Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/eT5m53IL73YU9_5bJx83ttalH6E.roa
File: eT5m53IL73YU9_5bJx83ttalH6E.roa (raw, json)
Hash identifier: JlTHLmR+DNILunTV78e+k4LiP9+8ADy4n3cxM903NQQ=
Subject key identifier: 79:3E:66:E7:72:0B:EF:76:14:F7:FE:5B:27:1F:37:B6:D6:A5:1F:A1
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4EF30BEDDC77EA0D57FE7D36C047
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/eT5m53IL73YU9_5bJx83ttalH6E.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212341
IP address blocks: 91.108.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:f3:0b:ed:dc:77:ea:0d:57:fe:7d:36:c0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=793e66e7720bef7614f7fe5b271f37b6d6a51fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:46:08:76:f1:85:30:b3:69:e9:63:3f:fd:
63:99:44:5a:04:d4:54:2e:1e:55:54:16:a8:77:88:
bd:c0:ab:56:b2:ad:de:a3:78:ad:3b:80:9a:7b:55:
7d:d3:7c:7f:e3:72:11:2d:74:72:a8:a2:0e:05:01:
8e:2c:9d:49:ee:cc:6b:0a:d0:e1:dd:1f:b9:17:59:
75:19:39:35:50:4e:b3:d1:bf:f9:86:9d:12:75:cd:
26:4c:79:c3:4c:95:11:bf:97:26:5d:a6:4d:90:01:
ed:9b:a1:29:5a:a9:8c:79:01:03:10:62:e0:d8:cc:
6c:74:1a:7c:fb:de:b0:5c:41:3e:3b:2f:ca:06:11:
fe:cf:51:6e:bc:d4:a2:9a:97:3f:39:2e:b8:fe:1a:
a5:9c:4a:83:cb:a1:31:cd:60:ee:ef:c6:b4:1e:38:
51:6c:9c:2d:7c:e0:56:16:52:35:a0:a1:99:8a:9e:
47:a9:c6:55:06:20:ec:5a:62:f0:35:e4:75:57:c0:
cd:19:0f:65:bd:a7:84:33:49:2a:b0:9d:80:b7:d6:
d9:a3:2c:bf:18:b1:ce:fc:84:9e:03:87:d1:8d:50:
ff:5b:64:c2:80:15:96:61:03:34:81:4c:6d:71:97:
fc:8f:f7:3b:10:db:50:24:16:08:84:c0:d7:88:21:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3E:66:E7:72:0B:EF:76:14:F7:FE:5B:27:1F:37:B6:D6:A5:1F:A1
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/eT5m53IL73YU9_5bJx83ttalH6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.80.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:de:8f:4a:dd:e7:a2:d8:d9:a8:bc:9e:09:6c:40:ce:e5:33:
fc:9f:12:c0:bc:08:04:cd:53:c1:4c:ec:0c:b1:cf:d2:5f:cf:
7b:9f:95:6a:b6:f5:69:84:1b:ca:60:9c:19:a3:dc:46:f5:55:
cc:b7:7f:a6:fe:1e:47:b1:bc:ad:9b:4a:39:c2:6d:db:8a:6c:
e4:40:2f:3b:d7:db:5e:02:3f:9b:8c:9e:31:d8:20:d6:cd:1b:
ad:a4:3d:c2:08:19:71:e4:ac:b4:18:48:ad:2d:2e:98:95:45:
88:01:ac:a1:c9:ec:fa:e1:5e:99:90:93:fe:8e:40:dd:b4:2f:
c4:0d:97:d9:34:c4:09:a8:b0:0e:ce:b8:90:01:73:75:b9:e6:
e7:0e:58:0b:b2:a9:69:eb:15:c4:52:b2:72:08:3f:2c:d6:fb:
c0:16:88:44:15:63:eb:30:8b:08:dd:59:cc:5a:b3:af:9f:e7:
a3:0a:72:d0:18:ba:32:2a:84:e3:49:ff:ec:d4:51:6a:e2:b3:
0e:82:33:26:ff:d6:c2:df:13:76:8e:d2:d4:03:15:2f:c9:c5:
79:b6:c7:fc:b7:d4:0b:39:b3:bb:57:50:7b:55:95:e2:ac:27:
85:2e:69:54:02:55:82:b0:5c:c1:a4:b3:72:e3:ff:17:60:da:
a9:01:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:13 2025 by rpki-client