Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa
File: eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa (raw, json)
Hash identifier: uCPWdRUrjQcc9uIJEuG8eyiVfoHC/vX0+wXoSm20VqM=
Subject key identifier: 78:48:9A:42:DE:99:7B:D5:B1:8E:B6:4B:F9:DE:9A:36:A2:89:38:26
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 0194228D2A43AB694C5C266011AF59BEA5FE
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa
Signing time: Wed 01 Jan 2025 15:47:44 +0000
ROA not before: Wed 01 Jan 2025 15:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58102
IP address blocks: 91.238.208.0/23 maxlen: 24
2001:67c:1048::/48 maxlen: 48
2001:67c:106c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2a:43:ab:69:4c:5c:26:60:11:af:59:be:a5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78489a42de997bd5b18eb64bf9de9a36a2893826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:d2:0a:5a:dd:a2:75:0d:24:f9:7d:a0:c9:
02:b9:da:ad:37:08:7f:2e:70:a3:98:c5:8e:39:3e:
83:12:e5:be:3f:85:e0:20:64:f3:66:02:d6:fe:e0:
49:63:37:fc:af:6c:ae:b6:ad:dd:71:34:10:cb:7a:
dc:bf:a8:b2:e1:f6:57:49:1c:76:56:b3:9f:f4:de:
6a:29:52:fc:c7:73:2e:67:cf:5e:e4:75:a4:6b:8a:
65:b0:11:01:5f:c4:f7:da:87:3c:3a:81:a8:af:b4:
0b:d6:8a:2a:af:26:0b:7d:47:7f:1d:c2:c1:61:3d:
e9:87:bd:49:6e:89:c8:61:0c:28:f3:1d:a6:77:1a:
3a:fa:60:6c:eb:7b:d4:e4:1a:4a:4c:56:4f:14:c7:
55:62:71:3e:21:3a:96:a4:8f:17:5b:61:ad:1a:c8:
a8:dd:66:64:59:cf:b1:6a:11:6b:66:44:5e:05:b5:
c1:57:3e:5d:b9:8d:b8:dc:9f:84:11:8e:e6:14:42:
52:12:95:cb:f6:48:00:e3:39:45:1f:81:76:d7:06:
0e:92:da:3a:03:4f:46:2b:88:7e:72:0c:13:0e:90:
70:bd:3b:c2:f6:b9:5b:6f:0e:c3:01:58:60:3d:a7:
d1:3e:57:70:51:50:d0:a6:34:8b:03:dd:b4:d3:40:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:48:9A:42:DE:99:7B:D5:B1:8E:B6:4B:F9:DE:9A:36:A2:89:38:26
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.208.0/23
IPv6:
2001:67c:1048::/48
2001:67c:106c::/48
Signature Algorithm: sha256WithRSAEncryption
6a:19:46:78:6b:f0:16:d9:17:1a:7e:de:fa:a0:c9:33:6a:32:
a8:00:d7:8a:a9:21:e7:1f:55:42:0e:1f:e1:50:03:a1:fb:81:
17:8b:84:8a:d1:1d:51:bf:1c:59:d8:f7:ae:66:f6:10:42:a0:
47:d3:e3:af:d3:0c:12:fc:94:0d:38:7c:18:5f:9a:94:6f:fc:
fa:ad:98:aa:44:b6:66:9c:c0:d3:5d:6c:46:77:45:f3:22:79:
9b:5d:69:fd:7b:f1:14:eb:af:1d:91:6e:8b:99:c4:0e:db:e8:
7c:b6:24:a6:d7:13:ba:4a:31:3c:5e:de:b5:cc:c0:04:45:aa:
32:9a:4e:60:ce:08:52:c9:a2:dc:a8:5a:62:ac:2f:ea:bc:a9:
eb:07:04:00:51:70:d9:a9:d6:ff:77:13:c6:9f:9c:3a:c8:84:
70:b2:67:65:68:ba:c8:0a:00:f5:1c:f9:45:22:4f:f3:1c:53:
9b:13:9a:e7:70:ff:45:a1:2f:1b:52:d7:f5:61:60:b7:e9:3e:
26:1e:d6:14:4d:ef:17:35:e0:74:d6:f1:9d:c9:eb:e5:ba:b2:
e9:9c:42:44:0e:61:bb:90:6e:24:6f:2a:90:43:52:1c:ba:ed:
a8:f9:53:ac:09:62:7e:b9:c3:8f:e0:7b:31:0a:cb:c0:d1:56:
13:13:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:16 2025 by rpki-client