Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/dcPmo2XYjicBKISwFo1ah0M8EAk.roa
File: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (raw, json)
Hash identifier: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=
Subject key identifier: 75:C3:E6:A3:65:D8:8E:27:01:28:84:B0:16:8D:5A:87:43:3C:10:09
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019426D9D13BADA553C068D2C692B08B9E01
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/dcPmo2XYjicBKISwFo1ah0M8EAk.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59393
IP address blocks: 91.235.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d1:3b:ad:a5:53:c0:68:d2:c6:92:b0:8b:9e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75c3e6a365d88e27012884b0168d5a87433c1009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:5f:0d:1e:3b:b9:39:db:aa:0e:94:5e:9a:
f9:4b:b9:85:b9:3a:3a:b0:9b:5b:a9:a0:97:bb:c0:
e3:e6:c4:bc:86:47:2e:95:a3:7a:b0:ed:97:33:4e:
f3:56:a6:3f:a4:25:c9:50:71:0d:69:4c:fd:2b:ed:
2f:6b:e4:c0:e5:ea:7e:8e:b0:6b:1f:8d:7e:6f:19:
1f:0b:d3:51:94:f5:49:94:45:af:87:9e:75:5f:83:
3f:c6:90:7f:ed:38:86:1a:6b:93:73:5c:be:0d:1d:
28:80:a4:82:53:89:3f:7b:b5:cf:98:ac:f9:b7:9b:
f7:64:74:c8:2b:5c:31:c3:04:bf:c7:15:f9:d2:8a:
89:67:cd:ed:e2:d6:eb:39:44:05:61:7e:24:f3:7a:
1b:20:66:02:31:a6:2c:c3:c6:98:8b:6c:c9:18:d3:
e8:6e:b2:8e:8a:70:79:87:78:b2:ca:8d:74:a2:29:
71:af:0f:5b:32:ff:2e:d2:6b:e8:70:6a:88:1c:7d:
a4:a6:29:2c:03:d2:6f:dd:e3:a4:6e:58:2b:f1:b4:
76:14:6c:a8:11:16:fd:f8:af:4b:c3:21:04:7a:d0:
27:17:84:88:2f:c5:ec:0a:3b:e9:31:cf:c0:0f:c8:
df:08:3a:4d:70:6d:f4:14:31:6f:64:dc:44:f9:f2:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C3:E6:A3:65:D8:8E:27:01:28:84:B0:16:8D:5A:87:43:3C:10:09
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/dcPmo2XYjicBKISwFo1ah0M8EAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:53:bb:b3:b1:a0:42:ac:fe:b9:b0:ae:ea:1e:e5:9c:e5:21:
41:3f:00:72:63:6f:bf:58:40:61:2e:e6:3e:1e:e4:48:bd:4a:
dc:6a:47:5d:aa:44:f3:77:86:18:58:83:3f:27:7c:83:9e:25:
14:82:66:b4:59:87:55:59:d0:ee:4f:d3:f0:4f:81:5b:71:53:
1c:ee:92:d4:9b:7c:48:60:2e:f6:38:eb:a7:f1:5d:b6:15:3a:
b1:99:12:46:d2:59:3d:49:b2:a1:42:af:cf:d1:99:6b:93:55:
13:20:c5:f1:d5:1c:cb:15:c1:88:15:7b:98:9b:64:af:08:f0:
ae:ca:a7:e1:be:15:00:97:88:03:a3:54:c8:7a:43:94:21:46:
90:db:d6:ad:3c:0c:8c:ac:27:f2:e6:bd:d4:46:cf:63:dc:8e:
3b:22:12:5c:48:57:35:0e:0d:6c:fb:15:11:c7:27:42:7a:8f:
2b:af:46:6e:bd:fb:f8:6b:23:30:cb:48:74:57:56:d7:e3:de:
30:94:01:e0:06:d1:c3:ba:36:bf:90:40:13:af:45:40:e8:4c:
06:04:59:d9:57:70:2d:cb:a4:d7:d7:04:91:23:f5:f3:74:29:
18:78:a2:bd:66:4d:c3:05:85:b4:a6:bd:46:5d:46:53:4e:65:
9d:2a:a9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:15:58 2025 by rpki-client