Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EceYLCrZEcu-cSsXUmK_lmp1P4M.roa
File: EceYLCrZEcu-cSsXUmK_lmp1P4M.roa (raw, json)
Hash identifier: Crf2vzOeVcveVQapSgg6WsTWWB/To8z1K2ecZAkc1Bo=
Subject key identifier: 11:C7:98:2C:2A:D9:11:CB:BE:71:2B:17:52:62:BF:96:6A:75:3F:83
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01942748529D96E77A9C228B2D4593D846C6
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EceYLCrZEcu-cSsXUmK_lmp1P4M.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272344
IP address blocks: 91.109.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:52:9d:96:e7:7a:9c:22:8b:2d:45:93:d8:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11c7982c2ad911cbbe712b175262bf966a753f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:10:f0:5e:e2:0e:9c:4b:eb:33:71:7d:1c:
6a:64:35:ef:93:6d:7b:4c:4c:dd:7e:e6:d1:61:4b:
74:ce:37:2d:91:13:36:26:92:b9:8e:62:77:2f:b7:
90:cb:d5:99:b0:83:bb:cd:79:71:f0:fd:fb:19:95:
04:bc:10:10:a9:bf:0f:23:8e:3b:48:37:bd:21:b3:
46:a1:44:0a:0b:7e:6f:48:c5:ad:9c:09:f7:df:83:
96:e2:7a:f6:61:bb:5f:30:bc:3c:31:e9:70:34:33:
83:03:70:4e:64:cf:f8:33:35:1a:3d:a6:47:3a:96:
75:1f:27:6d:65:63:3a:e3:ea:27:2a:af:04:46:1e:
44:fc:95:17:33:69:ba:58:07:fa:ef:cc:46:1e:05:
b2:63:54:e2:10:81:f0:29:fa:3e:73:09:22:78:8e:
1d:d8:6b:cc:24:b4:7f:af:13:73:2b:e2:a8:1b:6e:
83:e9:ee:2c:c7:ce:e8:7b:fa:4a:8d:8a:42:98:a4:
c6:73:f7:b8:32:65:f3:8b:46:84:6a:0e:9c:b6:ea:
bd:eb:05:2a:fd:fe:f1:e3:0d:61:4c:85:20:84:58:
b0:0d:8b:57:b2:b6:d3:b9:90:74:96:55:d5:f1:38:
4e:81:69:99:6d:04:38:db:59:7b:68:c3:58:a0:52:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:98:2C:2A:D9:11:CB:BE:71:2B:17:52:62:BF:96:6A:75:3F:83
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EceYLCrZEcu-cSsXUmK_lmp1P4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:be:97:96:23:4e:0f:52:85:02:26:8b:7d:ad:da:45:b5:b5:
af:30:6a:45:75:16:ce:5f:1d:c5:e3:0b:f1:e3:4b:9c:23:5f:
95:69:58:60:cd:c4:a7:ea:1e:64:65:07:05:c8:7c:82:83:61:
9c:38:64:d2:89:a7:f4:1b:81:6b:fb:b3:58:b0:17:07:22:10:
d3:98:a8:9b:63:57:c5:31:a0:7f:80:cf:e9:57:17:72:e8:f0:
d8:78:69:2b:d9:0e:0f:fc:2d:85:dd:28:d4:be:c0:76:70:6e:
16:ef:54:a0:c2:2c:09:82:28:1d:4c:c6:00:6f:b8:9b:39:9f:
c1:20:1b:c2:7c:42:56:79:9a:da:b3:b9:e7:86:05:95:d1:3b:
d1:6b:34:73:51:4a:28:81:6a:52:97:2f:bb:6c:43:d5:5c:23:
98:37:5b:fc:c5:4b:66:2a:a9:cb:1e:c8:8b:4c:1d:c9:c7:04:
e0:c2:58:92:2d:2e:8a:c6:0a:11:96:e9:93:08:90:9b:0d:bd:
2d:df:1e:9c:64:68:af:f9:9d:3d:39:8b:73:6f:fb:3c:58:cf:
a8:cf:15:23:84:0d:cf:13:4d:af:5c:f4:90:aa:ed:c3:d7:1b:
7a:88:38:d6:17:07:1f:a4:e7:34:ce:66:67:41:20:2e:f1:03:
8a:5b:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:34:47 2025 by rpki-client