Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/eeeb_pmHU2o6Q9LMrkcCFFxKncQ.roa
File: eeeb_pmHU2o6Q9LMrkcCFFxKncQ.roa (raw, json)
Hash identifier: jh1F9XVv0BS8DMjn2BIpFv8Dx6nTb8DTCP5E43/bNTc=
Subject key identifier: 79:E7:9B:FE:99:87:53:6A:3A:43:D2:CC:AE:47:02:14:5C:4A:9D:C4
Certificate issuer: /CN=720606eddbcec7a57211941a67cc729b42915c5e
Certificate serial: 018CCA2BC687479B6A071C710FCD5DF9F609
Authority key identifier: 72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/eeeb_pmHU2o6Q9LMrkcCFFxKncQ.roa
Signing time: Tue 02 Jan 2024 12:35:15 +0000
ROA not before: Tue 02 Jan 2024 12:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 91.213.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c6:87:47:9b:6a:07:1c:71:0f:cd:5d:f9:f6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720606eddbcec7a57211941a67cc729b42915c5e
Validity
Not Before: Jan 2 12:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79e79bfe9987536a3a43d2ccae4702145c4a9dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:53:e9:0c:37:81:49:f1:47:db:3e:b1:ee:
a5:7d:b5:92:e2:d0:be:7e:5f:ab:96:85:50:8e:75:
c4:16:48:b0:57:15:e0:2b:c4:95:8e:9d:98:fa:62:
6a:7c:f1:74:4f:67:85:49:22:4e:66:41:c2:a3:e7:
cb:3a:fd:7b:dd:f6:5e:8c:1f:14:da:fb:10:f4:a7:
f0:76:d1:04:5b:a5:17:65:74:13:b6:5f:45:15:7a:
75:f9:a2:ec:48:24:39:67:61:a5:5e:65:61:54:7a:
e4:8a:7a:40:1c:34:1c:61:38:38:0b:8c:0e:5a:8c:
cf:cc:1a:bd:f2:a9:96:41:48:2c:11:c6:c0:d1:da:
ca:fe:b1:ab:47:43:ed:49:76:b7:7e:f9:77:f0:20:
fe:78:c8:66:1d:fb:4e:54:dc:4a:c2:63:b9:63:3a:
08:83:c7:1d:bd:61:1c:8a:28:0d:3d:5b:37:26:3a:
f5:e1:70:d7:f4:a1:1b:bf:71:c6:05:36:3a:79:b3:
1d:2f:74:d1:0e:5c:8b:70:be:e4:54:42:51:00:5a:
6d:95:ad:8f:58:89:35:9e:a7:9b:ea:e2:d7:82:71:
25:dd:b8:ef:80:32:50:59:88:48:bc:da:da:64:0f:
2f:32:2b:97:c3:f5:11:5b:2c:b3:22:20:67:e3:ca:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:9B:FE:99:87:53:6A:3A:43:D2:CC:AE:47:02:14:5C:4A:9D:C4
X509v3 Authority Key Identifier:
keyid:72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/eeeb_pmHU2o6Q9LMrkcCFFxKncQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f9:0c:e3:a1:44:e5:a2:60:ba:c8:6a:91:b0:5b:57:db:67:
59:24:9e:cb:1e:90:31:92:64:da:2f:09:cc:35:72:d2:43:53:
83:9b:ae:6c:9b:73:bb:e2:9b:30:3d:39:45:58:b1:c1:7f:74:
da:98:5c:f1:4f:e8:38:eb:d4:20:88:65:5f:7d:a4:63:00:b4:
24:a4:0f:cd:56:89:01:7a:74:f6:b2:eb:83:41:40:18:97:38:
bd:fd:7d:c2:41:26:f9:22:58:23:fe:27:e2:7b:b4:4e:9c:13:
a5:5e:c6:c9:b7:7e:08:70:cb:8b:c2:c6:6d:db:0a:c2:b7:d3:
e3:e5:36:03:c5:c1:82:f7:ce:dd:9f:e0:0e:5e:0e:cb:e3:8c:
9f:4a:49:53:35:41:94:59:54:0d:92:2d:61:97:fc:71:81:f4:
34:55:25:14:7e:56:07:24:57:64:96:50:93:0f:e7:e8:3f:1a:
d3:a1:53:60:f8:9d:00:8e:02:31:3d:31:10:eb:86:fb:75:fc:
40:ae:68:a8:d8:d4:49:ba:43:9b:d5:87:76:4b:86:5d:05:8e:
45:53:f0:c3:6d:09:14:3d:9e:9b:e2:04:a1:21:20:6f:dc:16:
32:a8:b6:3b:2b:d5:65:c0:5a:08:c7:21:2b:63:f8:97:e4:f6:
61:ac:30:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK8aHR5tqBxxxD81d+fYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDYwNmVkZGJjZWM3YTU3MjExOTQxYTY3Y2M3MjliNDI5
MTVjNWUwHhcNMjQwMTAyMTIzNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWU3OWJmZTk5ODc1MzZhM2E0M2QyY2NhZTQ3MDIxNDVjNGE5ZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW5T6Qw3gUnxR9s+se6lfbWS4tC+
fl+rloVQjnXEFkiwVxXgK8SVjp2Y+mJqfPF0T2eFSSJOZkHCo+fLOv173fZejB8U
2vsQ9KfwdtEEW6UXZXQTtl9FFXp1+aLsSCQ5Z2GlXmVhVHrkinpAHDQcYTg4C4wO
WozPzBq98qmWQUgsEcbA0drK/rGrR0PtSXa3fvl38CD+eMhmHftOVNxKwmO5YzoI
g8cdvWEciigNPVs3Jjr14XDX9KEbv3HGBTY6ebMdL3TRDlyLcL7kVEJRAFptla2P
WIk1nqeb6uLXgnEl3bjvgDJQWYhIvNraZA8vMiuXw/URWyyzIiBn48qS2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnnm/6Zh1NqOkPSzK5HAhRcSp3EMB8GA1UdIwQY
MBaAFHIGBu3bzselchGUGmfMcptCkVxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dZRzdkdk94NlZ5RVpRYVo4eHltMEtSWEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjljMDAtY2JlMC00Zjg4LWFlZDUt
OTlmNTQ5MWM0NDQ3LzEvZWVlYl9wbUhVMm82UTlMTXJrY0NGRnhLbmNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82YjljMDAtY2JlMC00Zjg4LWFlZDUtOTlmNTQ5MWM0NDQ3
LzEvY2dZRzdkdk94NlZ5RVpRYVo4eHltMEtSWEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9VVMA0G
CSqGSIb3DQEBCwUAA4IBAQB++QzjoUTlomC6yGqRsFtX22dZJJ7LHpAxkmTaLwnM
NXLSQ1ODm65sm3O74pswPTlFWLHBf3TamFzxT+g469QgiGVffaRjALQkpA/NVokB
enT2suuDQUAYlzi9/X3CQSb5Ilgj/ifie7ROnBOlXsbJt34IcMuLwsZt2wrCt9Pj
5TYDxcGC987dn+AOXg7L44yfSklTNUGUWVQNki1hl/xxgfQ0VSUUflYHJFdkllCT
D+foPxrToVNg+J0AjgIxPTEQ64b7dfxArmio2NRJukOb1Yd2S4ZdBY5FU/DDbQkU
PZ6b4gShISBv3BYyqLY7K9VlwFoIxyErY/iX5PZhrDBO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:38 2024 by rpki-client on console-ams.rpki-client.org