Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/0Efo2x6sOPETsj-22hP07U1zWsY.roa
File: 0Efo2x6sOPETsj-22hP07U1zWsY.roa (raw, json)
Hash identifier: OgAUZjtS9ZnkCG32qF7WTz7BpSyV5BH58J/2I983ulI=
Subject key identifier: D0:47:E8:DB:1E:AC:38:F1:13:B2:3F:B6:DA:13:F4:ED:4D:73:5A:C6
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B57434E387C83CCD79A1D1A6691C9E
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/0Efo2x6sOPETsj-22hP07U1zWsY.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27399
IP address blocks: 82.98.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:74:34:e3:87:c8:3c:cd:79:a1:d1:a6:69:1c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d047e8db1eac38f113b23fb6da13f4ed4d735ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:44:ea:c1:d8:58:e5:0a:6c:84:0d:f8:35:
03:5a:17:dc:a3:f9:61:8c:9a:6c:93:23:53:ec:ba:
ec:91:55:ca:ab:97:b3:5b:41:a7:cf:66:9c:b4:71:
c5:a7:b9:4d:0a:c8:b8:aa:bc:16:ab:f6:27:e6:c7:
07:9d:47:06:14:2d:0b:be:c5:5b:f2:db:55:53:ac:
0d:33:eb:61:09:59:7c:44:43:48:ea:14:dc:78:da:
4f:53:a6:b3:e1:5f:fe:1f:c4:f7:ae:c1:86:29:c6:
3d:aa:01:93:6d:1c:c1:91:a2:33:ff:c1:90:fb:50:
c6:a8:0f:a0:c0:75:e0:d3:3a:07:05:6c:9e:ee:c0:
d6:6a:2e:fb:2e:e7:69:dc:6c:e8:c0:e4:8e:f6:7c:
fd:c9:da:ed:57:dc:2d:97:ff:43:76:08:16:ba:78:
8b:fc:34:aa:24:df:1b:a1:cb:66:16:63:50:ac:32:
ad:d0:79:1d:96:42:0e:ef:ed:d9:67:08:d9:11:15:
e8:33:b7:16:5c:46:41:ef:2d:13:04:92:ad:86:7b:
48:9a:fc:3d:3d:6d:31:d0:06:5d:33:3c:1b:74:32:
a8:a1:1a:cd:cf:6b:46:25:0b:a8:a9:bb:0a:b2:3a:
9f:65:74:65:f6:93:8e:b8:40:78:d3:13:7e:b9:12:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:E8:DB:1E:AC:38:F1:13:B2:3F:B6:DA:13:F4:ED:4D:73:5A:C6
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/0Efo2x6sOPETsj-22hP07U1zWsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.194.0/24
Signature Algorithm: sha256WithRSAEncryption
86:93:b2:11:39:a7:b3:7b:d1:39:d4:c0:17:f5:52:75:7c:2c:
8b:fd:cf:ac:82:eb:10:8a:82:fa:fc:7a:7a:94:39:cf:93:f9:
ab:99:74:0b:e5:c4:0d:ef:79:b9:ea:e7:53:82:02:55:61:64:
01:0d:08:20:80:d3:67:13:55:f7:ba:8f:85:aa:ff:d1:d6:5b:
30:4b:2c:1f:22:72:80:aa:8d:cc:f9:a4:04:6e:58:78:2f:17:
e9:41:14:f3:b0:24:fa:93:ee:36:46:8f:2d:b9:14:06:91:ef:
37:fc:2a:12:bc:50:1b:ff:32:c7:81:03:a1:de:49:e3:0f:a0:
ba:c4:53:9f:cb:7e:ab:74:4b:0e:3c:d2:64:4f:8a:96:81:41:
cd:cf:e7:26:38:12:f2:21:35:b6:91:a2:30:ed:a3:50:22:e1:
5d:f9:ec:2f:59:69:df:2d:f2:fd:55:1d:a5:de:61:d2:97:0f:
41:fc:b3:c5:30:2a:b9:4b:87:0c:7e:79:df:4f:80:c1:a8:65:
33:0b:b3:dc:0a:6a:4d:ad:31:c1:62:e6:07:84:aa:18:61:ad:
67:fd:aa:60:b4:30:7c:2a:b6:84:d4:1a:34:bf:34:f1:35:fa:
2d:e7:a2:62:71:ba:f2:04:87:7b:dd:4a:5e:3c:08:c6:45:f4:
73:f8:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:15 2025 by rpki-client