Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/EG7DIV6sJzJ0VyQzRiwa5E9QGyc.roa
File: EG7DIV6sJzJ0VyQzRiwa5E9QGyc.roa (raw, json)
Hash identifier: zEoHCjkQl+asaRbqkYRFz5d5zkkQWgiyXCMLh8qncmE=
Subject key identifier: 10:6E:C3:21:5E:AC:27:32:74:57:24:33:46:2C:1A:E4:4F:50:1B:27
Certificate issuer: /CN=99396c1eb59b9666b7487e58c84ab3444ce23113
Certificate serial: 018570F076DEEB1648BD63F58E2566211B68
Authority key identifier: 99:39:6C:1E:B5:9B:96:66:B7:48:7E:58:C8:4A:B3:44:4C:E2:31:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTlsHrWblma3SH5YyEqzREziMRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/EG7DIV6sJzJ0VyQzRiwa5E9QGyc.roa
Signing time: Mon 02 Jan 2023 05:24:45 +0000
ROA not before: Mon 02 Jan 2023 05:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 91.247.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:76:de:eb:16:48:bd:63:f5:8e:25:66:21:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99396c1eb59b9666b7487e58c84ab3444ce23113
Validity
Not Before: Jan 2 05:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=106ec3215eac273274572433462c1ae44f501b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:a1:a2:08:15:43:f0:91:49:38:35:6a:79:
6d:5d:42:66:5d:11:76:9d:97:57:8c:5e:5f:be:e8:
ee:8f:85:3e:1d:8c:17:ad:96:65:79:64:80:54:76:
2a:75:7c:43:82:c2:1d:ce:b1:db:92:5d:9c:3a:16:
8a:77:83:ed:32:f6:81:2a:3e:ea:ef:6c:bf:0a:12:
8a:80:17:c6:95:07:7a:7e:b4:49:de:48:87:78:bd:
ed:7a:a2:d5:85:e0:80:41:25:9d:2b:7d:64:ba:7f:
d0:7d:09:b9:7e:0a:bd:b9:f5:ec:8a:a5:11:c7:03:
2d:27:51:f3:e3:ed:e9:66:db:a5:90:63:82:a9:da:
24:b4:92:44:ea:af:33:a9:d6:57:6a:be:38:70:42:
10:39:d7:b9:11:2e:fa:17:8d:61:19:a8:01:4c:71:
10:42:eb:bc:89:92:38:79:12:71:97:c3:d6:cb:44:
15:b2:80:ee:36:a0:8e:1c:50:ea:b0:7e:e6:ee:25:
6e:48:41:98:32:bf:71:e3:3c:36:de:78:3a:4d:be:
e1:5d:e0:a3:76:f5:a6:7d:1e:1a:ae:78:6b:f9:84:
cc:1b:ba:5b:c0:45:84:10:04:ea:bc:1c:cc:31:c1:
2a:40:49:03:46:00:56:bf:47:1c:b9:a3:ff:76:94:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:C3:21:5E:AC:27:32:74:57:24:33:46:2C:1A:E4:4F:50:1B:27
X509v3 Authority Key Identifier:
keyid:99:39:6C:1E:B5:9B:96:66:B7:48:7E:58:C8:4A:B3:44:4C:E2:31:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTlsHrWblma3SH5YyEqzREziMRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/EG7DIV6sJzJ0VyQzRiwa5E9QGyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eae9d3-b30d-435f-b853-e475921ea4b2/1/mTlsHrWblma3SH5YyEqzREziMRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.188.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1a:7d:2b:c1:92:23:14:c5:36:da:b2:1a:50:1d:44:12:76:
35:aa:b3:be:81:0c:01:24:29:d5:88:82:e2:7c:68:2d:b9:36:
87:64:97:c2:2b:b8:5b:cb:72:9d:ae:34:6d:99:c0:06:f9:c4:
fd:bd:2e:9b:71:74:ff:01:58:18:c2:b1:bc:e7:25:3f:84:77:
94:1d:d2:73:b6:4b:79:96:bb:19:ed:b3:cb:c6:cf:c0:c9:d0:
ac:f4:93:ed:6a:2f:33:07:67:a5:1c:7a:4e:6a:08:65:b4:8d:
2f:42:36:65:a6:f0:4c:3f:03:b5:3a:04:8e:0e:05:a4:60:62:
84:7d:5b:d2:14:f8:4b:77:5c:78:14:5d:19:f1:88:bb:92:df:
2a:d4:3c:e4:6d:31:8e:77:94:e4:22:e9:1b:13:40:0c:60:9c:
29:af:39:f2:b1:5a:ea:34:db:7c:10:2a:57:85:1e:43:88:14:
7c:09:32:27:11:17:e9:7b:c8:f0:8f:60:f2:03:7b:94:0b:d3:
97:0e:9f:22:30:4e:ac:eb:45:c1:3f:32:cc:00:f7:5e:e2:ed:
b9:4b:05:cb:44:66:d4:41:fc:a7:30:07:0f:79:99:84:e6:10:
09:e7:44:a8:14:25:44:42:d0:7e:4c:c1:8f:1e:94:70:dc:68:
c4:bd:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:51:41 2025 by rpki-client