Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/pXLAo5W-uViqoy6VRn7xh63-Zkc.roa
File: pXLAo5W-uViqoy6VRn7xh63-Zkc.roa (raw, json)
Hash identifier: yBl1r2cJ0Cow5+Dq2JidUHqYW1mvqRNbPSpwmQ9U1AQ=
Subject key identifier: A5:72:C0:A3:95:BE:B9:58:AA:A3:2E:95:46:7E:F1:87:AD:FE:66:47
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 01942444B73DADA60AB38D75F5E164F7A0E3
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/pXLAo5W-uViqoy6VRn7xh63-Zkc.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8953
IP address blocks: 93.113.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b7:3d:ad:a6:0a:b3:8d:75:f5:e1:64:f7:a0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a572c0a395beb958aaa32e95467ef187adfe6647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e4:2b:ac:66:2b:f2:5c:63:3b:44:18:f8:80:
a3:06:52:3d:76:5a:01:49:73:34:d5:c7:0d:ed:1f:
39:48:51:ca:d0:95:67:ba:1c:60:74:63:8d:85:37:
47:be:69:20:fc:f3:7c:c9:e0:7c:98:04:e1:05:ee:
1e:73:7e:47:8c:82:56:b3:2b:2f:c8:08:25:0e:37:
00:4f:2e:bc:8c:fb:5f:64:04:04:71:9a:97:96:1f:
b0:89:b8:81:8e:9a:fb:3d:08:7f:1e:3f:d4:b3:b8:
89:18:ca:76:bc:bb:43:ea:ae:7b:07:88:90:f6:52:
fc:1f:18:62:b0:8b:8b:4b:3b:44:0d:b2:f7:11:54:
5b:8f:ac:cc:a7:b3:93:15:d2:1d:80:64:e3:a6:ec:
40:20:7c:52:cf:08:58:49:93:25:c5:18:e9:a7:19:
28:18:26:f6:32:0a:0d:87:57:03:42:db:c3:5d:0c:
f9:06:df:84:81:4b:8f:db:e1:ea:2d:f9:9f:4c:e6:
9f:34:f9:9c:89:eb:7d:37:51:8a:59:2e:5d:d0:97:
36:8f:93:70:4d:d2:2f:c5:ad:f3:0b:ef:34:c5:82:
64:58:77:17:7c:0e:d3:aa:19:bf:35:27:2e:e3:f4:
79:d0:87:71:a0:b7:5c:b3:aa:0a:23:20:43:f2:61:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:72:C0:A3:95:BE:B9:58:AA:A3:2E:95:46:7E:F1:87:AD:FE:66:47
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/pXLAo5W-uViqoy6VRn7xh63-Zkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8a:31:d8:b9:95:31:67:7e:f6:02:da:0f:9e:34:79:33:ce:
5c:25:26:11:8a:4f:f9:30:d4:ef:de:24:12:55:cf:83:af:17:
0a:98:6e:fa:69:0b:fc:24:6b:3a:ca:8d:d2:03:a9:4a:51:83:
3e:3f:90:15:cd:d8:de:12:9c:5b:7c:93:e2:52:8e:4c:9e:89:
dd:1d:aa:c2:9f:0e:03:b7:7d:5a:d1:af:a9:f7:6c:7d:11:6b:
e8:f5:40:0a:02:79:94:c4:fe:70:13:80:81:21:fb:cd:5c:8e:
6b:d0:7c:b1:bc:98:48:bf:f5:ba:03:ee:60:ba:b5:ab:a1:6c:
ab:4e:23:3c:fb:34:54:cf:a4:6f:85:f3:ca:3a:b3:b6:0f:b7:
a9:93:e3:ce:69:42:77:62:7f:85:72:8c:f0:51:4b:96:f3:2e:
10:73:1e:24:2e:a7:03:71:b1:b8:2e:6f:95:89:e2:cb:97:d3:
b4:ce:22:4e:29:c0:1f:33:a4:76:34:56:1d:63:8c:e2:8d:26:
76:4b:0f:bd:f6:f7:54:98:f8:dd:ca:b3:7e:e9:fd:25:72:f4:
a3:5f:2c:05:34:bf:20:87:0a:dd:4d:54:03:15:98:b7:49:91:
31:ad:e9:85:b0:aa:44:89:b7:50:38:0b:55:8c:88:80:45:1a:
1b:3c:67:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRLc9raYKs4119eFk96DjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2
NDJmNTAwHhcNMjUwMTAxMjM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTcyYzBhMzk1YmViOTU4YWFhMzJlOTU0NjdlZjE4N2FkZmU2NjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+QrrGYr8lxjO0QY+ICjBlI9dloB
SXM01ccN7R85SFHK0JVnuhxgdGONhTdHvmkg/PN8yeB8mAThBe4ec35HjIJWsysv
yAglDjcATy68jPtfZAQEcZqXlh+wibiBjpr7PQh/Hj/Us7iJGMp2vLtD6q57B4iQ
9lL8HxhisIuLSztEDbL3EVRbj6zMp7OTFdIdgGTjpuxAIHxSzwhYSZMlxRjppxko
GCb2MgoNh1cDQtvDXQz5Bt+EgUuP2+HqLfmfTOafNPmciet9N1GKWS5d0Jc2j5Nw
TdIvxa3zC+80xYJkWHcXfA7Tqhm/NScu4/R50IdxoLdcs6oKIyBD8mEO7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKVywKOVvrlYqqMulUZ+8Yet/mZHMB8GA1UdIwQY
MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt
MTEyZTExM2JiN2I3LzEvcFhMQW81Vy11Vmlxb3k2VlJuN3hoNjMtWmtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3
LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXHwMA0G
CSqGSIb3DQEBCwUAA4IBAQCMijHYuZUxZ372AtoPnjR5M85cJSYRik/5MNTv3iQS
Vc+DrxcKmG76aQv8JGs6yo3SA6lKUYM+P5AVzdjeEpxbfJPiUo5MnondHarCnw4D
t31a0a+p92x9EWvo9UAKAnmUxP5wE4CBIfvNXI5r0HyxvJhIv/W6A+5gurWroWyr
TiM8+zRUz6RvhfPKOrO2D7epk+POaUJ3Yn+FcozwUUuW8y4Qcx4kLqcDcbG4Lm+V
ieLLl9O0ziJOKcAfM6R2NFYdY4zijSZ2Sw+99vdUmPjdyrN+6f0lcvSjXywFNL8g
hwrdTVQDFZi3SZExremFsKpEibdQOAtVjIiARRobPGey
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:18 2025 by rpki-client