Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/cehlE8HIBVeFvzk1By7a8YVFQ6g.roa
File: cehlE8HIBVeFvzk1By7a8YVFQ6g.roa (raw, json)
Hash identifier: +LMff9ciJo7IJAgjgfXvhsATSxOq/QtnnEJDiM3GtbI=
Subject key identifier: 71:E8:65:13:C1:C8:05:57:85:BF:39:35:07:2E:DA:F1:85:45:43:A8
Certificate issuer: /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial: 0194228D8358BE8E9E8B15A6CE60207C993A
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/cehlE8HIBVeFvzk1By7a8YVFQ6g.roa
Signing time: Wed 01 Jan 2025 15:48:07 +0000
ROA not before: Wed 01 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197258
IP address blocks: 91.217.102.0/23 maxlen: 23
91.217.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:83:58:be:8e:9e:8b:15:a6:ce:60:20:7c:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Validity
Not Before: Jan 1 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71e86513c1c8055785bf3935072edaf1854543a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:5e:b6:ad:24:f2:3d:92:30:c4:14:65:af:
ef:5c:1e:71:af:83:10:8a:e9:fd:95:70:5f:74:0d:
58:a6:29:41:42:7a:3d:1d:08:47:fb:d9:f6:4b:19:
87:d0:1e:b3:7e:df:a3:eb:3d:87:c0:70:d9:de:56:
48:09:fa:81:ae:87:8f:b2:8b:a0:29:30:31:9d:73:
1d:46:8c:57:19:fc:dd:6d:63:71:94:f3:96:f1:14:
83:38:d2:3b:39:44:71:fe:35:4b:f7:96:2f:d5:c3:
f8:1b:ee:18:3f:fc:7e:70:ea:4e:38:77:97:ca:e3:
a2:3c:41:ee:78:6d:a8:ad:7e:76:c2:5d:95:0e:86:
d5:c3:1d:e4:b2:b8:ac:00:80:91:3e:01:89:ec:61:
6f:50:5f:1e:f0:05:f6:e4:62:31:d9:92:1b:1f:8b:
e5:a8:30:81:c8:ce:68:73:0c:65:ed:d7:49:b5:67:
05:65:04:b2:86:da:1b:16:58:7c:0c:e3:a7:32:af:
ae:b0:f2:26:c1:d6:f1:f2:78:e0:ce:4c:00:47:ac:
ec:69:e7:f7:3b:4e:8d:df:d9:d1:1e:f1:b5:97:f5:
0e:9a:f6:a1:45:19:58:f6:27:22:69:13:31:0f:ec:
03:26:7a:5d:21:ec:a5:5a:9c:6e:90:c8:b5:63:18:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E8:65:13:C1:C8:05:57:85:BF:39:35:07:2E:DA:F1:85:45:43:A8
X509v3 Authority Key Identifier:
keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/cehlE8HIBVeFvzk1By7a8YVFQ6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.102.0/23
91.217.180.0/24
Signature Algorithm: sha256WithRSAEncryption
35:85:8f:29:bb:f9:80:65:33:50:5e:fd:d6:bc:a2:13:32:7d:
84:24:63:fe:ea:e4:76:41:d9:68:4f:f7:92:d4:ff:19:6d:f5:
5b:cb:54:78:58:e2:eb:83:f7:1b:90:07:69:7b:64:d4:53:69:
30:75:15:20:f2:04:a0:78:fb:11:cc:d5:b9:67:c8:71:c3:f7:
6e:6b:d9:41:80:b6:0c:3a:7e:5b:4c:1f:75:95:da:4c:fb:19:
2d:c5:44:ac:a5:71:3a:e1:56:5d:0c:55:fd:7d:b2:81:c5:8b:
3f:8d:57:16:2d:d2:b4:e7:b4:94:9b:75:e4:72:54:4b:8b:0b:
54:54:9d:dd:be:2f:85:9f:63:b8:9e:18:fd:01:05:ec:3f:d4:
ec:e5:50:c1:14:b3:92:7e:e9:c3:a8:5d:4a:1e:be:41:93:5e:
41:16:29:7a:af:76:b0:74:82:de:06:a2:ac:fb:95:99:b6:02:
6d:87:c9:c8:1c:78:db:af:ff:47:16:d4:6b:25:2a:5c:d7:95:
26:99:96:1c:d2:d4:f7:07:5d:6a:25:e2:5b:e5:9d:2a:23:a6:
c2:9c:ae:6e:3a:12:38:6d:fd:16:cc:fd:e7:61:c1:c1:25:4e:
74:9a:5a:4a:1f:70:cc:27:27:64:82:b6:cc:ed:8e:2a:25:33:
33:4b:23:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijYNYvo6eixWmzmAgfJk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZTFjZmVjYzkyYjEwNGZjZmE5ZWZlYzZhNThmMGMxOTc5
MDE2NTIwHhcNMjUwMTAxMTU0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWU4NjUxM2MxYzgwNTU3ODViZjM5MzUwNzJlZGFmMTg1NDU0M2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RBetq0k8j2SMMQUZa/vXB5xr4MQ
iun9lXBfdA1YpilBQno9HQhH+9n2SxmH0B6zft+j6z2HwHDZ3lZICfqBroePsoug
KTAxnXMdRoxXGfzdbWNxlPOW8RSDONI7OURx/jVL95Yv1cP4G+4YP/x+cOpOOHeX
yuOiPEHueG2orX52wl2VDobVwx3ksrisAICRPgGJ7GFvUF8e8AX25GIx2ZIbH4vl
qDCByM5ocwxl7ddJtWcFZQSyhtobFlh8DOOnMq+usPImwdbx8njgzkwAR6zsaef3
O06N39nRHvG1l/UOmvahRRlY9iciaRMxD+wDJnpdIeylWpxukMi1YxiqCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHHoZRPByAVXhb85NQcu2vGFRUOoMB8GA1UdIwQY
MBaAFM3hz+zJKxBPz6nv7GpY8MGXkBZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYt
ODc0NWRlMmY0MzIxLzEvY2VobEU4SElCVmVGdnprMUJ5N2E4WVZGUTZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jNWNiYjQtYmQ4Yi00ODg1LTg0NjYtODc0NWRlMmY0MzIx
LzEvemVIUDdNa3JFRV9QcWVfc2Fsand3WmVRRmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW9lmAwQA
W9m0MA0GCSqGSIb3DQEBCwUAA4IBAQA1hY8pu/mAZTNQXv3WvKITMn2EJGP+6uR2
QdloT/eS1P8ZbfVby1R4WOLrg/cbkAdpe2TUU2kwdRUg8gSgePsRzNW5Z8hxw/du
a9lBgLYMOn5bTB91ldpM+xktxUSspXE64VZdDFX9fbKBxYs/jVcWLdK057SUm3Xk
clRLiwtUVJ3dvi+Fn2O4nhj9AQXsP9Ts5VDBFLOSfunDqF1KHr5Bk15BFil6r3aw
dILeBqKs+5WZtgJth8nIHHjbr/9HFtRrJSpc15UmmZYc0tT3B11qJeJb5Z0qI6bC
nK5uOhI4bf0WzP3nYcHBJU50mlpKH3DMJydkgrbM7Y4qJTMzSyPe
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:48:27 2025 by rpki-client