Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/0KzLhKb17XBKAspL0tITGLTUcwU.roa
File: 0KzLhKb17XBKAspL0tITGLTUcwU.roa (raw, json)
Hash identifier: kx+Ci2kxj/1dvsWaPUnuJITt9VdC/yREDYgYDLym7xY=
Subject key identifier: D0:AC:CB:84:A6:F5:ED:70:4A:02:CA:4B:D2:D2:13:18:B4:D4:73:05
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA1672DAA6F3DE487032AD560C9F6
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/0KzLhKb17XBKAspL0tITGLTUcwU.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201786
IP address blocks: 91.239.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a1:67:2d:aa:6f:3d:e4:87:03:2a:d5:60:c9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0accb84a6f5ed704a02ca4bd2d21318b4d47305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:9f:ae:fc:54:5b:35:95:13:f1:39:67:1d:
33:72:85:16:01:ce:91:ed:76:1d:01:76:dd:e4:26:
52:10:4d:e6:5e:37:a7:1b:c0:80:e8:1c:91:cc:93:
6c:c5:e4:b2:29:cc:25:5e:fa:6d:f5:2c:5f:53:03:
be:f2:62:ea:77:6d:db:4b:01:91:fc:90:06:b0:36:
6a:14:4d:8a:f5:fb:49:fa:70:26:4e:55:0c:80:58:
ed:99:48:4d:b3:c8:a6:4b:c5:b9:dd:f2:97:b1:93:
81:cd:bf:24:18:37:8f:92:27:3d:a2:3f:51:5d:16:
45:06:57:f6:34:74:9a:6b:45:69:44:03:9a:f2:ee:
bd:09:b1:62:5c:4a:4c:ee:d5:b2:80:aa:af:bd:86:
c0:52:ad:95:e1:a1:69:19:37:01:71:d2:37:e2:de:
9c:f7:30:c0:69:cb:33:69:73:f9:c7:72:64:06:ab:
08:99:ab:3a:64:f8:ec:e4:9f:09:b0:cb:2d:45:de:
a4:46:77:c0:66:d4:57:6b:c9:f9:8c:56:19:c0:6a:
e1:e0:f3:87:d1:84:9e:3c:8e:bd:04:4a:7c:3d:be:
0c:cf:f7:f6:96:2d:3d:cd:aa:f0:01:c7:db:fe:67:
85:99:03:84:eb:c9:67:0d:70:9c:b4:82:a8:af:e6:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AC:CB:84:A6:F5:ED:70:4A:02:CA:4B:D2:D2:13:18:B4:D4:73:05
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/0KzLhKb17XBKAspL0tITGLTUcwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:94:e3:f1:5e:d7:2f:53:fd:0f:8a:7c:57:45:2d:a2:3b:62:
2a:6b:87:a4:af:45:05:1b:26:6d:7c:62:60:b9:4f:bd:33:ee:
25:92:01:fb:ce:66:1f:cb:86:35:8c:9a:2f:26:e5:59:ae:e2:
50:ff:9f:45:e2:15:83:e1:f1:b6:1f:6b:51:e4:77:8b:14:66:
53:22:7e:6c:7f:18:05:5a:98:62:ed:93:47:61:de:45:0f:f2:
55:9c:47:79:83:23:c5:d9:17:f4:6d:e2:91:80:9f:15:a4:eb:
24:83:40:2f:6d:7a:15:82:11:26:fd:75:d7:43:f7:b4:77:da:
4a:60:f8:07:0e:5e:7b:b5:7b:ca:e1:30:ee:69:03:ed:25:8c:
d5:3c:5a:63:38:c4:92:1c:0a:77:7c:a5:b7:92:6c:47:57:b9:
f6:e1:ea:28:5f:a5:08:5c:9e:cb:98:7e:15:fd:3b:e9:a2:78:
69:95:58:46:d3:e6:dc:c7:91:95:68:1c:00:e7:19:70:5c:31:
92:28:57:05:37:b0:b0:99:79:90:95:62:57:23:5d:ff:34:a5:
5f:00:97:95:ab:1e:b6:c3:c0:9a:e6:21:e9:b4:47:58:39:20:
e3:6e:6c:3e:34:15:5a:aa:46:f7:d4:11:29:14:18:45:09:5e:
aa:a1:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:13 2025 by rpki-client