Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/EiUuk_NOU4Yk3nk2nn56zZabZvk.roa
File: EiUuk_NOU4Yk3nk2nn56zZabZvk.roa (raw, json)
Hash identifier: 6qv2yhWzsdq9RqBF8lz3ldQ0Ka6+KKmmMeovRbBrbQI=
Subject key identifier: 12:25:2E:93:F3:4E:53:86:24:DE:79:36:9E:7E:7A:CD:96:9B:66:F9
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 0194258EEC2954036A83E1AA464E8B8AD42C
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/EiUuk_NOU4Yk3nk2nn56zZabZvk.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5464
IP address blocks: 91.237.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ec:29:54:03:6a:83:e1:aa:46:4e:8b:8a:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12252e93f34e538624de79369e7e7acd969b66f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:89:1d:73:0a:46:92:f0:b7:9a:88:cb:b1:
18:6d:44:56:83:71:74:78:e4:62:da:2d:07:cd:95:
fc:3d:22:0f:b4:36:62:33:d5:cd:42:6e:62:40:96:
0b:d5:ba:85:c1:4b:10:3e:69:2b:92:51:ac:c1:a7:
09:e5:fc:9d:ee:17:0d:9e:9c:c8:a4:06:89:5f:c9:
90:6b:20:45:a6:69:63:7f:65:86:c6:45:1d:60:6f:
c1:bf:00:d9:3d:6c:ae:7e:7d:4a:27:50:2d:dc:42:
56:36:40:2f:bc:44:85:e7:be:04:67:56:8d:bc:a0:
b2:d1:13:77:c3:28:e2:47:1e:1b:9b:a2:87:85:72:
0e:52:23:46:96:1f:f6:84:c0:ee:bc:27:b0:80:c8:
0f:db:08:ef:65:aa:6b:e5:66:40:db:fa:f1:13:a9:
b3:93:59:1f:04:79:53:35:cb:0e:fc:5b:a3:c3:76:
d8:e5:e5:e5:4c:e3:49:e8:58:27:30:18:df:88:cb:
41:0f:71:36:b8:48:5e:33:90:fc:e3:1a:8f:b2:e0:
19:9a:39:3a:b9:5e:a5:1d:7e:88:5e:54:3b:e7:c2:
41:89:ea:d9:53:74:97:b1:89:ac:71:9f:e7:e6:8f:
4e:53:37:fc:97:44:e5:95:21:45:6d:d9:e8:18:d9:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:25:2E:93:F3:4E:53:86:24:DE:79:36:9E:7E:7A:CD:96:9B:66:F9
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/EiUuk_NOU4Yk3nk2nn56zZabZvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.100.0/23
Signature Algorithm: sha256WithRSAEncryption
11:79:5b:df:4c:6d:a5:78:68:45:3b:06:c4:ce:4a:90:3b:31:
08:ba:d8:78:1a:66:e6:4d:7e:47:dc:e0:97:6c:0f:c3:62:48:
54:52:d2:59:33:52:cc:cb:e3:81:e1:39:35:c1:94:88:03:a8:
24:fe:96:c5:2c:48:d7:1f:bf:ef:6c:a5:4b:1b:26:7d:96:44:
c7:1c:11:f0:7c:3a:55:3d:08:a7:82:a8:7c:5b:12:42:17:d3:
2c:c0:ba:63:b8:c2:e5:b7:19:30:01:4d:7e:91:3e:2c:07:e3:
64:07:73:c1:be:08:7e:f3:ed:2d:bd:c3:54:9e:ea:a3:4e:c0:
36:5e:63:de:1e:ef:08:c2:e5:76:85:60:9c:1d:8e:43:d2:a7:
61:53:65:bd:e8:38:e8:b0:6b:6b:a6:22:b4:57:4c:9e:b5:b7:
75:4c:3c:f2:3e:b1:c8:4e:26:c4:98:bd:de:f8:13:5c:ec:8b:
0c:8e:fa:4f:ad:d6:3a:08:b5:92:10:eb:9d:63:59:8c:9f:8e:
39:a3:4b:ea:76:22:57:c6:b8:88:78:4e:5b:c5:48:e3:02:e9:
12:6c:45:f5:12:fa:ce:3f:a0:09:86:12:1e:13:44:4a:d7:85:
0f:8d:1a:98:07:a6:c1:03:9b:f8:af:48:f1:04:81:55:39:f6:
69:52:2e:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljuwpVANqg+GqRk6LitQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI3MWM2N2UxY2MyODA3ODY5Nzk1MmFkM2Y0ZjM1NWY0
ZTEzNDEwHhcNMjUwMTAyMDU0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjI1MmU5M2YzNGU1Mzg2MjRkZTc5MzY5ZTdlN2FjZDk2OWI2NmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTqJHXMKRpLwt5qIy7EYbURWg3F0
eORi2i0HzZX8PSIPtDZiM9XNQm5iQJYL1bqFwUsQPmkrklGswacJ5fyd7hcNnpzI
pAaJX8mQayBFpmljf2WGxkUdYG/BvwDZPWyufn1KJ1At3EJWNkAvvESF574EZ1aN
vKCy0RN3wyjiRx4bm6KHhXIOUiNGlh/2hMDuvCewgMgP2wjvZapr5WZA2/rxE6mz
k1kfBHlTNcsO/Fujw3bY5eXlTONJ6FgnMBjfiMtBD3E2uEheM5D84xqPsuAZmjk6
uV6lHX6IXlQ758JBierZU3SXsYmscZ/n5o9OUzf8l0TllSFFbdnoGNkqwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBIlLpPzTlOGJN55Np5+es2Wm2b5MB8GA1UdIwQY
MBaAFOxrccZ+HMKAeGl5Uq0/TzVfThNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMt
ZDNmNmNkOGU0NDQ0LzEvRWlVdWtfTk9VNFlrM25rMm5uNTZ6WmFiWnZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMtZDNmNmNkOGU0NDQ0
LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+1kMA0G
CSqGSIb3DQEBCwUAA4IBAQAReVvfTG2leGhFOwbEzkqQOzEIuth4GmbmTX5H3OCX
bA/DYkhUUtJZM1LMy+OB4Tk1wZSIA6gk/pbFLEjXH7/vbKVLGyZ9lkTHHBHwfDpV
PQingqh8WxJCF9MswLpjuMLltxkwAU1+kT4sB+NkB3PBvgh+8+0tvcNUnuqjTsA2
XmPeHu8IwuV2hWCcHY5D0qdhU2W96DjosGtrpiK0V0yetbd1TDzyPrHITibEmL3e
+BNc7IsMjvpPrdY6CLWSEOudY1mMn445o0vqdiJXxriIeE5bxUjjAukSbEX1EvrO
P6AJhhIeE0RK14UPjRqYB6bBA5v4r0jxBIFVOfZpUi5n
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:24 2025 by rpki-client