Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/eGF4PY_wgfKdtXUANezmT92NTGM.roa
File: eGF4PY_wgfKdtXUANezmT92NTGM.roa (raw, json)
Hash identifier: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=
Subject key identifier: 78:61:78:3D:8F:F0:81:F2:9D:B5:75:00:35:EC:E6:4F:DD:8D:4C:63
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 019426D9C62A724B6D3C5FFC754064CB678C
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/eGF4PY_wgfKdtXUANezmT92NTGM.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51399
IP address blocks: 91.103.144.0/22 maxlen: 24
91.103.144.0/24 maxlen: 24
91.217.0.0/23 maxlen: 24
91.218.200.0/22 maxlen: 24
91.218.208.0/22 maxlen: 24
110.172.146.0/24 maxlen: 24
185.157.12.0/22 maxlen: 24
2a07:a080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c6:2a:72:4b:6d:3c:5f:fc:75:40:64:cb:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7861783d8ff081f29db5750035ece64fdd8d4c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:5a:46:89:bc:d5:f1:ce:da:40:5e:20:bb:
eb:39:fb:7a:bf:22:0a:f4:29:3c:82:97:1f:1e:48:
28:cf:84:fd:2c:32:f4:37:9f:91:7b:07:ab:a5:85:
fe:75:00:2f:2f:c5:a1:9a:3f:99:95:bf:ff:58:6a:
19:34:a9:d7:22:d4:a8:69:62:2a:b2:92:8f:8b:da:
5c:a3:a2:35:c8:58:c4:72:29:85:f3:99:b4:c4:7b:
c1:2e:59:b5:84:d9:0f:17:a4:ed:7c:41:c1:b8:b3:
a4:e9:ab:9d:5e:b6:52:b4:af:e6:af:b2:de:7c:04:
a2:4e:5b:29:31:79:64:ba:3f:33:4c:1b:2b:4d:9a:
d6:9c:7d:71:21:77:3b:d5:10:23:77:4d:34:22:02:
0c:3c:ce:7a:5a:e6:fd:02:7f:35:10:2a:37:77:34:
26:71:4d:20:df:80:24:36:1a:78:4e:13:b1:db:3a:
cd:3a:e2:c7:dd:57:d7:9e:8e:82:c5:33:d8:5e:e6:
2f:3e:61:a1:b7:de:0f:4f:65:da:00:c7:a6:3b:a7:
12:43:ad:93:05:b6:0c:cc:02:73:72:69:d8:d3:f6:
29:fd:93:ca:9a:46:52:4a:8d:1f:77:80:e5:0a:4a:
d6:a3:7f:31:9b:3f:09:6a:65:5a:de:19:c9:3c:bd:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:61:78:3D:8F:F0:81:F2:9D:B5:75:00:35:EC:E6:4F:DD:8D:4C:63
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/eGF4PY_wgfKdtXUANezmT92NTGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.144.0/22
91.217.0.0/23
91.218.200.0/22
91.218.208.0/22
110.172.146.0/24
185.157.12.0/22
IPv6:
2a07:a080::/29
Signature Algorithm: sha256WithRSAEncryption
0d:87:f4:56:09:ff:c1:d3:23:10:7b:04:0e:d0:3a:92:2f:d9:
01:ac:4c:e7:08:2c:50:ee:88:3c:8a:4e:b0:5c:98:5a:af:80:
88:de:3d:2c:f6:54:05:b2:f2:eb:0a:f0:66:fe:7d:64:68:d3:
d2:fd:7d:59:11:d3:a9:7b:9d:06:45:f9:d4:33:55:0a:af:8b:
d8:f5:44:b6:44:62:e7:64:e9:76:ce:e8:c3:42:b1:32:35:ee:
a4:6f:c5:17:55:2b:82:fd:23:d1:af:84:f9:37:89:94:45:8e:
72:db:31:e7:1d:80:d8:86:31:03:ea:ae:74:d9:00:28:47:ad:
4c:71:ee:e4:a9:6e:fc:5f:19:9f:91:84:c4:2c:73:73:c4:3b:
9c:aa:5a:35:87:04:79:03:ba:ff:71:47:12:14:dc:fa:63:dc:
e4:ac:8e:45:39:3e:f5:3b:9d:01:6f:e9:49:f6:42:3d:5d:46:
db:96:b2:3f:4c:64:99:8b:b5:ff:f3:ac:aa:49:e6:78:14:eb:
7f:47:3d:75:3b:e0:da:5d:c6:ec:11:c0:80:04:55:7e:e2:38:
bf:ef:ec:c7:6a:9d:a9:bf:cc:26:6f:b9:83:21:c2:a6:f2:6a:
88:70:fa:2d:94:34:b5:63:86:cb:3c:eb:a8:26:14:67:d8:7b:
64:13:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:02 2025 by rpki-client