Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/2ErBYTx60jR3zTwcvfEzCw8rkw0.roa
File: 2ErBYTx60jR3zTwcvfEzCw8rkw0.roa (raw, json)
Hash identifier: 43knA/3oPzi8rW0tFxf+GCwvhyPhn7LmcHSabzre0HY=
Subject key identifier: D8:4A:C1:61:3C:7A:D2:34:77:CD:3C:1C:BD:F1:33:0B:0F:2B:93:0D
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F5EF45EDCC6C40773E565CE3E760
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/2ErBYTx60jR3zTwcvfEzCw8rkw0.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196801
IP address blocks: 95.87.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f5:ef:45:ed:cc:6c:40:77:3e:56:5c:e3:e7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d84ac1613c7ad23477cd3c1cbdf1330b0f2b930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:26:43:03:c4:8f:96:bd:c6:1f:64:00:51:
ed:8c:b3:6d:06:9c:60:17:68:2e:46:83:6e:dd:f6:
55:07:10:fe:aa:95:9c:7b:d0:13:20:d3:52:90:1b:
7e:de:b7:e8:a2:54:d6:e2:46:fd:d2:dc:6b:3b:3c:
69:67:d6:5e:d3:15:5e:fa:dd:17:41:2e:e4:5b:fd:
69:0e:4d:b8:e1:6c:db:d6:29:2a:36:22:28:44:9b:
79:8e:27:3e:e1:b5:9c:c1:5b:0e:34:f8:da:0e:4c:
ca:14:e6:04:d5:e8:c4:89:66:8e:3a:83:41:f4:78:
54:76:43:98:fa:4c:a2:a8:53:40:22:d4:31:3c:83:
aa:ba:49:cc:86:e3:91:ec:7b:ff:05:5a:ab:6d:e2:
5f:ea:fc:1a:75:e5:00:bb:78:c6:0c:dc:ed:fb:52:
de:f4:22:31:a4:65:5a:5e:88:6b:2e:c8:e2:55:3f:
c4:dd:fd:0d:4d:54:ba:eb:db:07:a0:7f:42:0d:83:
74:c3:97:91:77:c0:54:31:6e:44:bd:30:ec:1c:52:
a2:b2:0b:f9:01:75:db:48:fb:eb:70:a1:15:83:ee:
41:87:d0:7e:9b:74:a8:8a:79:d0:ff:e2:94:4a:f7:
84:f2:3b:39:0e:35:b3:b3:0b:ce:77:74:5b:10:18:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4A:C1:61:3C:7A:D2:34:77:CD:3C:1C:BD:F1:33:0B:0F:2B:93:0D
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/2ErBYTx60jR3zTwcvfEzCw8rkw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.87.251.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8b:07:ec:51:bc:a1:c7:fa:0c:e4:7f:8b:1c:9c:51:12:e0:
0f:f3:11:cb:e6:e4:8e:17:10:47:6e:08:38:15:59:34:db:8b:
c6:f1:bf:67:85:fe:97:3f:38:08:90:99:4e:c3:e1:e9:54:3c:
05:70:d0:49:6d:f3:25:ae:56:06:2d:d0:d3:ed:5b:90:90:c4:
d7:41:4a:74:10:f4:d3:12:81:ea:25:72:99:38:11:4e:dc:01:
7e:80:0e:8d:bd:c3:29:9e:8e:aa:a0:5a:d5:bb:a1:3e:77:0a:
b2:6d:81:80:8f:15:c0:c8:b1:8e:96:5e:af:ee:89:42:de:7d:
3d:4c:ee:62:8c:9a:e9:37:06:b2:0d:5c:7c:dd:60:c1:a8:63:
ec:7a:9b:4f:69:a0:bc:a3:77:94:81:6b:db:61:d7:bd:47:8b:
8c:c6:38:b2:da:f7:73:f2:c7:6e:db:6b:45:d5:a0:0d:31:46:
8c:a0:7d:31:94:40:6e:7a:d6:4c:88:9a:7f:1a:82:1b:32:80:
d7:1d:b8:f3:3f:29:90:40:a1:4f:7c:de:18:5d:55:30:9d:da:
d0:8a:7a:22:87:23:94:b1:58:d6:f9:98:94:92:e0:d8:bd:8f:
80:0a:24:00:9e:25:52:d2:fd:f4:a1:98:11:5f:5f:47:2a:74:
5a:c6:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:34 2025 by rpki-client