Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/rrezcNEUN6MGnNLWl4gekJAeqFw.roa
File: rrezcNEUN6MGnNLWl4gekJAeqFw.roa (raw, json)
Hash identifier: KOXLh158R4ZUMzu019SjfG8NkVDv1gPIQsLtneXh9WQ=
Subject key identifier: AE:B7:B3:70:D1:14:37:A3:06:9C:D2:D6:97:88:1E:90:90:1E:A8:5C
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019428266D1E953221EDF071E9210DADE6DD
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/rrezcNEUN6MGnNLWl4gekJAeqFw.roa
Signing time: Thu 02 Jan 2025 17:53:14 +0000
ROA not before: Thu 02 Jan 2025 17:53:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50352
IP address blocks: 91.242.250.0/24 maxlen: 24
185.87.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:6d:1e:95:32:21:ed:f0:71:e9:21:0d:ad:e6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jan 2 17:53:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb7b370d11437a3069cd2d697881e90901ea85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:a7:a8:34:1e:9b:f4:7a:11:a7:a2:d8:64:
a7:58:75:b6:be:ba:d0:a1:b2:43:96:38:f3:30:21:
6d:fb:df:9c:e5:61:1c:e3:3f:5a:b5:a0:69:5f:84:
d8:c6:b9:d4:74:a7:0d:2e:9e:8c:44:8b:14:66:81:
b0:af:57:5f:04:b6:f3:79:ac:25:6c:17:de:c3:bf:
ee:cd:38:8d:7f:d6:e9:ed:00:06:cc:04:bd:9a:31:
cf:86:c5:f7:19:c7:d8:68:0a:92:ca:44:e8:fd:a6:
80:37:11:3c:a9:5f:2d:62:91:b5:f3:ca:e4:b6:98:
f2:9c:e8:44:f0:6f:bf:ea:d1:c3:58:e0:9a:11:3b:
a5:d6:2c:56:f4:97:b1:9d:69:7b:16:3b:9a:cc:5d:
6d:3f:9d:ff:95:49:e8:21:ad:5e:fd:2a:2d:ef:e4:
5a:4c:9e:0c:2d:3c:fb:7c:11:cd:8c:a1:33:57:7b:
f7:ba:50:2a:6b:ed:59:20:c8:ea:49:6f:e0:8a:7c:
f3:8e:1b:19:ef:9b:4f:0f:e1:68:49:08:6a:1a:0d:
e7:52:d9:cc:96:20:fc:44:62:ad:5d:5e:60:c2:71:
3f:34:c2:7f:7c:57:6c:60:34:94:2f:aa:34:ea:61:
41:b3:82:20:e2:06:a6:2d:ec:e3:17:8e:00:bf:2c:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:B3:70:D1:14:37:A3:06:9C:D2:D6:97:88:1E:90:90:1E:A8:5C
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/rrezcNEUN6MGnNLWl4gekJAeqFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.250.0/24
185.87.78.0/23
Signature Algorithm: sha256WithRSAEncryption
45:99:b2:97:09:6b:52:af:11:15:b9:f0:4f:78:c2:e6:0d:59:
85:1a:41:15:86:26:ac:dc:28:d4:ca:68:f1:f0:a2:a9:7c:58:
26:8e:b8:2a:a9:98:b4:41:04:4e:49:c9:83:cc:75:69:6a:df:
15:46:60:1e:aa:97:2d:52:f6:77:94:75:9b:aa:2b:d9:8b:04:
c6:b7:79:1e:3d:45:0e:72:df:9b:3c:d0:fd:b0:be:d9:f1:39:
be:d3:9e:4a:cc:b1:c1:15:e2:48:f8:a1:2b:31:33:fd:94:80:
b3:65:36:17:77:a8:6e:1c:32:f2:15:02:1a:78:91:12:3b:9d:
03:29:1e:44:78:34:2d:47:70:6a:70:05:86:00:e7:52:db:51:
43:3a:c1:be:92:87:22:6d:b9:71:a3:0f:6f:9f:ca:ed:98:95:
c8:43:a2:da:59:53:1d:72:03:52:da:22:d2:f9:d3:c5:b3:f2:
6d:9b:db:27:25:c8:6e:cb:a6:84:6f:48:59:ec:74:03:3d:77:
70:22:5b:86:1f:6e:82:cc:a3:62:63:9a:c4:d9:aa:08:77:f4:
64:a3:be:9e:e2:de:82:89:48:dd:2a:c1:d9:d8:ba:69:e5:61:
6d:28:86:76:1b:2f:be:4b:89:aa:29:92:ff:06:39:2f:ee:34:
d0:4c:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:47 2025 by rpki-client