Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/eGeVX0DFWAFAU7vbTfMEc91KTl8.roa
File: eGeVX0DFWAFAU7vbTfMEc91KTl8.roa (raw, json)
Hash identifier: SxurpuNZdZRuFkubk+AlQh2CUYpNBR1cwcFAvkFbxxw=
Subject key identifier: 78:67:95:5F:40:C5:58:01:40:53:BB:DB:4D:F3:04:73:DD:4A:4E:5F
Certificate issuer: /CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Certificate serial: 0185708CB6180A03A9FFA925A6C2FE574C53
Authority key identifier: 8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/eGeVX0DFWAFAU7vbTfMEc91KTl8.roa
Signing time: Mon 02 Jan 2023 03:35:47 +0000
ROA not before: Mon 02 Jan 2023 03:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48329
IP address blocks: 91.194.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:b6:18:0a:03:a9:ff:a9:25:a6:c2:fe:57:4c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Validity
Not Before: Jan 2 03:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7867955f40c558014053bbdb4df30473dd4a4e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:5c:94:9b:a1:d3:74:90:a7:8b:98:6e:3f:
fa:07:51:40:8e:bb:b2:2e:44:e5:0a:3c:50:e5:ae:
ba:2c:06:8a:c1:7a:6d:fd:88:9e:4b:9b:b5:25:c9:
03:58:88:22:0b:d3:11:84:9f:48:a5:cf:3a:62:ce:
26:71:b6:95:63:e2:7c:d8:21:af:71:95:a3:44:ae:
cf:9f:13:bc:57:9f:29:4c:e7:38:17:88:50:38:ec:
01:04:e5:d3:26:99:c8:1b:76:30:30:78:9d:35:19:
44:09:51:e7:50:d0:85:ec:6f:7f:2e:0a:86:a0:6e:
ad:0e:4f:7d:a3:d3:b5:91:d3:ac:d2:67:c9:58:73:
ad:64:db:96:76:75:84:c5:ef:ba:88:df:5a:78:88:
1f:7d:13:15:3b:a8:9f:a0:db:c1:01:b9:86:71:94:
b5:2e:fd:6b:c8:b1:99:ee:c5:f9:36:f8:f8:71:38:
bf:30:2b:9b:8f:e5:d3:bf:61:bf:c2:97:c5:c2:f0:
40:5a:11:f5:bf:83:ae:6e:35:49:c4:87:35:2d:4b:
41:62:13:36:10:0d:1a:1f:ad:da:d4:00:cf:c5:4f:
4b:ed:24:88:00:2c:99:a5:7b:69:ed:24:9c:31:27:
be:a2:45:ab:61:1f:ee:7e:4e:ce:44:d0:38:c8:e5:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:67:95:5F:40:C5:58:01:40:53:BB:DB:4D:F3:04:73:DD:4A:4E:5F
X509v3 Authority Key Identifier:
keyid:8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/eGeVX0DFWAFAU7vbTfMEc91KTl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.200.0/24
Signature Algorithm: sha256WithRSAEncryption
79:31:d3:8f:88:07:30:25:4d:45:1b:4f:25:59:fa:83:40:98:
a7:fd:0a:7a:7d:fd:89:8f:03:c0:39:8c:85:b0:e2:e0:c6:cf:
98:2a:17:dc:cc:c9:b6:98:83:8a:b9:3e:a3:34:1e:6d:9d:3b:
81:1f:ee:6f:31:c8:c5:7e:22:01:cb:65:81:ea:87:f7:c7:2e:
a5:c1:d1:a5:04:8e:ed:d6:a3:c5:20:79:b5:b6:39:2c:9f:25:
ec:e5:46:ed:af:7d:bb:0b:63:d1:a8:60:dc:1b:f0:ef:52:7f:
7f:88:34:f9:a0:64:c9:9b:c9:8e:16:10:1b:8c:5f:d5:3e:7a:
c7:56:9b:9d:e8:01:de:cf:70:05:71:c2:9c:82:da:ac:7e:98:
93:d2:74:72:c1:15:35:6f:56:29:fc:d1:91:86:db:4f:d6:44:
57:fd:bb:de:f8:11:d3:5e:ea:00:6b:c5:58:8b:09:7e:7a:7a:
01:1b:5a:d8:df:c7:51:87:cf:c3:78:8f:14:aa:de:59:4b:13:
05:c5:0f:5d:c8:67:d2:ce:75:69:22:12:d5:75:1d:23:4e:51:
3a:19:ab:ee:e6:a4:98:6a:cc:48:81:4a:97:fd:02:e7:ce:66:
6b:d0:54:6b:85:5c:29:9f:a3:3e:83:8b:4f:ed:6c:46:2c:35:
79:ee:80:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjLYYCgOp/6klpsL+V0xTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDJkMDI3N2NlOTkxMjEzZTY3YjdiYmRjNzY1MDQ5MGY4
YTMxYmYwHhcNMjMwMTAyMDMzNTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODY3OTU1ZjQwYzU1ODAxNDA1M2JiZGI0ZGYzMDQ3M2RkNGE0ZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh69clJuh03SQp4uYbj/6B1FAjruy
LkTlCjxQ5a66LAaKwXpt/YieS5u1JckDWIgiC9MRhJ9Ipc86Ys4mcbaVY+J82CGv
cZWjRK7PnxO8V58pTOc4F4hQOOwBBOXTJpnIG3YwMHidNRlECVHnUNCF7G9/LgqG
oG6tDk99o9O1kdOs0mfJWHOtZNuWdnWExe+6iN9aeIgffRMVO6ifoNvBAbmGcZS1
Lv1ryLGZ7sX5Nvj4cTi/MCubj+XTv2G/wpfFwvBAWhH1v4OubjVJxIc1LUtBYhM2
EA0aH63a1ADPxU9L7SSIACyZpXtp7SScMSe+okWrYR/ufk7ORNA4yOU/fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhnlV9AxVgBQFO7203zBHPdSk5fMB8GA1UdIwQY
MBaAFIzS0Cd86ZEhPme3u9x2UEkPijG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5MUUozenBrU0UtWjdlNzNIWlFTUS1LTWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mYmEyY2QtNDg2OC00MjU0LWIxZTkt
Y2FkMzAwOTlhYjFlLzEvZUdlVlgwREZXQUZBVTd2YlRmTUVjOTFLVGw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mYmEyY2QtNDg2OC00MjU0LWIxZTktY2FkMzAwOTlhYjFl
LzEvak5MUUozenBrU0UtWjdlNzNIWlFTUS1LTWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8LIMA0G
CSqGSIb3DQEBCwUAA4IBAQB5MdOPiAcwJU1FG08lWfqDQJin/Qp6ff2JjwPAOYyF
sOLgxs+YKhfczMm2mIOKuT6jNB5tnTuBH+5vMcjFfiIBy2WB6of3xy6lwdGlBI7t
1qPFIHm1tjksnyXs5Ubtr327C2PRqGDcG/DvUn9/iDT5oGTJm8mOFhAbjF/VPnrH
Vpud6AHez3AFccKcgtqsfpiT0nRywRU1b1Yp/NGRhttP1kRX/bve+BHTXuoAa8VY
iwl+enoBG1rY38dRh8/DeI8Uqt5ZSxMFxQ9dyGfSznVpIhLVdR0jTlE6Gavu5qSY
asxIgUqX/QLnzmZr0FRrhVwpn6M+g4tP7WxGLDV57oBv
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:45 2025 by rpki-client