Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/EzYELBbdECMUd5jL00V2yecSQYs.roa
File: EzYELBbdECMUd5jL00V2yecSQYs.roa (raw, json)
Hash identifier: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=
Subject key identifier: 13:36:04:2C:16:DD:10:23:14:77:98:CB:D3:45:76:C9:E7:12:41:8B
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 019425219277EB22E8A437AC847756C1306A
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/EzYELBbdECMUd5jL00V2yecSQYs.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 91.105.216.0/24 maxlen: 24
91.105.217.0/24 maxlen: 24
91.105.218.0/23 maxlen: 23
91.105.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:92:77:eb:22:e8:a4:37:ac:84:77:56:c1:30:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1336042c16dd1023147798cbd34576c9e712418b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:18:6e:39:7c:35:42:a6:f3:5c:73:a8:da:
c1:a9:44:4c:b4:cb:e2:7b:8e:05:44:2f:d7:08:91:
11:cc:03:b8:58:9d:86:33:e8:cd:3a:d4:d4:b1:8d:
79:1e:5d:76:6a:c5:ae:5f:84:64:fa:80:0d:3d:0c:
1f:02:1a:57:03:c7:70:b0:bc:e8:12:c8:6c:a8:16:
d7:39:a2:1a:d6:75:4d:8a:29:82:75:2e:be:2a:db:
ee:f7:60:15:3e:e0:53:64:d2:9e:98:09:ac:fb:3a:
05:66:8c:ac:ce:52:d8:59:e7:09:58:73:64:7e:e0:
2a:6e:ea:f6:9f:5a:74:a1:a4:92:26:9b:85:67:dc:
85:05:a4:c1:85:0a:77:f5:01:bd:6e:8e:3e:f6:6f:
93:ff:2e:af:6c:18:44:fb:ea:37:a7:f2:0a:e2:ca:
5d:1c:4b:a3:88:93:36:bb:9f:40:30:4b:77:4a:3e:
a7:af:70:77:7d:00:40:69:65:01:1d:1d:68:95:75:
4e:e0:1e:48:cd:c9:e1:62:f6:7c:16:fa:8c:17:73:
6c:43:eb:ab:1e:fa:af:70:b6:cf:3c:ac:eb:74:3a:
46:dc:ed:f6:d5:1c:b1:8a:2d:d6:f8:6b:e5:2f:93:
d7:5d:2f:7b:f0:bf:15:5d:21:aa:8b:12:37:53:6f:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:36:04:2C:16:DD:10:23:14:77:98:CB:D3:45:76:C9:E7:12:41:8B
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/EzYELBbdECMUd5jL00V2yecSQYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.216.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:96:30:58:a2:23:6f:bb:88:81:aa:44:dd:57:8c:a1:66:27:
4e:d9:d0:65:bd:91:24:f6:06:a9:96:f2:1a:84:2c:6d:56:de:
e2:23:ef:83:d5:d6:c6:13:2a:f6:56:d2:64:c3:94:9b:69:4d:
e3:38:d1:dc:2d:20:4e:b2:b0:2e:e6:8a:6c:46:9b:f0:f4:1c:
c0:9f:1c:a7:de:5e:72:93:9f:7d:ec:e9:21:e9:19:2d:56:e6:
01:a0:3a:85:a9:53:61:f0:7d:fa:16:5e:c6:bf:1c:12:2f:80:
c2:7e:9b:15:35:95:e6:f7:c5:ab:c8:83:88:30:06:a8:a0:09:
81:d1:4f:71:c7:cc:05:23:28:5e:8b:8d:07:bd:ea:ee:e2:ea:
ae:c8:46:93:bd:a8:92:4d:2a:70:75:db:59:00:67:07:d2:83:
34:e1:b5:97:1e:f6:b3:06:ee:8d:44:15:8e:88:84:87:5a:eb:
df:4a:08:19:0c:5b:dc:2a:21:dd:75:c8:ab:37:fd:40:67:3d:
66:33:e2:27:4d:67:ff:2f:55:60:ad:8b:8e:19:54:50:f9:4e:
46:43:a3:c8:ba:20:d3:72:6b:09:3d:d7:dd:e7:21:4e:0d:2c:
c7:4c:6b:99:59:53:fd:52:97:2e:ab:03:45:df:a8:3a:80:c2:
3e:b0:9c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:41 2025 by rpki-client