Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/xXmylsNIs75YVB4GEqmFrbYzlMQ.roa
File: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (raw, json)
Hash identifier: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=
Subject key identifier: C5:79:B2:96:C3:48:B3:BE:58:54:1E:06:12:A9:85:AD:B6:33:94:C4
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 0194228DE008444AC7903FC4F665C8B0F2D4
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/xXmylsNIs75YVB4GEqmFrbYzlMQ.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210593
IP address blocks: 91.247.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e0:08:44:4a:c7:90:3f:c4:f6:65:c8:b0:f2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c579b296c348b3be58541e0612a985adb63394c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a0:1f:71:f2:90:38:0a:dd:40:37:7a:2f:f3:
ba:2d:83:dc:9e:d2:2f:0b:98:f1:49:70:37:17:8d:
4a:7c:b6:f3:2a:63:36:76:f3:27:f0:df:d9:21:99:
5d:a0:54:4d:97:f2:09:39:6c:f3:bf:d5:ee:32:94:
e7:4a:b9:4a:4c:3f:4b:f8:eb:fe:d6:b7:a2:a0:65:
97:1c:5c:cc:b1:e6:9c:31:42:f1:0a:50:ee:97:ef:
64:c1:7d:9a:1c:53:21:69:4e:bf:d0:20:ac:91:e7:
4d:62:4d:90:32:16:4d:53:9c:e0:8a:54:6b:b5:3b:
89:20:e1:08:76:d1:2c:77:e6:5e:d6:58:51:fc:53:
ef:a6:db:15:30:8f:46:c6:eb:44:52:e9:75:74:3c:
86:50:49:54:92:10:44:79:95:dd:22:a6:19:8b:4b:
fe:5a:ab:d1:a6:32:e8:4d:42:9a:c7:a9:3d:ca:e1:
74:c8:69:cb:80:b1:68:aa:71:9d:e5:f2:32:70:ab:
cf:97:12:0f:19:80:b0:9f:45:52:8f:5e:73:b9:b5:
be:98:3c:bc:91:ec:d4:1e:9c:ac:db:0f:35:38:43:
b5:31:65:9d:88:92:59:81:37:ef:b6:3e:b9:cc:c3:
37:55:5b:52:0b:15:41:1b:87:d9:56:a2:5b:6c:88:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:B2:96:C3:48:B3:BE:58:54:1E:06:12:A9:85:AD:B6:33:94:C4
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/xXmylsNIs75YVB4GEqmFrbYzlMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:24:96:70:a0:7e:d1:3a:b1:56:c7:30:e5:d1:8e:e2:d6:6d:
bb:37:4c:af:72:26:fd:d4:f4:35:3b:25:30:42:44:a9:e1:21:
d5:db:04:3d:06:25:cc:28:ef:7e:a5:c2:f2:83:cd:37:a2:80:
7c:d1:8e:c9:3b:4f:88:2d:04:4b:1b:fa:0b:ea:46:38:30:eb:
36:f1:0c:c5:8e:37:a4:8a:c5:87:3a:be:82:8e:e0:df:94:ad:
ff:4e:03:51:6b:a0:7e:7e:49:01:70:41:86:34:cb:aa:8e:25:
08:55:ad:c4:c5:c4:88:50:8b:37:f8:3c:fc:68:65:ad:e1:f8:
98:c5:ed:cd:0e:49:de:f6:aa:bd:55:ec:44:c6:e9:1f:f7:a1:
4c:2f:d4:d0:b4:74:ec:56:89:43:f6:61:fa:c4:03:53:8f:de:
12:b8:f0:fc:42:25:29:11:c8:ad:8c:a4:d3:51:42:e2:4c:1b:
52:1c:1f:66:56:6a:36:ca:51:71:5c:75:f0:5c:2e:71:d0:b0:
24:f4:e7:00:09:ad:e3:fa:c5:92:42:f9:bf:53:e1:b6:8c:55:
d4:ce:40:1b:df:55:0c:51:72:0e:11:18:b1:f2:81:00:74:6e:
9f:b0:e7:b2:0d:5a:7e:3d:11:24:9c:50:b3:96:5a:86:c0:03:
99:e8:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net