Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa
File: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (raw, json)
Hash identifier: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=
Subject key identifier: 11:5F:02:E5:4D:67:87:75:16:45:56:72:65:6C:B8:0B:B6:97:1B:7B
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B293AE31245E4B264E33437104C60C
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.237.174.0/24 maxlen: 24
91.237.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:93:ae:31:24:5e:4b:26:4e:33:43:71:04:c6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=115f02e54d67877516455672656cb80bb6971b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:50:6a:9f:09:ff:ce:00:3d:b7:8a:c1:a1:
e5:a1:e9:27:b9:3b:c1:eb:71:34:2f:36:0a:44:20:
ae:2a:e2:8c:f5:50:8c:96:48:cf:5f:74:15:60:49:
a7:58:6e:31:12:67:ed:17:26:9b:b4:53:2c:36:06:
0f:3e:5d:5d:f7:67:d2:ee:3d:09:df:80:c7:4d:d7:
4e:e8:d6:05:f9:39:9d:af:e4:4a:83:c3:32:db:31:
4c:af:86:0d:35:a3:4f:90:d1:2a:65:f3:60:74:46:
88:3f:8e:ad:1d:05:85:72:03:e7:e3:44:a7:79:ca:
be:a7:f8:8c:76:6d:d7:96:68:e6:01:24:4d:2b:73:
24:f3:e9:48:16:0d:05:47:3f:d8:2a:1e:d6:36:d0:
a1:bb:a2:e1:32:79:82:a1:4f:ba:6b:23:8c:1c:03:
7b:e5:8e:2d:f9:14:4f:22:64:98:d2:57:d3:af:bb:
11:99:54:73:14:5d:ca:f0:d7:c2:63:77:bc:cb:04:
d9:ae:4a:84:ef:60:6a:fa:fe:9d:b4:9d:76:ae:c7:
2f:69:16:34:4e:42:56:49:dd:22:e5:7c:67:3b:85:
83:2b:c4:20:77:8e:71:e2:09:59:17:e1:d9:8e:0c:
42:42:3b:2a:fb:e9:86:86:b9:be:82:23:e8:46:d0:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:02:E5:4D:67:87:75:16:45:56:72:65:6C:B8:0B:B6:97:1B:7B
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:9f:e4:a9:21:09:b9:d6:c1:c6:a7:08:8a:aa:82:05:9e:4c:
f5:a1:56:78:01:71:04:90:1e:0e:8c:07:5f:97:cf:d0:40:88:
0c:94:78:c0:c7:fa:bd:e8:b9:eb:70:9c:e8:f7:d6:30:c5:03:
b5:80:7a:37:48:ee:ab:79:d0:23:4e:94:c5:68:ce:05:df:c8:
d9:5a:61:46:75:5d:af:2a:36:70:95:87:56:a3:e6:05:09:17:
12:80:50:07:bf:d8:69:64:45:c5:5e:35:38:7c:f7:cb:84:a9:
f9:68:76:b8:4b:ec:f4:90:a4:77:eb:a4:e2:e5:b0:82:e4:47:
eb:d8:22:ae:e4:9b:de:3e:24:14:3c:08:ed:03:ee:24:df:6c:
ba:03:3a:8a:aa:6a:82:ba:50:02:ad:a5:44:5c:d7:bb:43:9b:
46:db:19:e5:e1:52:43:66:a4:b7:a8:c4:a3:78:3c:a4:2a:7d:
65:0a:35:a4:e7:47:74:e9:f1:38:97:91:cc:1c:36:b7:9d:79:
58:8b:50:7d:7e:ea:0f:ef:73:4e:e6:f8:ee:2c:64:81:b6:2b:
7d:a0:a4:bc:3c:54:1a:ce:c3:02:34:e1:b5:dc:72:0d:a9:72:
83:ff:d9:b2:f4:23:f4:9f:4a:35:47:a3:a4:af:d9:29:27:21:
10:b8:47:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:44 2025 by rpki-client