Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/eVimXbeUG-mEaqJ8wWvzirp1aiE.roa
File: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (raw, json)
Hash identifier: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=
Subject key identifier: 79:58:A6:5D:B7:94:1B:E9:84:6A:A2:7C:C1:6B:F3:8A:BA:75:6A:21
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 01942068735156460316576303325334EFAA
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/eVimXbeUG-mEaqJ8wWvzirp1aiE.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60195
IP address blocks: 91.204.28.0/22 maxlen: 22
91.238.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:73:51:56:46:03:16:57:63:03:32:53:34:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7958a65db7941be9846aa27cc16bf38aba756a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:6b:af:cc:64:51:c6:91:f8:91:0c:08:5f:
c6:fd:c2:4b:46:b8:8a:da:41:dc:db:b3:2b:1d:36:
4e:e6:3f:47:97:e6:66:57:09:bc:2d:2a:a1:d8:fe:
84:97:30:b7:1a:06:0f:58:9e:63:a6:75:d9:e8:87:
b5:d7:5d:d7:9e:9f:2f:7b:87:2b:4c:63:f3:84:71:
95:ce:a4:3a:dc:fb:4f:b9:57:74:44:b6:fc:9a:59:
6e:d0:2a:ad:ce:44:c7:07:b5:a5:a6:84:5c:69:5d:
4d:64:e6:22:e9:ae:d4:47:e7:6a:3f:8f:b2:2d:f8:
e3:d1:2b:38:cd:28:23:54:52:02:ce:64:51:18:d3:
18:bf:f1:d2:51:ff:9c:b8:1d:d5:e4:e5:00:bd:a3:
72:40:6e:f9:57:7a:8b:79:e2:da:2d:53:ff:e6:d3:
03:03:50:8d:5f:67:96:b1:7d:18:4d:3f:83:75:93:
df:c5:d1:45:8d:3d:0c:32:af:11:ea:c4:0f:40:ff:
2e:57:76:28:db:54:3d:e0:17:7b:e6:21:d5:12:da:
d2:e7:1b:ad:67:98:d0:a5:71:7b:79:3e:0e:01:eb:
fe:c8:18:0b:46:04:17:68:da:0f:51:e1:c8:1d:af:
22:60:6b:46:93:b0:15:80:8b:dc:66:35:46:43:f9:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:A6:5D:B7:94:1B:E9:84:6A:A2:7C:C1:6B:F3:8A:BA:75:6A:21
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/eVimXbeUG-mEaqJ8wWvzirp1aiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.28.0/22
91.238.166.0/23
Signature Algorithm: sha256WithRSAEncryption
37:85:99:b0:e6:88:14:14:8b:37:4f:24:a2:03:4c:13:f8:33:
de:76:72:0a:0b:fb:0b:20:97:03:7b:56:95:8f:e2:00:42:7c:
00:7b:bb:15:7c:44:57:fe:46:91:fa:8c:18:3d:1a:70:e0:b5:
eb:53:d6:dd:b5:35:01:4a:6a:b5:04:3e:6b:18:dc:7a:86:6d:
7a:44:e7:74:5a:25:1f:ae:c2:55:34:b5:0c:6b:3e:6b:b8:32:
4d:4d:36:6b:ad:d9:67:30:7a:6c:2d:cf:d7:3b:85:2e:24:16:
5b:7a:6e:08:d1:23:da:85:4c:f1:4c:e3:77:2f:dc:e4:1d:2e:
51:7c:96:07:3f:be:34:ca:73:50:4e:66:4a:05:97:00:a2:ed:
7d:55:10:b7:e7:eb:9a:a6:b4:95:f2:2c:e9:79:15:ec:09:19:
34:e4:cd:b4:18:95:9a:3a:79:e3:d6:96:ef:e2:1a:3c:55:3e:
c6:f4:15:15:22:36:76:28:3f:63:bd:79:f3:9f:e4:c2:bb:4f:
e1:5d:2c:82:42:3d:7f:79:9f:39:e8:a7:57:d5:53:8d:2b:df:
2d:ce:16:7f:9c:21:66:2c:06:f3:2d:1f:d1:8c:41:f9:8e:a4:
0a:8f:1e:53:10:a6:78:f3:be:3f:46:35:38:6b:2a:d2:06:52:
1f:c6:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:48 2025 by rpki-client