Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa
File: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (raw, json)
Hash identifier: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=
Subject key identifier: 11:19:CB:FB:64:DC:66:B3:B8:B4:91:7E:B0:30:DA:54:D9:4C:62:76
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 01942823B7B0A8CFF63824EB3D2D718C5F2C
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa
Signing time: Thu 02 Jan 2025 17:50:16 +0000
ROA not before: Thu 02 Jan 2025 17:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210303
IP address blocks: 194.107.252.0/22 maxlen: 22
2a09:8900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:b7:b0:a8:cf:f6:38:24:eb:3d:2d:71:8c:5f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Jan 2 17:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1119cbfb64dc66b3b8b4917eb030da54d94c6276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:4b:b2:fe:8e:a9:32:f9:ee:eb:13:3d:c3:
a7:75:06:63:ec:b3:b5:82:27:cd:c5:50:11:8e:17:
d5:65:5b:3f:f5:12:36:07:0f:20:9f:71:89:81:ad:
bf:e3:30:47:c3:ae:1a:4f:b6:ec:9c:16:06:9e:c9:
b3:b2:36:ad:a7:c7:0b:33:9f:6c:2f:3a:40:ea:a2:
e5:cd:2c:a0:32:b1:8e:72:d9:6d:46:d6:b7:47:8d:
33:ad:46:5a:65:1b:36:6e:d4:b0:24:bb:71:6f:d5:
fd:1c:1d:32:b2:cc:af:a7:0b:a0:69:94:74:aa:fa:
47:c4:62:e6:a7:4f:c6:4d:dd:12:9f:62:a4:ff:08:
00:91:a5:51:93:69:08:a4:44:04:60:3c:b7:2e:f8:
91:5b:34:50:dd:2b:d0:30:21:3b:f3:96:cf:3e:43:
36:f4:8d:4d:0d:e6:d6:0e:74:b2:16:c0:c0:aa:44:
86:d4:ad:d1:49:bc:d2:60:15:2d:b3:d8:a0:3c:c8:
b6:5c:cf:69:f3:dd:36:d1:69:71:b6:a5:e8:c0:46:
bd:50:99:9d:29:5c:53:ec:ea:7d:d9:bd:71:e0:d3:
96:42:d3:c5:c7:35:df:46:7f:6f:89:e4:85:ef:f0:
a9:d4:9b:b5:b7:a5:9a:05:c6:06:12:85:66:f4:76:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:CB:FB:64:DC:66:B3:B8:B4:91:7E:B0:30:DA:54:D9:4C:62:76
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.252.0/22
IPv6:
2a09:8900::/29
Signature Algorithm: sha256WithRSAEncryption
73:fa:72:00:4e:65:6e:37:b7:5d:40:69:4a:b9:31:6d:6e:31:
c1:a4:30:a6:8d:ad:de:0b:c1:01:42:ad:52:3d:3d:81:f8:af:
83:8d:11:1d:b5:32:6e:d0:3c:fc:5f:f8:8d:0a:8d:a6:8a:08:
4a:b8:15:fa:17:7d:1d:34:80:f4:f4:41:4d:45:b4:a7:de:f5:
39:06:72:92:ae:0d:d8:4d:12:a1:85:53:06:62:7f:94:51:64:
e3:e8:f5:52:20:5f:5f:70:33:62:b9:08:9a:e3:45:92:c7:38:
ba:e4:29:91:fb:32:dc:af:66:c2:e4:27:bb:0c:f0:6e:01:25:
19:87:53:b6:72:72:fb:25:17:59:25:99:35:2f:f5:4b:c0:e6:
3b:e7:45:6a:2c:86:45:e9:dd:43:d2:bf:d2:1e:e4:74:e1:c1:
7f:4d:99:db:8e:aa:d1:2f:9e:28:57:76:ec:26:09:62:06:a9:
05:47:63:d3:6c:3a:f1:0f:b7:68:1f:ff:6a:a2:89:27:5b:1f:
4f:07:b8:00:d8:8c:37:d5:c3:33:90:f9:b9:b9:82:fc:8f:a7:
cc:70:99:fe:93:3c:c1:a4:f8:b0:38:16:2f:ee:09:17:39:0f:
a9:9f:eb:88:f8:63:88:5a:c4:f1:47:cf:99:60:f5:0d:0e:66:
e9:fb:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:12 2025 by rpki-client