Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ERfkousVonIMuCr9wxG9Vcm8Ec0.roa
File: ERfkousVonIMuCr9wxG9Vcm8Ec0.roa (raw, json)
Hash identifier: q9oUm7pF8ftdX2wOhaKEfhiX7d0E2++6on+rp5E3qYM=
Subject key identifier: 11:17:E4:A2:EB:15:A2:72:0C:B8:2A:FD:C3:11:BD:55:C9:BC:11:CD
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01942604D76B9820399B57CE8A058083825B
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ERfkousVonIMuCr9wxG9Vcm8Ec0.roa
Signing time: Thu 02 Jan 2025 07:57:18 +0000
ROA not before: Thu 02 Jan 2025 07:57:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 86.110.42.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:04:d7:6b:98:20:39:9b:57:ce:8a:05:80:83:82:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 2 07:57:18 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1117e4a2eb15a2720cb82afdc311bd55c9bc11cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:77:f2:0e:2b:8a:62:d5:d1:c5:57:07:f0:
cc:74:9e:33:75:d0:54:1d:b7:f8:ad:ff:46:89:68:
d7:21:b6:ae:df:a5:b6:7f:42:3b:19:8e:9b:9f:59:
db:4d:5e:4c:da:4c:13:e3:c1:07:0c:c0:a6:d8:41:
ae:51:5f:18:6a:ef:65:e5:4b:39:9b:f6:2d:d2:5f:
e7:11:d4:d6:5a:18:eb:a8:4e:d8:2d:b1:4b:cc:ac:
86:3d:2a:b6:ba:48:fd:1b:d4:98:50:d5:27:cc:2e:
e2:84:a0:82:9c:85:c7:aa:26:44:93:76:e1:63:c1:
14:22:a0:d2:ed:6a:c7:59:f6:e2:9d:58:21:78:78:
87:83:8e:57:50:69:23:aa:9e:79:63:1f:51:90:a6:
90:d8:99:8f:2f:5e:ad:e8:6c:ff:aa:98:07:a3:83:
7a:28:32:04:46:f3:23:c5:89:9a:49:34:06:4f:d8:
e8:7a:25:4a:f6:6d:15:76:eb:eb:0e:c1:cf:3c:37:
09:1f:28:6d:7e:b2:9e:2c:87:c5:38:7c:18:f7:25:
ba:9e:b5:8f:42:71:61:85:f9:74:4d:92:1e:95:e1:
64:2d:04:1a:86:08:13:b9:1c:a2:49:63:af:5b:22:
89:5c:f4:b4:f1:c7:52:78:63:6b:f1:c2:f6:26:11:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:17:E4:A2:EB:15:A2:72:0C:B8:2A:FD:C3:11:BD:55:C9:BC:11:CD
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ERfkousVonIMuCr9wxG9Vcm8Ec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.42.0/24
86.110.59.0/24
Signature Algorithm: sha256WithRSAEncryption
46:92:e7:55:cf:aa:00:76:5d:f0:d6:3f:47:f9:fd:19:a0:07:
d7:48:5f:b6:fc:3d:b1:16:0f:51:d7:0e:4c:e7:20:1b:5e:13:
67:6b:2d:c4:43:f7:19:70:af:b6:c9:44:2a:1d:cb:55:49:94:
8a:84:f5:d9:a9:0c:f8:39:4a:dd:8e:36:30:eb:7b:17:e4:05:
31:6d:97:e3:95:c0:39:45:a6:97:3c:24:e0:17:b7:72:69:65:
32:90:ee:51:cd:9f:ae:aa:ac:5e:69:bd:17:db:16:28:57:e7:
45:8e:0a:f8:f3:ac:ab:2d:49:39:4a:d0:c4:df:4a:60:f5:cb:
41:87:a8:00:39:fe:8c:f3:7d:51:f3:eb:ab:3a:e8:87:b5:21:
f5:d4:e7:21:85:41:5d:e8:ed:6c:22:9b:73:34:92:57:af:87:
c1:40:1d:14:46:bd:aa:8f:40:f0:42:82:4a:d9:fb:cf:52:ea:
ed:f8:55:5b:21:18:56:fb:a1:3e:c3:38:ff:46:80:fb:71:c1:
7e:06:b4:f6:e5:aa:e2:b6:a1:0b:29:50:72:ce:1b:7c:1f:a3:
a6:25:e0:12:31:a7:69:ed:74:88:c5:0e:65:07:7f:8e:a1:f7:
b2:59:c2:8a:e4:91:6e:b4:4d:f1:50:ab:33:4d:34:cd:7c:58:
f2:93:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:58 2025 by rpki-client