Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/eLZAK6GtA5fTxDAgO34pkWDxDSg.roa
File: eLZAK6GtA5fTxDAgO34pkWDxDSg.roa (raw, json)
Hash identifier: JJF45T8sSlny8vS8g2xIJpL+wlb6VnXLMeh3W/wsIG0=
Subject key identifier: 78:B6:40:2B:A1:AD:03:97:D3:C4:30:20:3B:7E:29:91:60:F1:0D:28
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 019423D6D2AD33775C9C24654062D5335D50
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/eLZAK6GtA5fTxDAgO34pkWDxDSg.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47682
IP address blocks: 91.205.8.0/22 maxlen: 22
2001:67c:18c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d2:ad:33:77:5c:9c:24:65:40:62:d5:33:5d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78b6402ba1ad0397d3c430203b7e299160f10d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:87:da:b0:0a:e7:fe:ff:e6:c5:9e:9d:26:
7b:8b:4a:85:b3:9c:fc:8f:c1:2d:2e:ab:f1:d1:05:
96:1f:62:ed:fe:4b:3e:05:d2:e6:10:f2:01:23:38:
ef:dc:be:ad:01:98:ea:c7:e7:da:e3:5e:c8:5c:21:
5f:b7:05:ff:5c:ec:97:06:a1:24:ba:a5:50:89:17:
17:2b:1b:63:a5:ff:c9:7c:8b:c1:59:96:b1:bf:44:
5f:27:ba:32:ae:48:e9:a6:4c:2e:a8:63:0b:28:76:
1f:f2:e4:4f:2c:d5:7a:7e:c9:51:0b:13:5d:7b:e9:
10:3e:0d:b8:c1:7b:c4:92:0b:51:26:3e:ff:72:49:
53:e5:0b:5c:f7:74:04:92:f9:56:98:51:44:8f:d0:
ce:9c:1c:16:8e:14:6d:c7:3a:42:8a:ba:80:fc:4a:
34:9f:7c:da:7c:2d:f6:b2:b8:50:12:1d:da:e2:08:
e0:b6:27:a6:0b:01:d6:1d:25:8e:94:83:b4:71:89:
47:c4:40:33:8b:27:42:81:88:75:24:ab:fe:ca:12:
81:67:30:98:03:f6:d2:ba:d2:c4:67:56:77:49:98:
ff:8f:7b:6f:dc:fe:a2:d8:c3:a3:b9:cb:80:13:72:
9a:3e:22:2c:b9:91:b2:a9:a8:a5:d7:cf:05:d2:08:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:40:2B:A1:AD:03:97:D3:C4:30:20:3B:7E:29:91:60:F1:0D:28
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/eLZAK6GtA5fTxDAgO34pkWDxDSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.8.0/22
IPv6:
2001:67c:18c::/48
Signature Algorithm: sha256WithRSAEncryption
7f:33:3a:27:89:3e:41:45:81:47:73:fc:2a:f1:ba:8c:0f:8f:
14:bf:fa:e4:be:82:a9:86:65:6c:ba:56:00:72:39:d3:90:85:
dc:95:cc:86:8b:2f:2f:d9:d5:a9:9a:b7:39:70:b2:70:17:20:
ab:b9:8f:ee:88:2a:fc:d2:35:6d:a3:52:fb:52:02:3d:56:1f:
40:c6:52:96:85:4b:9b:0e:e6:ec:dd:9c:b3:15:b1:b3:dd:73:
84:b3:20:cc:fb:0e:ed:5c:e0:a6:27:ae:8d:f9:c0:52:f3:d6:
08:0a:ed:fb:0b:ca:bd:a0:6b:d1:46:dc:14:11:f4:3f:87:4b:
08:b2:9a:6c:e7:c8:45:9d:07:17:61:95:c7:d7:ae:25:eb:de:
38:e2:c3:d1:23:2d:46:9a:08:92:d3:f8:a5:51:f3:cf:0e:79:
c8:e9:92:2f:f6:5e:a6:51:66:9b:00:3a:81:dd:64:bf:7b:58:
f7:ca:0d:41:f0:4f:a3:f0:a3:27:df:11:ac:4d:e4:3d:03:22:
6f:7c:82:a2:8f:12:fa:62:11:6d:08:65:1a:84:25:fc:32:46:
6c:fe:f7:0a:86:2b:f6:cc:8b:f6:d4:1f:a8:f4:c5:dd:32:d3:
6b:02:26:f5:51:91:2f:48:0b:5c:45:48:27:60:0b:f3:3c:44:
06:ec:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:31 2025 by rpki-client