Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/23ykqlSoxhCVfaY9IS92DsNyWBE.roa
File: 23ykqlSoxhCVfaY9IS92DsNyWBE.roa (raw, json)
Hash identifier: EcOQRm/PU+EVIJkGyqpMDHmRcGo4Swnj7UgNzWEeajc=
Subject key identifier: DB:7C:A4:AA:54:A8:C6:10:95:7D:A6:3D:21:2F:76:0E:C3:72:58:11
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 0194266B76458E9375BF0EB94317AB90EFF7
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/23ykqlSoxhCVfaY9IS92DsNyWBE.roa
Signing time: Thu 02 Jan 2025 09:49:24 +0000
ROA not before: Thu 02 Jan 2025 09:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42563
IP address blocks: 91.197.56.0/24 maxlen: 24
2001:678:41c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:76:45:8e:93:75:bf:0e:b9:43:17:ab:90:ef:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Jan 2 09:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db7ca4aa54a8c610957da63d212f760ec3725811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:38:a7:d1:65:b0:7d:ae:a3:dc:55:13:b4:d3:
ed:d7:50:6c:fc:e7:0e:0e:cf:f4:92:d9:16:30:95:
a4:9a:c8:c1:96:9d:15:a0:30:58:13:5f:a7:51:f2:
f6:cc:39:34:c5:24:e2:a9:ca:56:b2:58:12:7d:f1:
2c:03:1b:b1:68:99:8c:6d:e5:23:9d:e4:cb:33:31:
bf:7f:c8:eb:1f:7c:00:d9:b1:01:5e:be:44:7c:7e:
27:4f:9e:a5:f7:32:95:7b:59:18:ef:fa:e1:0c:c8:
fe:1d:a8:7c:8b:11:24:37:69:ec:fe:3b:17:22:a7:
6e:1a:5e:97:17:cb:e8:7e:b1:0b:50:b7:5f:0d:6e:
d6:00:4b:d3:8e:d9:7a:cf:8c:f9:d1:31:fd:a4:a5:
96:91:73:91:c0:b3:95:04:e0:e0:a2:35:c3:a6:57:
d4:3a:9b:cf:7b:d3:21:85:67:41:7a:33:25:61:e0:
c3:3e:65:fc:64:fa:b8:20:7d:8d:97:0f:f9:b0:a3:
6d:9c:74:66:29:0d:07:35:a1:09:33:20:9b:59:d1:
92:ab:43:81:64:01:63:58:1f:2b:c4:e3:15:80:c2:
f3:93:d7:29:6a:ae:9b:c1:e8:c3:71:8b:ff:ef:ad:
0e:4f:f3:e6:0c:a5:d7:26:fd:d1:24:47:81:b6:ce:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:A4:AA:54:A8:C6:10:95:7D:A6:3D:21:2F:76:0E:C3:72:58:11
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/23ykqlSoxhCVfaY9IS92DsNyWBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.56.0/24
IPv6:
2001:678:41c::/48
Signature Algorithm: sha256WithRSAEncryption
92:bb:17:37:d3:f9:be:28:b1:14:f4:03:65:ff:b4:04:a2:bf:
fb:36:99:c8:c0:3c:a3:08:7b:ae:d3:4d:e0:e6:71:10:ad:44:
cf:93:74:7c:30:47:f6:cf:d9:ce:f8:dc:8f:79:ce:1d:52:34:
a8:86:88:27:92:d8:b3:04:d5:c7:10:28:66:05:86:52:86:07:
65:2a:c8:18:78:2c:82:dd:f8:20:e3:7a:c2:98:9c:ac:c3:4b:
e5:8f:f3:02:22:0f:72:18:d2:bc:ed:2f:62:b4:1c:e2:83:00:
00:32:ff:05:d3:c1:f2:8c:ec:3b:0e:07:28:d5:c8:02:b3:8b:
00:6e:df:fb:ec:9b:8d:36:4f:91:55:3e:7f:b4:d2:99:1e:cf:
bf:27:9f:8d:61:29:cf:cf:d9:8a:ea:70:55:0f:77:2b:bb:c2:
1d:5d:b6:43:af:39:64:8d:1c:48:9d:41:fd:da:b3:32:2f:35:
7a:a5:2c:8a:51:e6:52:3c:32:7d:26:84:90:1a:6a:64:2a:37:
4d:28:56:31:65:ee:d4:38:7f:21:16:89:3e:ff:be:a6:2b:e2:
31:33:61:23:a2:02:9e:b7:0a:dc:6c:18:70:16:b5:1f:d3:2a:
fd:6b:3c:7b:91:f5:31:b5:4d:a4:74:b8:9c:f5:da:0a:12:90:
8d:16:cd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:02 2025 by rpki-client