Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/evKhJ57xaSzVNl3Qur7cE-8m3B0.roa
File: evKhJ57xaSzVNl3Qur7cE-8m3B0.roa (raw, json)
Hash identifier: aCKoxKyHcj4KLd0GXx48dLEfPi6FKkTqW5i/PZZzxQY=
Subject key identifier: 7A:F2:A1:27:9E:F1:69:2C:D5:36:5D:D0:BA:BE:DC:13:EF:26:DC:1D
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 01942068642EA2D21F51ED57551B7080EC55
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/evKhJ57xaSzVNl3Qur7cE-8m3B0.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57920
IP address blocks: 91.236.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:64:2e:a2:d2:1f:51:ed:57:55:1b:70:80:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7af2a1279ef1692cd5365dd0babedc13ef26dc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:b0:ee:cb:76:c6:0a:ee:77:7c:6e:ac:3b:
d3:a2:1e:74:04:69:3c:f0:c4:1b:65:24:96:b4:7a:
6b:ce:a4:0d:d1:19:9d:4f:be:86:34:24:93:cc:a5:
ea:06:15:9f:3f:bd:62:e7:9c:c2:8f:10:44:50:1c:
5d:fd:92:96:8e:78:47:61:ad:5f:69:e2:ff:24:bf:
bb:bc:65:6b:5e:41:15:75:98:2d:c5:96:77:17:bf:
dd:b2:13:42:5a:9d:a9:7f:b3:1d:79:dd:9c:7f:a9:
61:47:01:23:bd:5e:b9:c4:90:d9:26:df:c0:ec:ec:
ba:56:d3:83:5b:6b:1d:65:63:13:ad:b0:7e:a8:d2:
8e:84:b4:ce:de:49:f0:76:e8:40:69:8e:ea:23:62:
57:43:17:94:dc:19:8d:7e:b1:1a:8e:de:df:29:7b:
de:53:b9:de:c7:31:75:40:06:c1:33:17:db:dc:31:
9b:16:e9:41:57:37:7d:7c:ad:18:de:a8:c5:07:14:
81:0d:b0:5d:bd:14:af:6d:2a:5d:a3:23:4a:a2:b4:
c2:5f:34:ab:1d:e6:0c:ba:c4:4b:e8:2e:f8:34:c3:
6a:20:6d:f1:6d:e1:8f:af:63:e1:7b:7b:c4:fc:2c:
c5:4c:8c:7e:9d:c8:92:5d:86:b3:52:9c:37:f7:0b:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:A1:27:9E:F1:69:2C:D5:36:5D:D0:BA:BE:DC:13:EF:26:DC:1D
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/evKhJ57xaSzVNl3Qur7cE-8m3B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.182.0/24
Signature Algorithm: sha256WithRSAEncryption
86:31:40:6d:95:cb:67:bc:19:9c:a6:48:d3:9b:5b:8a:69:a4:
c3:11:23:aa:91:d7:f6:d3:b9:7c:7b:2b:b5:a2:cb:65:85:61:
d7:2b:c7:96:27:00:6f:22:47:48:24:e8:ba:73:e0:90:66:6a:
43:d3:d6:b2:f2:7a:1d:2a:11:11:d0:b6:84:d9:06:b5:8d:a7:
35:49:ea:f9:c2:88:ba:bd:c8:1e:b2:ef:b4:ee:a2:bb:7c:cb:
5c:ae:b2:43:c2:57:2c:55:71:75:41:63:a1:4c:d4:ac:e5:cf:
51:01:bf:a3:9b:ca:4a:7d:81:fb:b3:ce:6f:40:29:d8:61:4c:
fa:8a:ba:a6:c4:21:28:88:0c:2f:dd:3f:ef:9f:31:30:1c:08:
af:32:0d:2c:e5:32:da:67:bd:a9:0c:54:d6:9d:f9:7b:9e:9e:
64:b0:5d:81:0c:b2:5e:2e:fc:9a:50:9e:ce:6d:84:1b:7d:69:
fd:c1:12:11:6a:79:fc:40:44:b4:6e:cd:b3:3e:87:5c:21:a4:
03:da:e6:63:94:64:91:43:3d:72:54:34:2b:10:dd:3e:b2:03:
18:35:58:18:38:d5:c8:ff:30:d7:9f:fa:94:b7:16:69:b5:d2:
7d:00:89:84:94:ff:55:d8:73:f7:77:72:60:1f:bf:a0:dd:b2:
07:e4:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:35 2025 by rpki-client