Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/ElhCTce_xSO8HPW76yyUf_LCaGU.roa
File: ElhCTce_xSO8HPW76yyUf_LCaGU.roa (raw, json)
Hash identifier: PA5OZUyrzMtVScDxnWO+HPmkSkcuZ7txtCKDJtDJ7Ds=
Subject key identifier: 12:58:42:4D:C7:BF:C5:23:BC:1C:F5:BB:EB:2C:94:7F:F2:C2:68:65
Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial: 01942369C869A3D089CE68BCB83002AEAD79
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/ElhCTce_xSO8HPW76yyUf_LCaGU.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38930
IP address blocks: 91.224.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c8:69:a3:d0:89:ce:68:bc:b8:30:02:ae:ad:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1258424dc7bfc523bc1cf5bbeb2c947ff2c26865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:93:f0:eb:de:8e:c1:7e:01:93:59:ce:36:
f7:fe:ae:ba:bb:04:9d:bc:45:8a:98:59:0a:f8:db:
98:7d:da:d3:35:51:1e:46:f9:27:ca:cb:54:90:84:
7d:a5:c1:2a:71:d1:a7:55:c4:3e:50:2a:13:f3:2c:
c5:4c:48:88:45:74:19:d3:41:f8:93:7d:47:7f:75:
9a:25:05:8e:d0:f4:e8:2f:25:4c:9f:32:f1:34:6a:
31:3e:bc:73:86:cb:90:4b:78:96:53:6f:47:b6:60:
6a:25:53:d4:1d:2e:54:6d:80:8b:ca:65:32:eb:9a:
96:98:a5:30:ec:54:12:bc:ef:b0:14:06:79:89:bb:
8b:e3:d2:99:7d:e8:75:df:5c:17:f1:ec:9b:3d:74:
68:51:c8:f8:8c:d5:1e:fa:92:4c:bd:c0:a5:4f:88:
f9:d1:9e:0a:62:19:63:23:6a:47:43:cd:3b:58:87:
f7:17:56:9f:eb:f0:06:b6:5d:c4:a0:45:48:0b:e3:
f4:b8:67:6c:f3:6f:d4:ff:69:7f:0a:fc:43:2a:c2:
df:fb:52:75:b2:91:86:26:c5:67:68:b5:63:f8:ac:
2e:a8:02:0c:21:38:00:2d:4f:cf:47:d1:0f:b3:a7:
18:d8:7f:b4:ea:b8:38:ab:09:1d:ef:6a:df:9b:9b:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:42:4D:C7:BF:C5:23:BC:1C:F5:BB:EB:2C:94:7F:F2:C2:68:65
X509v3 Authority Key Identifier:
keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/ElhCTce_xSO8HPW76yyUf_LCaGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.122.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:6b:ec:7a:14:1f:20:a4:ef:8d:3d:c8:2f:5d:14:e8:68:f3:
8d:3a:96:7a:86:11:3e:bc:c1:71:74:f7:75:f9:ba:f1:22:6a:
9a:5d:99:80:76:b2:26:93:3d:fe:08:ce:77:32:20:01:88:97:
d2:53:94:32:1d:9d:e5:6d:8e:11:3f:1d:b9:67:01:bb:e8:c1:
b0:32:3e:2f:22:23:c2:02:00:70:3a:aa:76:92:7f:e4:1c:1b:
37:d9:a1:01:31:01:89:1f:58:8f:fe:20:e8:20:23:6d:85:c8:
01:33:cd:58:4f:b7:39:37:b2:a5:a5:f7:2b:e6:f3:37:0e:53:
9a:90:72:38:d4:f5:11:26:d5:08:b8:e7:c8:da:5c:a9:1e:a4:
3d:79:6a:5a:78:f8:50:4d:7a:23:ef:47:ef:c5:7b:37:82:e4:
af:01:4a:78:ba:3f:5a:02:c2:31:10:e7:5a:28:42:73:1e:a9:
8b:1b:3c:38:a7:17:de:ce:9c:5f:86:50:c2:3b:70:09:50:54:
f4:7e:92:79:84:7b:21:14:cc:ff:aa:2b:2a:c3:86:81:f5:67:
bd:40:57:45:c1:bc:4c:14:fa:4e:36:ae:15:55:47:0c:57:97:
1e:80:a0:ce:87:dd:ff:3c:72:00:6d:d2:59:06:c3:ac:ec:37:
a9:9f:8f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:49 2025 by rpki-client