Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LROMxYALEFMHn1AY_w7rLpQ5Bns.roa
File: LROMxYALEFMHn1AY_w7rLpQ5Bns.roa (raw, json)
Hash identifier: DKh8dvoxhyQVI0YHnW1AJ+NClFy1Ek8hbyDpRKABgB0=
Subject key identifier: 2D:13:8C:C5:80:0B:10:53:07:9F:50:18:FF:0E:EB:2E:94:39:06:7B
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA847E75BCE83C062039E20422290
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LROMxYALEFMHn1AY_w7rLpQ5Bns.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214463
IP address blocks: 91.235.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a8:47:e7:5b:ce:83:c0:62:03:9e:20:42:22:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d138cc5800b1053079f5018ff0eeb2e9439067b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:51:ca:fc:53:67:86:02:94:82:33:60:38:
32:ca:07:c0:f0:b3:13:dd:22:fc:15:d8:b7:a5:c1:
8b:b3:88:d7:f1:2e:78:e2:99:a2:33:07:82:22:29:
53:97:87:fb:35:2b:33:45:06:c0:03:a2:e8:6c:24:
52:26:d0:e3:13:ee:5e:9f:b3:8b:14:53:cb:71:1a:
e5:c4:78:84:4a:16:18:17:df:c4:67:98:1a:10:80:
ae:69:6b:41:6f:13:23:83:6e:15:c9:35:cf:73:57:
99:8d:ac:d7:f5:be:01:b8:bf:51:fd:23:a5:ce:53:
2c:db:ca:cd:dc:9e:25:c0:a5:60:77:e7:d6:0d:88:
59:0f:4d:ed:42:6b:6a:ad:a0:76:58:c2:62:20:e3:
73:70:1c:01:d0:bb:71:1e:d4:a8:32:4a:28:b2:8d:
ac:d3:ad:dc:0a:1b:00:e5:6e:85:5b:59:b2:af:48:
bf:17:a2:0b:b9:3a:90:1f:95:f5:8f:2d:74:32:71:
a4:94:62:7c:f6:d3:95:95:a8:36:b9:7a:11:8a:a2:
d1:42:53:76:c3:f7:e1:42:ed:13:14:98:e0:d1:93:
90:39:04:e4:3b:99:22:90:c4:17:c2:01:2c:cb:6f:
e6:f2:16:d1:e5:aa:6e:25:39:b7:ea:eb:07:55:04:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:8C:C5:80:0B:10:53:07:9F:50:18:FF:0E:EB:2E:94:39:06:7B
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LROMxYALEFMHn1AY_w7rLpQ5Bns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.235.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1f:63:6f:0b:8e:97:5b:47:34:f2:a1:67:c5:f9:e1:cf:15:
e8:f7:06:b9:8f:83:70:c5:ef:98:14:e4:27:86:c2:a6:1a:88:
25:7d:e8:52:ad:9b:dd:b4:07:b8:9b:07:df:30:48:09:02:77:
ad:ca:ce:a2:b1:53:1d:23:02:98:ee:b3:61:12:14:d5:ab:03:
bd:39:80:3c:2b:4f:2b:8f:33:d9:42:65:97:12:05:89:4f:7b:
bf:70:20:bc:62:65:6f:cd:1d:19:40:c2:4f:13:9c:46:f6:5b:
07:d6:dc:0b:2f:00:1c:df:b6:60:e6:5f:01:51:ee:20:66:fe:
c8:8e:d8:22:b9:35:6b:b5:ff:dc:c5:4a:e7:69:cc:3c:f5:23:
63:18:ac:d2:7d:52:29:62:3e:a9:9f:8b:86:18:1f:22:df:f9:
f9:9a:43:b3:05:3b:c5:61:f3:b4:78:5d:6c:d2:e9:43:48:6e:
9a:78:e8:f8:c0:35:57:73:20:70:af:5c:a0:68:1a:e2:8e:04:
13:b4:48:bf:c1:1b:4b:ce:26:d5:e2:ef:58:f8:f0:c2:85:73:
d8:b5:07:c7:7b:b1:86:8a:3b:dd:b2:bb:3d:9f:7d:26:4b:6e:
44:0a:4a:7d:a5:1f:a7:f7:3f:53:c6:59:5c:65:f2:ab:1e:ef:
77:ce:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:24 2025 by rpki-client