Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/EJzvV6VT4JO2fNcaeaZDcT8DKYo.roa
File: EJzvV6VT4JO2fNcaeaZDcT8DKYo.roa (raw, json)
Hash identifier: bG9n2ritOo8P4pLXuKhyV+b01tNOeWKOB0xqyu4uUe4=
Subject key identifier: 10:9C:EF:57:A5:53:E0:93:B6:7C:D7:1A:79:A6:43:71:3F:03:29:8A
Certificate issuer: /CN=032755057c69bd7ba7da22520109e49b5b04cc03
Certificate serial: 019427B3FFA5F773877E2309F4A141541C41
Authority key identifier: 03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/EJzvV6VT4JO2fNcaeaZDcT8DKYo.roa
Signing time: Thu 02 Jan 2025 15:48:15 +0000
ROA not before: Thu 02 Jan 2025 15:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49817
IP address blocks: 91.195.2.0/23 maxlen: 23
91.195.2.0/24 maxlen: 24
91.195.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ff:a5:f7:73:87:7e:23:09:f4:a1:41:54:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032755057c69bd7ba7da22520109e49b5b04cc03
Validity
Not Before: Jan 2 15:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=109cef57a553e093b67cd71a79a643713f03298a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:9c:0e:48:dd:e0:6c:87:e1:b1:6f:1a:a8:
2d:69:8d:32:91:1b:16:9c:31:52:4e:e1:3a:c8:d1:
81:b0:1e:a6:7f:23:bf:bf:f6:31:16:18:e6:bb:cd:
1f:20:02:06:17:8b:43:0b:bf:ee:82:8c:f3:74:e0:
c9:98:49:da:4c:cf:2c:15:9a:eb:4b:8c:61:ed:6a:
90:e6:59:d7:1d:2d:05:6f:37:c5:6a:e5:6b:fb:8c:
90:0f:ba:eb:06:b9:4c:c7:9a:7d:d6:69:57:2d:fe:
6a:7e:53:f7:14:92:cd:03:e3:da:75:d4:53:19:e5:
c3:0a:33:f9:db:4c:5d:67:56:97:e0:e7:bb:0c:a3:
4f:81:b5:70:28:89:b7:55:fc:80:6d:5d:d5:ed:fe:
97:3e:13:d4:92:26:78:96:e2:e5:68:8d:bf:94:f8:
f3:3a:45:56:f4:4e:e2:0a:2a:b5:e9:3c:1d:e8:f4:
1a:fd:66:a0:0a:d6:c3:01:39:1c:a7:ba:e7:f4:15:
bd:a3:85:fc:31:e3:a7:60:c4:56:c5:87:3a:43:4b:
a3:99:53:40:47:c8:b5:cc:b6:f1:59:a8:cb:a2:74:
8b:90:f8:d9:e5:1c:ba:ce:19:22:7c:da:b5:0b:27:
fe:47:b9:b1:39:1d:5c:0f:1c:87:58:77:c1:39:42:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:EF:57:A5:53:E0:93:B6:7C:D7:1A:79:A6:43:71:3F:03:29:8A
X509v3 Authority Key Identifier:
keyid:03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/EJzvV6VT4JO2fNcaeaZDcT8DKYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.2.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:c0:db:3a:ac:38:9f:74:a7:25:86:83:27:fa:00:c5:57:da:
cf:4e:1e:f8:1d:cf:d1:14:52:73:29:cc:73:9d:c4:b9:fe:4b:
e3:19:15:17:93:2e:3f:d2:da:97:2f:03:7a:21:27:70:c9:f6:
7a:65:dd:9b:53:d0:62:02:10:c1:7d:85:6f:87:6d:36:f8:ea:
e1:eb:c7:5b:c9:be:f7:75:45:fe:83:75:c3:8e:2b:3d:4d:3f:
84:cf:bf:c5:01:56:c8:88:a0:aa:15:b7:21:68:8e:b6:59:4d:
23:ba:6c:88:ac:28:1e:c0:03:8c:80:de:5e:6f:01:3d:29:7b:
c9:f2:dd:9e:f3:60:f8:51:c9:9b:66:03:16:0e:01:58:50:4e:
59:cb:2f:cc:89:03:a0:db:7b:28:d0:c1:98:55:6e:d1:d0:7d:
1a:e2:a4:c4:a6:8a:49:03:ac:7e:45:89:6a:7d:3b:d7:13:58:
0b:c1:cd:35:3c:46:00:40:1e:a3:6f:5d:a3:85:2b:9b:dc:df:
53:ff:5a:24:1c:44:e3:6f:b1:dd:59:30:2f:41:0a:7b:ce:1c:
8d:9f:bb:8c:eb:09:e3:70:5d:a5:31:2c:68:66:e6:b0:73:06:
78:fe:e1:e7:1b:ef:d3:5f:5a:57:8b:cc:88:9f:96:94:83:b0:
4a:0b:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:51 2025 by rpki-client