Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/EhB6weKGJ4-421K8pUvkm2LrMKg.roa
File: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (raw, json)
Hash identifier: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=
Subject key identifier: 12:10:7A:C1:E2:86:27:8F:B8:DB:52:BC:A5:4B:E4:9B:62:EB:30:A8
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 019422FC2A2CF6AF8D7141103C0A7AFE8214
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/EhB6weKGJ4-421K8pUvkm2LrMKg.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50471
IP address blocks: 109.95.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2a:2c:f6:af:8d:71:41:10:3c:0a:7a:fe:82:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12107ac1e286278fb8db52bca54be49b62eb30a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:6f:96:39:d5:85:ae:6d:3a:80:f6:da:e8:
fc:e9:90:79:04:0d:71:00:1a:9f:d4:c8:ee:a6:41:
b1:ac:f8:6f:61:2c:cd:1e:e1:47:aa:89:5f:d1:42:
66:5a:97:fb:34:69:1b:b0:f8:7b:d7:21:6c:e0:14:
da:f8:f8:bd:df:8d:4f:6e:a5:7b:80:53:6f:98:74:
6e:5e:b9:48:f8:30:21:91:9c:af:b4:4f:29:91:b3:
7b:24:dd:a6:03:14:90:8b:57:a9:a4:8e:17:72:64:
c4:a0:02:77:17:06:88:b4:aa:8f:7b:7e:eb:eb:52:
87:93:93:88:b5:ac:7b:85:3e:79:2f:e9:17:1e:2a:
4c:59:56:5b:4d:c6:00:24:46:c0:4f:d4:4a:57:8e:
d6:ff:cc:85:50:c0:8a:0b:78:4d:6e:46:fe:3e:03:
60:a3:26:ec:ae:f8:3c:75:f0:2b:12:a4:11:05:7d:
e5:5b:a9:e6:7d:92:e3:38:ff:7d:d4:ee:0e:89:87:
f1:7a:41:39:d8:f9:35:79:69:28:3b:38:2e:fb:d7:
e7:cc:59:36:89:19:35:80:9e:2c:f5:0b:85:fa:09:
56:1a:43:67:e0:a2:8c:3b:81:7a:b0:1b:78:e8:b5:
62:b9:b6:3a:c8:8b:83:e9:f0:b7:1b:d6:dc:e6:34:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:10:7A:C1:E2:86:27:8F:B8:DB:52:BC:A5:4B:E4:9B:62:EB:30:A8
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/EhB6weKGJ4-421K8pUvkm2LrMKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.216.0/21
Signature Algorithm: sha256WithRSAEncryption
60:23:ed:27:f8:ed:d1:4b:97:fe:18:ea:58:f8:46:3a:d6:3b:
63:34:8c:e6:e5:9c:a5:ea:90:2e:9d:10:57:1c:68:4a:fe:5b:
fa:b2:5b:39:de:3f:f1:f5:e7:81:02:91:28:77:0e:59:35:d3:
00:ff:86:bc:b2:76:18:59:b6:99:d2:87:eb:3a:a3:21:a7:44:
fd:27:72:25:b5:5f:86:ee:1d:39:40:b5:d9:34:e5:cd:13:77:
25:b2:f6:67:29:e9:14:7e:92:a7:49:a4:85:17:9c:20:62:bb:
e2:c5:52:9f:95:c6:a2:55:09:f8:2e:3b:d7:35:e4:5e:db:12:
ea:cc:18:f8:1f:ca:52:5a:5e:8e:d9:5e:19:98:90:79:d9:b7:
94:0d:a5:e6:f6:9f:0c:bf:60:23:8b:13:ed:76:2a:90:bb:56:
22:c7:19:d6:55:a1:ba:3b:7e:c3:12:65:b9:66:e3:29:12:7f:
94:03:7e:82:6b:a9:d7:d7:73:11:4b:e3:6c:45:11:6c:a9:d1:
73:b2:70:53:31:84:b1:82:a5:0f:c8:16:d1:be:af:6f:9d:a2:
12:7d:13:4e:4a:51:02:c1:e3:c8:f1:52:5b:55:4d:09:12:35:
9c:dd:8b:14:9c:f4:49:a5:15:ea:cd:47:63:9c:22:12:5e:e9:
d4:1c:0d:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/Cos9q+NcUEQPAp6/oIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGJiZWI3ODMzYmRjOWJlNzI1MDYxMTU3YzAzOWYyYTEw
ZjFhODAwHhcNMjUwMTAxMTc0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjEwN2FjMWUyODYyNzhmYjhkYjUyYmNhNTRiZTQ5YjYyZWIzMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16lvljnVha5tOoD22uj86ZB5BA1x
ABqf1MjupkGxrPhvYSzNHuFHqolf0UJmWpf7NGkbsPh71yFs4BTa+Pi9341PbqV7
gFNvmHRuXrlI+DAhkZyvtE8pkbN7JN2mAxSQi1eppI4XcmTEoAJ3FwaItKqPe37r
61KHk5OItax7hT55L+kXHipMWVZbTcYAJEbAT9RKV47W/8yFUMCKC3hNbkb+PgNg
oybsrvg8dfArEqQRBX3lW6nmfZLjOP991O4OiYfxekE52Pk1eWkoOzgu+9fnzFk2
iRk1gJ4s9QuF+glWGkNn4KKMO4F6sBt46LViubY6yIuD6fC3G9bc5jQ1+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBIQesHihiePuNtSvKVL5Jti6zCoMB8GA1UdIwQY
MBaAFF0LvreDO9yb5yUGEVfAOfKhDxqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2It
NjMxYzZkMDllODQ1LzEvRWhCNndlS0dKNC00MjFLOHBVdmttMkxyTUtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2ItNjMxYzZkMDllODQ1
LzEvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbV/YMA0G
CSqGSIb3DQEBCwUAA4IBAQBgI+0n+O3RS5f+GOpY+EY61jtjNIzm5Zyl6pAunRBX
HGhK/lv6sls53j/x9eeBApEodw5ZNdMA/4a8snYYWbaZ0ofrOqMhp0T9J3IltV+G
7h05QLXZNOXNE3clsvZnKekUfpKnSaSFF5wgYrvixVKflcaiVQn4LjvXNeRe2xLq
zBj4H8pSWl6O2V4ZmJB52beUDaXm9p8Mv2AjixPtdiqQu1YixxnWVaG6O37DEmW5
ZuMpEn+UA36Ca6nX13MRS+NsRRFsqdFzsnBTMYSxgqUPyBbRvq9vnaISfRNOSlEC
wePI8VJbVU0JEjWc3YsUnPRJpRXqzUdjnCISXunUHA2w
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:23 2025 by rpki-client