Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/ebErOTcxF8x0HRmokQpD8A9P798.roa
File: ebErOTcxF8x0HRmokQpD8A9P798.roa (raw, json)
Hash identifier: hgALEdNUDsS4deffBsaMplhK9QNYL4vbKGcbf+NsbgE=
Subject key identifier: 79:B1:2B:39:37:31:17:CC:74:1D:19:A8:91:0A:43:F0:0F:4F:EF:DF
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 01942144636C6AAE1CFB1F83A838CFBB043E
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/ebErOTcxF8x0HRmokQpD8A9P798.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51735
IP address blocks: 91.220.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:63:6c:6a:ae:1c:fb:1f:83:a8:38:cf:bb:04:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79b12b39373117cc741d19a8910a43f00f4fefdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:66:3d:29:a4:b2:e0:f5:b1:2d:b4:70:c4:
cf:be:38:62:61:17:a1:e1:ec:90:35:09:d5:3e:41:
59:36:e2:7d:b1:33:e5:3f:77:ec:71:49:70:2e:bb:
f2:70:25:6b:5a:31:87:fd:54:69:3b:3e:98:9d:70:
5a:36:36:50:86:0d:3d:e5:db:ae:5d:c2:06:b4:49:
ad:61:36:0b:67:37:c9:de:f2:9a:60:ab:59:1f:56:
e9:f6:c2:c2:00:b0:83:d2:d2:fd:e2:3f:50:f4:d8:
f1:3b:3b:7e:b9:d1:ec:ab:5f:0d:4c:43:5a:b3:c3:
9e:44:1b:e5:80:08:1d:41:f3:d6:d1:cc:f2:35:fa:
7d:77:ed:99:14:41:de:ec:6b:0e:78:00:03:4f:ef:
8e:5e:eb:80:b4:2b:c1:9b:48:8a:d4:eb:a8:64:f3:
a4:7b:93:31:80:63:3f:51:c4:be:77:06:f0:3b:51:
00:98:87:e2:05:1b:b8:a6:ba:60:bd:a1:ab:2d:54:
a0:c2:18:61:fb:b1:29:4c:8f:8b:27:b7:a5:51:6e:
44:3d:53:d6:c7:1d:c2:b9:80:f0:01:9b:ad:a4:c0:
25:e1:68:f1:1e:a9:b2:e5:56:18:cb:b8:76:db:f4:
b6:de:4c:ce:e4:4e:6d:5e:4b:25:58:e8:04:fb:2d:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:2B:39:37:31:17:CC:74:1D:19:A8:91:0A:43:F0:0F:4F:EF:DF
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/ebErOTcxF8x0HRmokQpD8A9P798.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.78.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c7:fe:b2:22:44:11:d5:f0:7d:e5:a9:fd:f3:9c:67:e3:ca:
da:60:96:9e:8c:17:ee:c4:35:d9:20:8e:db:3f:1a:e2:56:98:
70:10:29:1f:b0:2f:1c:07:5d:bf:ee:e7:33:0a:f4:ee:22:4e:
f8:86:0f:e9:a1:59:85:16:ca:7d:4c:84:7c:6a:91:96:cc:7b:
0b:61:20:c3:5f:6b:3e:e9:8a:28:2b:86:21:54:4d:d1:4f:de:
05:1c:4a:37:94:b7:ac:1a:da:1b:5f:bf:37:58:88:91:12:d9:
2f:41:ca:e4:68:1d:45:b4:9a:cb:f9:3a:37:4c:d0:9c:8a:72:
43:2a:45:2b:2b:f9:c2:d0:38:12:c9:d9:93:cd:a3:4d:e4:ef:
e7:57:bb:cd:40:f3:c4:f9:38:d6:10:85:5a:c4:94:15:5d:04:
1b:32:45:e3:05:dc:18:5a:79:91:d6:cf:2d:bc:f8:e6:36:02:
ec:39:8e:88:0a:7f:f1:df:2e:54:c1:9a:80:cd:71:bc:cd:68:
fd:3c:9a:cf:20:b3:c9:93:0f:19:a0:c1:42:89:87:c9:05:4d:
13:e6:44:04:e9:79:fd:66:d7:7c:e1:27:d9:f2:0e:35:a4:4b:
18:bd:3f:42:63:f3:25:cd:54:46:7c:8d:93:b3:15:9e:46:d8:
c4:f0:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:33 2025 by rpki-client