Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/EuYflw2vpOToo9K8lFetTYAhWyo.roa
File: EuYflw2vpOToo9K8lFetTYAhWyo.roa (raw, json)
Hash identifier: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=
Subject key identifier: 12:E6:1F:97:0D:AF:A4:E4:E8:A3:D2:BC:94:57:AD:4D:80:21:5B:2A
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 019424453CC350D7D728D9625D3DA1E184E9
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/EuYflw2vpOToo9K8lFetTYAhWyo.roa
Signing time: Wed 01 Jan 2025 23:48:24 +0000
ROA not before: Wed 01 Jan 2025 23:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25220
IP address blocks: 91.223.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3c:c3:50:d7:d7:28:d9:62:5d:3d:a1:e1:84:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Jan 1 23:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12e61f970dafa4e4e8a3d2bc9457ad4d80215b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5d:26:56:f9:ef:c7:97:7a:f6:da:36:c5:81:
a5:3c:f2:db:5a:48:97:4b:78:09:2d:d3:ee:d0:d8:
03:be:2e:73:ad:23:48:e5:e4:39:92:9e:e6:e6:9d:
53:2f:c7:f8:03:86:9d:eb:7b:31:c8:47:bb:16:67:
78:1c:09:06:46:18:7d:46:75:18:b9:67:d6:49:5d:
f6:fc:2a:c1:fb:c8:a7:df:bd:c1:60:ab:25:20:f3:
ac:03:22:0d:e9:16:b0:ec:a9:9d:40:fd:ea:2e:7c:
3c:03:26:66:67:f0:b4:b9:8f:89:1c:a1:0a:cc:4c:
a2:55:19:37:cd:34:28:1b:5c:80:a8:28:4e:be:27:
2a:6b:40:c4:c8:c6:01:7e:9e:37:88:ae:d6:20:91:
f5:00:a7:12:9a:dc:52:b6:80:22:5f:e9:38:7c:bc:
a1:5a:f9:d5:8c:e0:02:75:bf:6a:56:a0:b4:ed:63:
7f:ef:88:23:cd:ba:8c:60:e0:cc:9d:35:72:de:20:
6b:7b:f8:e5:ce:42:45:0a:2e:2d:b0:16:22:ad:c2:
90:f8:78:d7:02:1f:ec:da:fb:10:c8:a6:68:64:44:
33:d5:63:8d:35:ff:e2:63:13:87:c1:54:99:82:7f:
2a:a8:cb:57:eb:b3:68:79:7c:ac:51:23:34:f9:b2:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E6:1F:97:0D:AF:A4:E4:E8:A3:D2:BC:94:57:AD:4D:80:21:5B:2A
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/EuYflw2vpOToo9K8lFetTYAhWyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.247.0/24
Signature Algorithm: sha256WithRSAEncryption
74:55:6a:ac:d5:23:64:12:c1:48:a0:9c:fd:4d:b9:83:90:12:
52:07:d3:bf:fb:83:30:04:5f:a3:20:a7:7e:f2:51:92:0f:97:
79:0d:a0:e3:fe:47:40:42:72:0d:ce:35:f4:68:40:3e:83:4f:
56:97:be:23:53:84:f0:b6:84:83:72:5a:2e:48:85:f3:4d:f4:
c4:3f:9f:db:74:78:51:d0:6b:4f:18:a5:78:e5:d7:55:eb:89:
92:f1:3e:38:9d:30:d7:18:80:2f:93:1e:3f:48:a9:49:9e:4b:
9b:fe:2d:89:c8:ae:64:18:4f:31:97:8d:32:c0:bb:13:04:51:
07:2b:ef:c3:c6:c1:c2:7a:36:68:3f:6e:98:49:e7:7a:a7:23:
a3:1a:62:ed:c6:fc:14:86:68:e5:21:a4:81:8d:1c:bd:13:07:
ad:0f:a5:ce:56:fe:23:50:88:ea:a6:f6:19:ec:9a:1f:e0:ec:
39:e7:7e:de:5b:74:39:27:0e:03:27:78:18:27:1d:fe:1a:19:
ff:c8:ad:97:fb:89:e1:cd:48:ad:8e:72:13:b3:98:97:a7:7d:
48:80:c4:63:23:fe:5d:b7:26:7a:e9:1c:94:7b:95:b4:ee:3a:
22:03:3f:02:6c:9f:53:26:6f:9c:ce:0c:3a:65:18:54:7d:8e:
ad:b2:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:33:56 2025 by rpki-client