Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/YPlrVoHYh91BGfKIK-riSMNPkDM.roa
File: YPlrVoHYh91BGfKIK-riSMNPkDM.roa (raw, json)
Hash identifier: rUAwyMrSIPpYNGCl+hxr0gD/er7wZt7UZ89gUWN3Vec=
Subject key identifier: 60:F9:6B:56:81:D8:87:DD:41:19:F2:88:2B:EA:E2:48:C3:4F:90:33
Certificate issuer: /CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Certificate serial: 0194282784B6B4A45FDE35C4D00375CA79ED
Authority key identifier: 6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/YPlrVoHYh91BGfKIK-riSMNPkDM.roa
Signing time: Thu 02 Jan 2025 17:54:25 +0000
ROA not before: Thu 02 Jan 2025 17:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49824
IP address blocks: 91.223.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:84:b6:b4:a4:5f:de:35:c4:d0:03:75:ca:79:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Validity
Not Before: Jan 2 17:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60f96b5681d887dd4119f2882beae248c34f9033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:b9:db:ba:73:ac:f5:15:90:a3:b2:9a:45:
fd:a4:3c:25:0f:56:02:f4:f0:de:23:7b:8a:45:20:
bd:63:fa:5d:6b:94:31:a4:81:2b:d4:91:42:28:e4:
86:9d:fa:9c:1b:f6:bc:bb:4b:44:21:c5:25:7b:53:
bd:c2:4d:fe:66:14:76:0e:78:8e:eb:f0:2a:7e:12:
91:81:db:c6:a1:00:81:3e:08:02:72:61:69:64:5f:
15:3c:02:43:76:e9:01:79:3f:3a:e9:88:73:ae:44:
5d:76:2e:12:bf:58:ea:58:dc:83:fd:bf:5e:5a:e3:
65:94:35:82:52:0f:53:1b:81:4e:c8:fe:cb:3b:98:
1c:b2:34:ff:08:2a:c5:37:38:44:d2:44:94:b4:c0:
3a:fe:e1:a2:13:36:63:7e:f9:eb:93:55:f7:73:e1:
1f:1f:40:cb:56:ab:87:c6:b0:9c:ac:45:92:df:48:
0f:ed:b1:b4:b8:b7:13:a1:ae:1b:2f:e8:f1:51:9e:
03:37:70:fb:18:c7:c2:b2:39:bd:4a:ea:e3:5a:60:
ce:38:71:e5:6c:59:dc:c0:d9:dc:a3:db:9a:9a:d4:
df:5e:e8:b6:94:b2:ed:b8:62:3c:35:80:17:f7:a8:
2f:f4:88:be:fd:ef:23:d3:33:69:c0:6e:5e:16:d7:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F9:6B:56:81:D8:87:DD:41:19:F2:88:2B:EA:E2:48:C3:4F:90:33
X509v3 Authority Key Identifier:
keyid:6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/YPlrVoHYh91BGfKIK-riSMNPkDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:36:0f:c9:3e:73:b3:8c:c8:72:9c:c3:a1:66:65:42:f9:7f:
65:6e:48:fe:d6:81:77:86:bb:a3:d3:08:23:91:01:29:1f:97:
ad:a2:09:b1:68:aa:02:62:6b:df:1b:c1:e8:77:1c:33:6a:84:
38:88:c8:4d:32:3f:5c:7d:21:b4:47:94:cd:3d:fb:a2:9d:a4:
68:fc:76:e8:ba:40:c3:ed:40:ac:a4:f3:e3:f1:9c:3d:a3:bd:
fa:6c:3d:90:e7:44:96:ef:c5:7c:7d:bc:d5:34:00:93:96:9b:
ad:3b:54:e2:91:a8:57:f5:0a:31:65:f2:be:b9:27:f0:9a:05:
92:1d:93:af:91:c5:f6:74:65:f8:ce:68:04:5e:62:d0:26:09:
a1:5a:5e:cf:6f:2f:6d:ff:df:d3:fa:08:60:74:57:1c:e0:63:
af:86:56:de:83:a3:3f:97:fb:93:5a:ad:41:85:2b:52:ec:09:
b3:c1:74:81:52:ce:be:fa:b5:a5:40:0e:01:2c:28:ae:ab:a6:
c1:d5:02:2f:ba:59:e1:3d:10:3e:ec:f1:f4:e8:21:f0:57:d4:
2a:05:94:a2:9a:b0:47:16:7d:67:8f:b6:d4:2c:af:0d:d6:ec:
07:c0:4e:b6:a4:fa:ac:a1:b3:35:3e:db:f3:6a:3e:a6:bd:51:
23:7f:df:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:32 2025 by rpki-client