Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/6lWYbK8jnsQYkYc7T4zN_V6coK8.roa
File: 6lWYbK8jnsQYkYc7T4zN_V6coK8.roa (raw, json)
Hash identifier: oD2ZLdtxObPkY+WJWRT30l3VTvZxC8dmopiLiRBmA6M=
Subject key identifier: EA:55:98:6C:AF:23:9E:C4:18:91:87:3B:4F:8C:CD:FD:5E:9C:A0:AF
Certificate issuer: /CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Certificate serial: 019425FDBF6A556486458591AF816D62ED8F
Authority key identifier: 1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/6lWYbK8jnsQYkYc7T4zN_V6coK8.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198716
IP address blocks: 91.236.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bf:6a:55:64:86:45:85:91:af:81:6d:62:ed:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea55986caf239ec41891873b4f8ccdfd5e9ca0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:fd:ca:a8:3f:f4:91:98:70:06:2f:03:10:
08:68:2e:e7:9c:df:34:ee:0f:2a:55:06:ff:0f:78:
8a:be:3c:8a:66:97:05:e2:9e:c8:ac:75:cb:e9:02:
c1:3a:39:ae:b4:2c:6c:8b:ed:31:8e:26:9a:61:d1:
aa:88:24:05:35:d4:6d:bb:c6:33:bd:fd:a0:ca:3a:
b1:ee:c3:13:80:5b:de:d3:61:57:c8:17:68:1b:d9:
67:e2:b7:2f:4b:4f:be:7f:c6:d7:b4:35:a9:e8:57:
07:88:4a:3d:6b:31:b7:e8:54:a3:b0:98:42:1d:ae:
b3:15:25:95:e7:73:a4:f5:24:01:fb:bf:f3:89:1b:
1f:16:15:30:63:28:56:81:e9:ac:b3:44:8c:61:b0:
9c:e0:2d:3f:f7:2f:e3:6f:39:e4:29:8a:88:b3:75:
98:4f:66:0c:5c:d3:e0:b1:02:2f:67:4e:f9:a4:be:
64:51:36:24:d0:fe:4c:ed:9a:97:4a:4f:37:23:2d:
38:2e:5c:ab:a2:d3:a6:d9:d3:b6:16:bd:a5:eb:74:
89:bc:04:9b:f9:15:0f:de:16:83:e6:9b:5b:f4:19:
50:cf:42:76:ba:d6:cf:ad:75:a8:3a:48:04:ce:e7:
58:b8:7f:3e:07:fd:91:9c:7a:1b:a9:c3:a1:f7:f8:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:98:6C:AF:23:9E:C4:18:91:87:3B:4F:8C:CD:FD:5E:9C:A0:AF
X509v3 Authority Key Identifier:
keyid:1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/6lWYbK8jnsQYkYc7T4zN_V6coK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.235.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4d:1c:58:40:72:8d:ee:31:01:ba:bb:94:10:6a:b8:59:de:
4b:6e:62:54:bb:e1:f1:8a:83:b4:1a:33:03:5e:6d:d0:d6:56:
98:dd:12:a4:14:49:c3:97:3e:9d:38:d0:b9:b7:b8:cf:b1:e5:
b1:e0:eb:79:f3:4e:98:f4:9f:15:5c:2a:32:07:df:8c:b0:8c:
1f:0b:0c:65:3a:10:22:d0:e9:94:68:b8:97:56:ab:a1:2d:63:
83:6f:4f:86:f0:25:15:2b:95:4f:11:64:6a:ad:85:8d:f6:83:
e6:47:55:d8:ce:b3:78:81:bb:0f:14:33:c9:ae:0c:71:55:da:
05:94:68:90:0c:4e:42:56:99:8b:1e:d0:a0:24:2a:b0:45:87:
a6:12:8f:9e:f5:01:c2:81:c3:a6:f2:e8:54:f1:e9:7e:24:39:
c3:de:34:8d:a0:56:31:98:aa:db:5f:5e:c6:7e:db:42:8b:19:
37:db:0b:69:01:ab:6d:53:29:21:e6:8e:df:cf:8e:15:e7:95:
64:28:ba:f1:d9:2e:8c:a3:a8:75:2a:4c:09:24:6e:88:d4:3d:
87:55:2a:f3:6c:cb:9b:12:67:cb:d1:61:4f:dd:13:41:5c:6a:
12:70:71:14:58:20:b3:bc:00:9e:8b:a6:20:d1:ed:e7:f0:83:
2c:f2:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:31:36 2025 by rpki-client