Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/yySGGL88ifuhtX4UWyplsao1PEY.roa
File: yySGGL88ifuhtX4UWyplsao1PEY.roa (raw, json)
Hash identifier: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=
Subject key identifier: CB:24:86:18:BF:3C:89:FB:A1:B5:7E:14:5B:2A:65:B1:AA:35:3C:46
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 019422FC403A5EB1C8B4441274031306724B
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/yySGGL88ifuhtX4UWyplsao1PEY.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.235.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:40:3a:5e:b1:c8:b4:44:12:74:03:13:06:72:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb248618bf3c89fba1b57e145b2a65b1aa353c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:12:42:1f:6d:8f:be:e6:86:3a:f8:c8:cd:08:
54:ca:dc:fe:01:5d:3c:bb:c4:a2:11:f2:24:3a:23:
e5:49:e9:97:f7:60:8c:31:9b:4a:d8:82:d2:5b:22:
a4:e9:a8:27:85:bd:ec:28:0f:fc:cd:c6:99:7d:d0:
79:58:d8:a4:76:2c:5f:19:ea:35:e7:50:c8:78:79:
93:3c:4a:2f:c4:bc:a4:36:df:e2:7b:e8:70:5f:fa:
d7:cd:59:9a:04:50:2a:ae:94:2b:48:8a:bd:42:20:
99:67:b3:95:ba:dd:05:a6:48:38:cd:b5:5a:cd:cb:
93:74:77:25:d3:0c:6b:4b:df:4b:66:e2:18:1f:dd:
45:e6:4a:7a:30:56:87:9f:60:86:24:99:08:70:1b:
59:c9:c2:97:bc:bb:7e:8a:a9:29:f6:24:5b:1d:46:
96:5c:47:24:f7:ad:f2:f6:17:93:f2:6b:d3:23:b9:
8b:8a:10:9c:ca:75:0f:84:ca:ef:0e:51:b3:c0:a4:
0d:9c:7f:6f:6e:b1:78:ad:38:bb:c9:87:6b:9f:aa:
f8:71:6e:97:0c:43:2d:39:02:98:44:c5:3b:63:4c:
eb:2f:27:06:5f:d6:83:5a:77:d1:e1:3f:c2:e8:f2:
05:81:b0:08:7c:41:a9:1d:80:02:3b:f7:38:54:da:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:86:18:BF:3C:89:FB:A1:B5:7E:14:5B:2A:65:B1:AA:35:3C:46
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/yySGGL88ifuhtX4UWyplsao1PEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.63.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9f:2f:f9:c6:79:85:4c:b1:75:45:cf:93:be:da:29:b8:4e:
48:40:4e:97:b1:09:c6:c8:5a:c4:be:82:7a:5e:11:8e:52:5f:
48:72:57:b0:ff:36:52:83:22:f1:f1:ad:b4:61:9e:28:0b:f8:
2c:2b:ff:d6:d4:02:4f:46:78:dc:22:8c:36:9d:a9:7e:1a:25:
26:13:2f:71:71:3e:03:a8:f7:4b:fd:9e:64:80:6f:b9:f1:29:
ee:65:8c:aa:8f:e4:d8:fa:1b:f3:3b:86:64:5a:16:10:29:6d:
7c:3e:f8:56:98:54:70:21:1e:83:0e:92:a8:33:d8:6b:fa:0a:
f6:9a:41:57:9b:7c:e9:9e:65:d4:d7:4b:87:99:4d:89:dd:57:
77:f0:bc:dc:17:44:b4:d5:18:1c:a7:ad:13:3d:25:36:9c:96:
5b:cc:fe:36:d7:8a:a7:e3:e8:13:25:da:c2:93:22:13:14:a0:
5a:28:d9:a6:4a:59:e2:fd:b6:23:45:ef:51:78:52:96:82:c3:
b5:f0:b0:74:81:02:e9:51:2d:b5:6c:33:5d:e3:92:71:73:9e:
a4:68:51:33:dc:cd:b9:c0:d5:9c:c0:48:08:19:ec:b5:70:92:
0e:ea:21:5c:72:02:d2:bd:d8:ca:3b:a5:f5:b7:6e:d5:b9:74:
22:f2:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:26 2025 by rpki-client