Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/yWsq8ztQpda_SybRwY3Ir3EqckU.roa
File: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (raw, json)
Hash identifier: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=
Subject key identifier: C9:6B:2A:F3:3B:50:A5:D6:BF:4B:26:D1:C1:8D:C8:AF:71:2A:72:45
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F0DE962963CE28751B4AADA015044
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/yWsq8ztQpda_SybRwY3Ir3EqckU.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48126
IP address blocks: 91.229.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0d:e9:62:96:3c:e2:87:51:b4:aa:da:01:50:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c96b2af33b50a5d6bf4b26d1c18dc8af712a7245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:c6:be:61:07:6e:76:0a:1b:73:38:5a:34:
64:d4:da:e5:4c:1e:37:1b:a9:d1:2e:27:a0:84:e3:
03:b1:fb:7d:5d:b2:2c:8c:69:a0:5b:33:80:e2:c2:
63:92:ab:6f:43:81:f7:b0:ad:a8:cb:70:8b:69:66:
f0:71:e6:b4:41:60:38:62:ba:14:4e:61:08:76:8c:
ed:90:80:2f:46:41:e5:36:62:d7:b2:7a:ca:5c:50:
ad:81:f8:49:45:7a:28:f6:50:8e:e6:f1:0c:49:b6:
63:0a:37:5c:9d:39:e5:fb:54:99:29:21:3e:d6:71:
27:d1:71:d0:63:0e:b9:d7:9a:b3:06:a7:2e:60:3b:
59:6c:46:83:65:35:d5:d6:e3:a1:42:b6:e1:ee:cd:
00:0a:61:20:af:e7:04:4c:48:ec:fe:a5:3b:ba:c3:
58:02:7d:91:30:aa:fa:31:eb:64:26:ab:cc:63:25:
fa:d0:e2:3b:d0:5b:27:90:d9:aa:a1:68:42:cd:87:
f0:24:f4:42:aa:e9:fe:1e:f9:75:9d:68:82:06:ed:
bf:c0:d9:ce:5d:0c:96:85:c1:c0:99:16:07:8b:75:
22:dc:4d:14:9d:46:43:e9:81:9b:cf:7a:67:56:69:
00:b2:c8:95:6d:a3:69:72:1c:ed:c4:c1:ce:d1:68:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6B:2A:F3:3B:50:A5:D6:BF:4B:26:D1:C1:8D:C8:AF:71:2A:72:45
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/yWsq8ztQpda_SybRwY3Ir3EqckU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.248.0/24
Signature Algorithm: sha256WithRSAEncryption
73:89:f9:50:9e:63:16:23:a6:a6:c2:2e:11:d1:ad:8b:53:ec:
44:d6:ad:e2:da:d9:4b:ba:da:e7:ec:06:bb:4b:a2:24:30:5f:
f3:44:7e:fe:f4:ae:1e:6e:06:16:93:63:7c:7a:fd:62:2e:4d:
73:1c:e5:0c:5c:86:23:5a:30:02:91:7c:51:4f:83:e7:49:e6:
97:de:4f:f4:7a:b2:23:18:86:8e:cb:f2:0c:89:54:93:3b:0c:
88:49:6c:0d:65:0d:14:0e:68:03:d3:ea:41:ff:71:c1:fa:c6:
02:31:4e:a0:ae:75:e5:ea:0e:79:9c:80:36:aa:8b:89:99:e1:
72:b7:bd:26:eb:08:d3:b8:67:ce:49:4c:7c:a2:a3:b7:fa:cc:
34:38:40:54:67:c9:b7:02:a9:ea:91:05:ef:ed:72:26:7b:d7:
bd:33:a8:bb:0b:11:b9:3d:e9:2a:21:de:3b:65:74:34:41:91:
58:7b:ff:33:df:c5:75:df:48:51:df:84:88:52:7d:72:15:8f:
39:6b:97:4d:16:da:eb:1e:eb:f1:44:82:ae:0c:69:7e:2a:a3:
83:1b:52:62:1b:3f:55:3e:22:dd:53:f8:58:2e:35:a5:cd:b3:
d8:66:2c:12:88:66:8f:c8:96:f1:e9:62:c5:7a:56:11:5e:9d:
a1:26:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:34:00 2025 by rpki-client