Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/ErjG8PzRqBjeDZcaFGNcBuUeEUE.roa
File: ErjG8PzRqBjeDZcaFGNcBuUeEUE.roa (raw, json)
Hash identifier: sN5KyroEA4/9YU1zLDTzNIFkGV6HdbsDCYD+xFVzoWA=
Subject key identifier: 12:B8:C6:F0:FC:D1:A8:18:DE:0D:97:1A:14:63:5C:06:E5:1E:11:41
Certificate issuer: /CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Certificate serial: 019421B1A88559D7049F4F31F2DD1D73E87E
Authority key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/ErjG8PzRqBjeDZcaFGNcBuUeEUE.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 91.207.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a8:85:59:d7:04:9f:4f:31:f2:dd:1d:73:e8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12b8c6f0fcd1a818de0d971a14635c06e51e1141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:e9:19:f4:dc:37:e0:12:bc:ee:98:3c:9f:
9b:6f:2d:75:52:66:0a:11:ee:8b:84:4a:0f:95:41:
40:9d:b7:37:a4:0c:4b:c9:92:a2:a9:5f:97:8e:5f:
7f:c2:0d:b0:fb:d4:f1:01:5c:1d:d0:99:e3:ea:05:
d9:3c:96:50:45:8a:ba:1c:7e:18:a5:e7:36:84:a5:
69:c0:f5:9b:cc:16:b2:9e:46:0f:bf:97:ed:5c:8a:
9f:ae:7a:a0:0f:4f:ca:c6:b4:22:c8:13:98:25:90:
32:57:e1:22:51:96:b2:5e:bf:86:c3:f7:f6:a3:ea:
bc:fd:5d:f7:d6:69:46:2c:f8:14:85:b2:76:94:be:
53:c0:1e:28:e1:80:7c:42:67:bb:76:6d:f7:9d:66:
5e:fc:6a:90:94:9d:75:8c:4d:5d:27:69:f7:06:c2:
c8:c6:f2:55:96:a3:25:a7:b2:f7:e4:17:7d:82:11:
b5:34:bc:a9:e8:bf:07:10:99:53:79:b0:9c:76:b1:
f1:c8:0f:ab:d7:c1:a5:f9:3a:e3:87:7a:b5:46:40:
aa:98:65:57:df:d8:02:76:ee:ba:db:95:e2:01:38:
d4:e2:ec:4b:9d:7b:54:a5:5a:82:2a:6d:81:b0:2f:
ae:14:34:d4:af:d8:8f:3a:5e:e5:7e:11:79:cd:23:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:C6:F0:FC:D1:A8:18:DE:0D:97:1A:14:63:5C:06:E5:1E:11:41
X509v3 Authority Key Identifier:
keyid:8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/ErjG8PzRqBjeDZcaFGNcBuUeEUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:68:92:62:61:da:0f:c2:c2:b8:e0:39:bb:ca:fd:88:29:76:
d4:7b:25:a6:cd:99:6a:63:90:45:ec:61:69:05:12:7c:41:8b:
da:fd:08:8a:e3:64:ee:8f:f7:5b:27:a9:a1:b6:57:ea:a3:73:
75:10:4f:76:cf:91:18:f5:ea:73:bd:a7:68:df:7f:31:d4:f0:
2c:b0:d6:b0:37:8f:db:ef:8d:0a:85:e8:39:e4:23:d6:a7:b1:
8e:37:9f:e1:ec:72:e0:9c:5b:21:1e:6a:ad:9c:ac:1d:64:de:
f1:b0:ce:50:01:ed:9c:15:06:e0:ce:84:0c:24:26:e0:99:a1:
7f:7f:82:25:87:89:db:72:d6:b8:7f:34:6f:19:a5:a2:80:59:
05:ae:02:d1:61:da:0e:fe:9c:0d:2d:29:e2:fa:ba:52:79:93:
cd:07:ff:5a:79:8e:a0:3a:84:04:d2:0f:99:80:c2:de:1f:50:
59:3e:c1:28:cf:da:6d:bc:33:b7:83:52:27:13:13:76:df:42:
9b:10:ff:fb:fd:e3:17:94:4a:44:bc:e5:68:e2:d0:e3:c1:77:
34:65:86:3a:39:74:bd:db:f4:ca:1a:52:1b:5b:44:92:f2:3a:
1f:93:c6:36:03:4f:21:10:10:1d:83:64:53:47:25:4d:f5:87:
28:93:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:32 2025 by rpki-client