Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7-iKgq_egyYwcadsMDWwyFWqLlo.roa
File: 7-iKgq_egyYwcadsMDWwyFWqLlo.roa (raw, json)
Hash identifier: JZB2sXO6oOa8aKp3FuzQIf3wYfe4hIYqBJM+BUdhsu8=
Subject key identifier: EF:E8:8A:82:AF:DE:83:26:30:71:A7:6C:30:35:B0:C8:55:AA:2E:5A
Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial: 019427B47CEB5493DA2F659EBA299456FDC9
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7-iKgq_egyYwcadsMDWwyFWqLlo.roa
Signing time: Thu 02 Jan 2025 15:48:47 +0000
ROA not before: Thu 02 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 91.108.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:7c:eb:54:93:da:2f:65:9e:ba:29:94:56:fd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Validity
Not Before: Jan 2 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe88a82afde83263071a76c3035b0c855aa2e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:7e:94:a2:74:83:ca:41:ba:af:bc:49:6e:
ff:53:52:a8:78:4e:6b:06:03:8e:8e:1a:6c:58:67:
98:a5:e7:65:de:88:6e:10:15:7f:6c:15:7d:f3:ce:
53:74:51:70:39:a3:05:0b:c8:12:f6:59:2d:08:94:
a6:3f:30:35:a2:df:a8:6f:93:5d:ff:41:60:e5:5e:
61:16:04:09:7e:f8:d0:98:85:c0:0b:8f:76:5a:9b:
08:23:d3:50:e5:82:f8:e6:28:ef:2e:ae:d7:53:82:
a5:58:4c:ea:d3:06:a4:d4:f0:a4:8e:9d:a7:a3:24:
8e:d7:dc:fb:46:74:d5:14:1e:40:02:13:f8:85:ef:
3c:d5:75:96:bf:9c:a7:a7:92:74:54:2a:cf:55:a2:
72:8e:44:ce:2f:0b:7a:8f:52:7f:e0:ac:da:a1:7f:
f0:cf:38:94:70:94:8f:e2:4b:ce:93:e0:fb:bd:e4:
0f:82:04:d7:1f:00:6d:db:fd:46:98:6c:5e:0b:84:
1f:0d:66:95:c1:5a:ff:b6:4f:0b:3c:24:f5:fd:2f:
eb:d9:15:bf:28:6a:50:8c:88:e3:0b:21:5d:1e:d6:
7e:54:8c:30:19:05:a5:a6:9b:03:75:f6:09:7a:54:
03:d3:19:42:35:b1:02:ef:8b:07:d1:8c:57:74:cd:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E8:8A:82:AF:DE:83:26:30:71:A7:6C:30:35:B0:C8:55:AA:2E:5A
X509v3 Authority Key Identifier:
keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7-iKgq_egyYwcadsMDWwyFWqLlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.189.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:dd:7d:4c:ab:8d:9e:86:97:cb:02:9f:1b:e5:1e:c4:54:14:
15:7d:55:18:5d:06:f0:ac:56:d2:ba:4e:b3:b9:e0:aa:53:df:
62:f4:4f:9f:54:d8:a3:6e:32:20:d3:73:a2:9e:44:20:fe:c7:
db:5e:dc:08:77:ff:fd:cd:d4:3b:e2:e8:13:d8:68:d3:30:0a:
87:0a:c4:df:6d:66:f5:71:c4:e6:6e:4a:83:ac:94:eb:6d:f5:
73:a3:a8:79:92:e7:9e:1d:e7:a6:98:b6:1e:7c:57:53:47:34:
8e:f3:8c:44:ef:15:ff:ce:5c:32:fc:c8:2f:2d:40:b7:f5:1a:
11:c5:86:c3:26:b7:83:bf:90:ff:2c:df:37:e5:20:d9:6e:87:
5f:4f:99:05:65:f9:b6:0a:76:d2:c1:b6:b5:60:cb:fb:38:ce:
80:0d:92:8e:28:1d:83:b9:1e:f3:b8:73:23:8c:70:15:9a:a2:
ef:94:38:14:5b:dd:e8:5e:3b:8b:1f:d3:d7:8e:c5:5d:34:f4:
fc:98:c1:89:9e:9c:16:1a:3f:65:00:89:a0:29:a4:71:10:4c:
4c:f2:c3:9a:c2:bd:e1:19:93:8c:ce:10:73:e5:c5:41:d1:b1:
5c:ee:50:7e:e7:28:b2:1b:96:1b:d7:9a:a8:44:bb:7f:ef:b6:
8e:6f:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:39:08 2025 by rpki-client