Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/yYfUODDume9xFNHrgw8kXHPMP18.roa
File: yYfUODDume9xFNHrgw8kXHPMP18.roa (raw, json)
Hash identifier: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=
Subject key identifier: C9:87:D4:38:30:EE:99:EF:71:14:D1:EB:83:0F:24:5C:73:CC:3F:5F
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 01941F8C049BCDFAAC9BF669A04D41E5553B
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/yYfUODDume9xFNHrgw8kXHPMP18.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207199
IP address blocks: 91.239.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:04:9b:cd:fa:ac:9b:f6:69:a0:4d:41:e5:55:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c987d43830ee99ef7114d1eb830f245c73cc3f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:13:fe:a9:d3:13:c0:91:d1:84:b3:97:93:
33:4e:99:c7:c2:62:42:eb:eb:e3:3e:01:bc:79:dd:
95:96:a3:85:31:81:25:5c:a2:6f:e8:ed:21:54:1e:
99:72:ff:e6:3e:06:83:80:5c:1b:f7:c1:03:a6:31:
b8:97:bf:ae:ef:4a:9a:af:bf:39:a8:1f:c1:12:10:
fc:ee:79:04:90:c0:2f:6c:14:49:f1:ad:cb:2e:28:
c3:f3:2d:29:8b:6b:d0:a9:13:c0:31:b3:34:b4:72:
8a:f4:80:4b:ec:e2:a3:79:51:2f:04:e7:09:51:7c:
d2:93:47:34:3b:6d:aa:ba:5c:bb:9e:c9:11:8f:58:
ea:f4:98:d5:61:b8:ee:54:76:9c:3b:fe:74:e4:61:
f7:bc:30:61:73:7c:da:81:3c:c5:e3:2a:eb:c2:b6:
d1:38:21:d2:73:e9:95:77:08:f1:d3:52:e8:a9:f9:
57:51:7f:e2:d1:d8:ae:80:08:97:f6:ac:01:99:af:
60:1f:ea:17:0d:4e:b5:f1:02:ae:07:b6:a0:58:bc:
60:fb:4e:54:0d:cd:3f:1a:8e:93:7c:aa:2b:63:04:
33:98:c1:2f:aa:9a:c8:b1:e6:2e:32:05:f7:55:f3:
d1:60:06:d4:ce:50:87:b2:94:50:04:99:db:34:fa:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:87:D4:38:30:EE:99:EF:71:14:D1:EB:83:0F:24:5C:73:CC:3F:5F
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/yYfUODDume9xFNHrgw8kXHPMP18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f1:70:a7:cd:e7:da:50:df:3c:c8:30:f7:13:f1:00:31:76:
8b:2b:85:61:84:2d:1f:94:a4:fb:24:c9:b2:55:1a:86:67:bb:
3d:7f:06:39:d9:c6:f4:48:b2:ba:9f:61:a9:26:49:b0:5d:de:
17:1a:9c:18:b0:99:88:ce:e8:80:05:57:57:de:86:ff:47:c1:
e1:81:0f:bb:1a:64:34:75:94:f1:f2:7b:63:69:93:a0:65:f4:
9b:f1:5e:f4:b8:3f:dd:e7:0a:d6:c8:82:0e:68:35:d1:46:93:
fe:f3:81:9e:50:a4:30:ec:fa:c5:71:70:3e:f1:32:db:4a:e6:
ad:2c:1d:24:50:ae:b5:bc:a9:c3:ae:85:d5:fc:12:79:81:8b:
d8:b3:b9:16:23:b7:25:bb:9d:00:72:c3:99:c5:e3:44:17:b0:
34:a8:71:3c:ed:58:dd:93:4b:9f:bb:28:90:88:b1:65:8f:7a:
a9:af:0e:e0:25:f8:51:9d:cf:00:26:54:59:2f:57:1a:8c:57:
98:fb:2c:80:06:a1:3d:c6:ba:8b:b0:29:01:ae:9e:d6:e5:93:
7d:c4:9f:e2:ca:9e:0c:15:8d:fe:2a:7f:42:da:a4:02:00:b6:
dd:37:30:5a:73:e6:c2:12:32:36:63:60:b9:3f:50:b4:e9:34:
49:be:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:44 2025 by rpki-client