Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/eNZXxCCzC2aIFELjq6RpMQzGjSs.roa
File: eNZXxCCzC2aIFELjq6RpMQzGjSs.roa (raw, json)
Hash identifier: CXPmpeLWckeBx9Uclq/du3j6HeMssd7O/L4FVYvmJ6k=
Subject key identifier: 78:D6:57:C4:20:B3:0B:66:88:14:42:E3:AB:A4:69:31:0C:C6:8D:2B
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01941F8C3807B6D4FEFF217E18B92EA036F7
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/eNZXxCCzC2aIFELjq6RpMQzGjSs.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 91.108.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:38:07:b6:d4:fe:ff:21:7e:18:b9:2e:a0:36:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d657c420b30b66881442e3aba469310cc68d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:51:6c:63:8b:36:49:b0:1e:46:76:5e:0f:
30:fb:60:74:95:ee:21:f0:0f:69:04:dc:b2:96:61:
ba:6d:e4:28:ac:6b:7a:ed:32:21:2e:69:a9:5d:f1:
b3:66:92:ab:7d:d1:d5:5f:45:96:a5:06:88:b7:b0:
d2:3b:c6:a4:e6:97:51:46:49:f9:c9:7f:1c:76:8b:
10:84:00:07:f7:9a:4a:75:72:98:48:01:b9:ad:b4:
da:42:f7:0b:ba:32:90:3f:f1:c3:10:a2:5f:11:45:
2e:e8:02:93:94:16:61:60:51:2e:d5:11:e9:42:91:
55:26:9e:84:d7:3a:a1:fe:40:a5:3b:7d:d5:f8:bf:
dc:6e:6e:e0:c5:ff:27:b5:73:6d:66:ad:5e:ce:0b:
56:73:40:3d:55:5b:34:71:fe:08:b0:d9:d6:5b:bb:
1b:59:6b:ed:8b:f7:58:13:65:79:37:ed:24:d0:f3:
28:02:2e:16:de:08:e3:05:3b:35:3d:79:56:b5:35:
10:ee:b9:81:8b:6a:94:c6:8a:31:14:c9:9e:69:fd:
ce:d0:d8:22:20:f6:5f:05:32:d1:af:b0:c0:cb:d2:
69:2a:08:1e:45:db:37:12:2b:13:9c:74:8c:f5:34:
af:68:24:2c:97:80:5b:2d:69:2f:28:4d:a1:8f:ca:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:57:C4:20:B3:0B:66:88:14:42:E3:AB:A4:69:31:0C:C6:8D:2B
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/eNZXxCCzC2aIFELjq6RpMQzGjSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.242.0/24
Signature Algorithm: sha256WithRSAEncryption
06:09:cb:6b:fa:4d:73:f6:0d:42:e9:49:1e:d7:b2:15:8d:74:
19:7b:79:6c:5e:2f:3e:6c:6e:a1:50:4d:8e:ee:fb:d3:6e:1f:
d9:f3:09:2f:b0:ff:7f:6e:57:c3:32:2a:96:d4:0a:eb:e7:c8:
62:c4:f0:bc:0e:7b:96:e9:7a:d0:2f:83:48:83:21:28:ab:f4:
49:96:96:99:64:04:83:4e:1f:72:52:60:a7:30:9c:7d:cd:54:
46:88:e9:d0:7a:ce:e6:db:44:7f:73:59:82:52:88:2e:b3:6c:
e1:ef:e8:bd:65:4b:e8:42:68:4b:fd:a2:b4:9c:5e:2c:7f:26:
1d:fb:5f:e8:7c:53:11:00:ad:cd:77:55:7d:b8:08:4b:00:59:
7b:fe:dd:39:ca:bd:d8:d9:78:57:9e:d4:9c:85:97:de:87:61:
7b:9a:d3:26:15:7a:6b:6a:6f:bd:d1:e7:75:fc:0a:72:fd:e2:
18:cf:08:a8:3c:bc:4a:13:9e:0e:dd:f9:13:e7:f2:68:51:2f:
92:6a:fc:71:8f:eb:64:28:51:0f:51:5a:a1:c4:cb:25:e4:44:
df:ac:20:3a:1b:e4:d2:8e:fa:9b:6c:be:47:c7:47:99:7e:87:
cd:ef:8b:c6:e5:8c:c4:c1:55:12:1d:c2:37:17:38:4d:0e:9c:
03:35:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:31 2025 by rpki-client