:45:72:8a:f1:
1c:b1:59:9c:90:4d:71:09:29:e5:99:44:0c:ae:1a:4c:1b:b0:
ac:2d:0f:0b:ea:25:fd:ca:62:74:b8:5d:81:8f:27:1f:82:db:
5d:85:4d:ec:3e:18:a1:07:ca:2f:1e:a0:78:31:ed:52:d1:42:
7b:0a:d8:b4:c6:15:dc:8f:71:03:aa:e3:a3:b9:94:05:a8:26:
01:3f:56:53:15:85:59:07:a6:52:a9:bf:73:8a:e6:f5:0e:fe:
10:79:a9:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRX3i0zZLC0BUQ7un3fLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw
MGJhNjgwHhcNMjUwMTAxMjM0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDg5ZDJlMGUwNTkxMzg1ZDk4NDIyMTgzZWQ3MDQyNzgyZjRiMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEAXVcmrSxYdUuvFacBEeghhBAMe
HUzqNaxSCgxzqFuJlOVI3f7Qc80BRyWoRxUwLBsD3fi7vl7etOkhw/oL1oYXfkOc
mlhiVcGyC5RMOUeRXg4tPvEuTHbrGTS+BS7BhwrAooFwpDdVETB05Cu8PM/1Cc6J
h2/c3vlJ/y6dPOSS7XTtF3wuVoAAu3mjqWQShhvlZfBp3+QCDB48dfJ1fngo2T5P
JXU1OjXdNMdHSCFhldR6+QAY/GdQ5+1JWo8Y24WxBahS2VbiwAY+2ca2tXxIeFPA
SensLVRqdPFkVrGl7xYaDiijXiSCQtY4uJ10nVFHCeeBT0MIqJl0dfptbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMSJ0uDgWROF2YQiGD7XBCeC9LFtMB8GA1UdIwQY
MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt
MWU5ZjBiZGViNTMyLzEveEluUzRPQlpFNFhaaENJWVB0Y0VKNEwwc1cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy
LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8BoMA0G
CSqGSIb3DQEBCwUAA4IBAQAsYnCY8xK7+FPAmmTyPNtFmUKprOLq9dDIpS7se3II
8feJx/qPpQsZn4j9jFIegrxz12j1epgjZWSypNiq+sB6IxstLvLy4HAnwTR59M7X
adTaCy1hQ6arFtMTdmjAUrWfu7GtmwTBYNAwb8uwsZvm5WVIOsAjAPx/acTB2o7G
1Q80bhhNimKAvV/J72Gtoulo2hIa0WUyZfkp17/HTUVyivEcsVmckE1xCSnlmUQM
rhpMG7CsLQ8L6iX9ymJ0uF2BjycfgttdhU3sPhihB8ovHqB4Me1S0UJ7Cti0xhXc
j3EDquOjuZQFqCYBP1ZTFYVZB6ZSqb9ziub1Dv4Qeamp
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:30:05 2025 by rpki-client