Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/EEK5h733GgwCs0WLVpqLrGo9ZG0.roa
File: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (raw, json)
Hash identifier: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=
Subject key identifier: 10:42:B9:87:BD:F7:1A:0C:02:B3:45:8B:56:9A:8B:AC:6A:3D:64:6D
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 0194282708F0A9DCD3FAFB0543F8739F97F0
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/EEK5h733GgwCs0WLVpqLrGo9ZG0.roa
Signing time: Thu 02 Jan 2025 17:53:54 +0000
ROA not before: Thu 02 Jan 2025 17:53:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214422
IP address blocks: 77.91.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:08:f0:a9:dc:d3:fa:fb:05:43:f8:73:9f:97:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1042b987bdf71a0c02b3458b569a8bac6a3d646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:94:c9:fe:6b:55:94:18:13:1e:cb:98:25:
6c:f9:f0:8d:b9:73:e1:ce:2d:c7:36:6c:d5:fe:c3:
44:c6:23:86:3f:91:d1:9b:7b:5b:e4:77:63:ba:93:
74:be:c8:8f:80:00:7d:d5:cf:4c:87:fa:11:54:49:
d2:3e:20:a4:6d:cb:a3:4f:d0:f5:50:0a:ec:10:bd:
07:7a:fe:b1:38:ed:e5:3a:9a:ca:c5:d0:8c:a5:c4:
7d:b7:e9:da:fb:42:76:e1:a5:9a:a1:1c:d3:da:f9:
3b:7c:ef:66:57:56:8a:bc:53:b2:1f:c3:90:81:6b:
c2:c2:e0:ea:86:e7:03:d0:4d:93:4f:ee:b3:e9:47:
2e:d0:98:35:91:56:fb:f7:26:a4:8b:f8:c8:72:97:
2e:85:f6:d1:29:7d:14:dc:b1:ed:67:4b:21:5e:a7:
24:31:4e:1e:5f:c1:5d:3b:40:79:f3:d4:c7:60:5b:
6d:d4:5f:82:8e:ef:38:7c:c7:f9:93:24:fe:01:d9:
13:52:e9:28:b1:17:82:e1:f2:c9:27:ae:3c:2b:a8:
e0:e2:a0:8c:61:b0:d7:2f:3a:df:04:50:db:7f:97:
8a:a7:cf:b2:b7:74:ce:56:49:57:92:38:9a:92:31:
81:41:b2:af:2e:f3:36:53:c2:9b:44:81:52:91:a2:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:B9:87:BD:F7:1A:0C:02:B3:45:8B:56:9A:8B:AC:6A:3D:64:6D
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/EEK5h733GgwCs0WLVpqLrGo9ZG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e7:7b:97:3d:03:53:d1:e3:12:91:b3:b6:0e:b2:cf:44:76:
03:02:a1:b9:0b:5b:46:d2:10:05:0c:f3:35:9d:c1:bb:e0:6f:
bb:02:d3:b6:06:6e:25:9c:95:6b:a1:6e:ac:82:71:f5:e4:c7:
4f:a0:e2:50:1a:ac:fa:ea:a0:f8:8f:55:fe:82:59:87:11:3e:
0f:a2:5e:b8:b0:a2:19:e3:aa:65:18:d0:bd:d7:b6:66:6f:06:
23:ac:5c:dd:e4:4f:90:85:94:23:19:1f:66:d2:27:21:c6:b8:
c8:9d:72:c0:c6:59:92:5c:e8:f7:d1:4b:6d:0b:f9:e2:a5:65:
43:0c:51:d5:dc:a2:2f:10:77:a7:80:de:d2:58:6b:7e:13:d2:
4e:79:45:4e:6d:f5:06:f5:1b:04:cf:eb:00:e0:50:05:42:a1:
88:ab:d8:27:13:aa:f4:4a:93:57:db:6e:ae:8e:5b:34:db:5c:
4e:04:b9:74:00:fe:c6:7c:db:45:e1:eb:e4:5a:88:57:6d:26:
2c:30:26:91:1d:39:fa:33:06:c4:66:c1:75:b6:bd:da:df:b6:
3c:fb:d6:d6:80:b7:7d:08:00:6e:a2:70:61:46:48:7d:7f:01:
4e:bb:40:cf:8f:c9:21:88:37:29:28:ba:14:68:c4:f7:6a:e2:
a7:ec:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:09 2025 by rpki-client