Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/YdrEYumUdtVM8J8IIs8UcIvimLU.roa
File: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (raw, json)
Hash identifier: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=
Subject key identifier: 61:DA:C4:62:E9:94:76:D5:4C:F0:9F:08:22:CF:14:70:8B:E2:98:B5
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 019424B3D7644E33F4E987479A9B5182C11B
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/YdrEYumUdtVM8J8IIs8UcIvimLU.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50981
IP address blocks: 91.216.61.0/24 maxlen: 24
91.226.190.0/23 maxlen: 23
91.226.190.0/24 maxlen: 24
91.226.191.0/24 maxlen: 24
91.226.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d7:64:4e:33:f4:e9:87:47:9a:9b:51:82:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61dac462e99476d54cf09f0822cf14708be298b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:ac:9e:95:49:d4:4f:85:11:43:64:73:64:
e2:70:ae:b1:31:4e:68:af:bf:b1:f1:41:29:86:1b:
89:25:6c:f5:41:01:7b:1e:0c:fd:f8:5a:30:28:05:
40:88:10:d2:e8:b2:b1:55:25:05:b5:0e:98:b5:ea:
ea:7e:2c:08:4f:e1:1c:0b:06:4d:6b:c2:8b:30:1b:
31:cc:e2:97:88:25:30:20:96:df:6d:c8:b6:58:5f:
f7:3d:e0:03:24:bf:af:e9:c9:57:85:99:87:66:51:
6b:68:dd:e5:6d:d6:9e:3f:7e:ee:e3:9d:b6:22:7b:
e8:7c:99:4a:3b:a9:1d:bf:93:f8:6a:b9:de:7f:40:
ac:f2:22:b6:fc:4d:62:d0:16:7f:6c:8b:03:58:53:
6e:14:ad:2e:19:b6:bc:76:ac:89:70:73:e6:19:fa:
49:c2:ad:60:4b:a3:e9:2a:1b:84:36:0e:19:20:a7:
ff:d2:0e:ec:ee:2a:06:be:78:45:87:08:bf:33:f3:
b4:7c:91:f2:58:d5:6b:6a:1d:28:65:98:02:86:ca:
89:14:f1:86:20:47:8d:bb:af:92:ec:ba:85:f0:f0:
d7:ea:65:30:bd:1e:f6:35:89:c5:56:11:60:c1:16:
89:59:c1:ec:51:9b:c0:35:3b:1f:17:a7:25:bc:d6:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:C4:62:E9:94:76:D5:4C:F0:9F:08:22:CF:14:70:8B:E2:98:B5
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/YdrEYumUdtVM8J8IIs8UcIvimLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.61.0/24
91.226.190.0-91.226.192.255
Signature Algorithm: sha256WithRSAEncryption
61:e7:30:22:e0:a8:07:a6:a9:0b:96:55:fd:09:dd:b3:94:fa:
6a:e2:c5:db:30:70:f5:63:a1:3d:8e:2b:ce:78:9a:0a:9d:56:
3a:19:06:3f:95:76:8b:98:23:8c:51:d2:b4:93:92:72:da:77:
df:aa:40:a9:29:e2:b8:a1:09:fb:b3:78:6c:86:8c:d5:c6:31:
c7:49:0f:0e:13:8a:6b:52:2c:46:cd:e2:a8:7e:91:fe:03:f1:
42:0e:d1:57:1f:5b:bb:9d:98:65:49:86:fb:27:10:89:3f:27:
72:a6:54:3a:64:34:59:22:7e:81:9a:b6:ab:31:96:c7:f4:37:
c1:03:42:b4:fc:63:11:3d:03:c5:3e:c3:fa:d8:6c:43:43:5b:
57:88:73:7d:d1:7d:54:be:bc:1a:32:74:8a:3c:9f:d3:b8:31:
f1:1f:7f:36:6c:3f:f5:dc:ab:68:2d:4c:ec:86:fb:7d:cb:b5:
f0:a2:ec:30:83:78:14:ad:e9:90:f2:6e:f3:7a:fd:ba:1e:2d:
5b:7c:b6:1e:c8:a9:38:f8:42:73:39:1f:85:28:db:e6:c4:50:
1e:09:97:cf:b4:87:b3:6d:ae:1d:6a:b0:e0:b1:30:95:e2:d4:
ba:6c:4a:0c:8f:81:b2:13:d2:ee:fa:f8:02:ff:1c:36:32:4f:
96:7e:d5:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:00 2025 by rpki-client