Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/Eqz6HqbOHRxUsIdz-CIFT589G8w.roa
File: Eqz6HqbOHRxUsIdz-CIFT589G8w.roa (raw, json)
Hash identifier: NYwF+vNi32nyXeOdW5n0mZaZ/W25jWq6A2FW0FtVszo=
Subject key identifier: 12:AC:FA:1E:A6:CE:1D:1C:54:B0:87:73:F8:22:05:4F:9F:3D:1B:CC
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019564F47FE6E3168420260CD1C989E870C8
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/Eqz6HqbOHRxUsIdz-CIFT589G8w.roa
Signing time: Wed 05 Mar 2025 06:18:19 +0000
ROA not before: Wed 05 Mar 2025 06:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 91.102.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:64:f4:7f:e6:e3:16:84:20:26:0c:d1:c9:89:e8:70:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Mar 5 06:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12acfa1ea6ce1d1c54b08773f822054f9f3d1bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:26:92:3f:e2:a2:b3:20:d9:ed:ac:13:bb:
c5:ee:88:4f:33:11:b5:5a:cc:a9:b6:ea:d1:89:f1:
4f:11:e0:7f:97:bf:d3:b2:13:9b:63:34:86:f3:44:
b4:a5:6b:7e:4d:e2:03:c0:ff:d6:82:ce:62:c9:da:
45:f7:76:01:fb:48:09:28:d8:e7:23:16:53:b1:3f:
19:99:7e:3c:1b:b5:06:b9:64:8a:11:13:ad:04:68:
5a:1f:85:90:17:1a:f3:d7:c6:a2:95:fe:b5:56:a6:
0c:7b:4c:f4:34:3c:44:81:91:83:0a:ba:53:72:5c:
07:b5:d4:87:84:d3:7a:a3:25:54:60:79:b4:40:eb:
18:49:ea:25:47:b5:21:1d:26:df:a3:22:50:ce:ba:
07:6c:6f:ae:67:27:f6:be:c0:70:a6:89:41:6b:3f:
8b:92:9e:74:21:67:68:9c:80:64:2b:32:ec:d5:b5:
4f:11:20:3c:c8:de:3b:70:08:dc:ce:94:cd:af:00:
a5:f3:e5:76:fb:8a:92:87:3d:20:b0:2e:71:38:6b:
e4:e7:b4:c1:f0:35:cc:ca:52:6a:83:52:98:85:43:
8e:50:b1:27:68:f9:75:e9:9d:24:df:f3:11:95:00:
28:c9:3f:53:a4:a3:0b:8c:11:3c:98:3d:48:6b:fe:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:FA:1E:A6:CE:1D:1C:54:B0:87:73:F8:22:05:4F:9F:3D:1B:CC
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/Eqz6HqbOHRxUsIdz-CIFT589G8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.162.0/24
Signature Algorithm: sha256WithRSAEncryption
35:15:38:da:fb:b9:a4:f9:08:3b:80:fe:fe:1d:56:69:83:1c:
98:c1:8c:df:0d:c4:4a:56:95:5e:58:b4:34:2d:88:40:72:be:
e9:cc:ab:7c:a6:f7:6f:39:cd:cd:05:04:01:15:1c:0b:ea:50:
13:f0:f3:ff:f5:5d:61:7c:6e:1a:ef:f8:8f:58:cf:99:a0:6d:
3d:ae:a7:27:d0:e3:73:d0:0a:b3:51:c2:89:e4:ec:2c:60:39:
42:f5:a4:86:fd:e6:9c:88:9d:af:ae:08:13:9b:4d:94:d8:b9:
5c:b8:ae:af:a1:0c:34:31:68:cb:5f:77:c0:4f:79:7d:90:db:
34:96:f9:ae:1e:b4:2b:e5:6c:7b:5c:e8:ae:71:a3:4b:cd:78:
95:77:cf:8a:89:c0:fc:1c:43:ac:f9:0a:14:c8:c0:58:78:87:
cc:a8:26:52:7d:58:fd:92:5a:5e:f0:a2:e1:5c:8b:0b:47:4f:
68:f3:94:8a:b0:15:67:04:25:0b:50:be:e0:95:7d:d1:d1:61:
74:4f:95:a5:7c:08:03:48:63:76:17:12:52:af:78:bc:c2:f5:
6c:6d:c0:b0:df:e5:51:46:2e:97:14:f6:d1:37:98:9c:74:91:
7e:4d:ba:47:5d:c5:9e:8b:49:e9:0a:34:5f:80:7c:b8:82:05:
61:62:e3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:29 2025 by rpki-client