Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/2Erepc7c7P1VRx_bLNiYu7weRzk.roa
File: 2Erepc7c7P1VRx_bLNiYu7weRzk.roa (raw, json)
Hash identifier: k2SMyfwtPMsgu8pAJX36t6HmVMk0LqM07DF6s7B27wo=
Subject key identifier: D8:4A:DE:A5:CE:DC:EC:FD:55:47:1F:DB:2C:D8:98:BB:BC:1E:47:39
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 019426D97386CBFC9DDF829175DE12CC2B0A
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/2Erepc7c7P1VRx_bLNiYu7weRzk.roa
Signing time: Thu 02 Jan 2025 11:49:32 +0000
ROA not before: Thu 02 Jan 2025 11:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49063
IP address blocks: 87.242.76.0/22 maxlen: 22
87.242.76.0/24 maxlen: 24
87.242.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:73:86:cb:fc:9d:df:82:91:75:de:12:cc:2b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d84adea5cedcecfd55471fdb2cd898bbbc1e4739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0b:a4:fb:37:4d:ef:98:cd:80:ef:d2:fc:1f:
44:30:58:a2:10:7c:82:38:fc:e8:fc:3c:a6:93:95:
b6:17:96:89:1d:dc:81:8a:51:06:68:9d:50:e4:6e:
5b:0c:ae:86:52:fc:eb:bd:1c:5d:a0:e2:44:5a:ce:
2f:59:cd:54:98:3c:f5:7b:e9:4b:db:8c:e4:85:53:
c8:ad:1e:4b:b8:d4:41:27:f9:cc:04:61:6a:0a:d4:
27:ae:31:2a:f3:d1:a5:33:96:50:5f:dc:83:9a:dd:
40:9b:29:bd:f2:2c:96:7a:3f:e2:86:55:80:0a:0d:
5b:e8:66:1f:e6:ce:d0:3d:a7:3f:4c:09:c5:7d:4a:
a6:12:6a:80:62:e9:66:5e:83:2a:55:80:98:b5:e3:
d1:ab:22:8f:38:0a:1c:77:9d:7d:f2:8a:0c:1b:9a:
e5:27:b1:5c:54:13:ff:51:22:32:18:07:5f:ed:85:
7e:c2:8e:a8:ca:ad:ee:7f:9a:41:e1:33:c7:81:ca:
2b:b5:b4:88:fb:4b:07:2d:f9:cf:f7:47:f1:b6:b4:
24:a6:e2:1c:cc:9c:5c:a6:05:f7:0f:a2:70:ff:d1:
e5:bd:4b:93:2e:38:a2:f7:a3:36:fe:08:d1:cd:10:
f5:a9:9d:b9:23:5c:5a:ff:18:48:b8:60:45:c7:1f:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4A:DE:A5:CE:DC:EC:FD:55:47:1F:DB:2C:D8:98:BB:BC:1E:47:39
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/2Erepc7c7P1VRx_bLNiYu7weRzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.242.76.0/22
Signature Algorithm: sha256WithRSAEncryption
21:e1:b0:4a:80:2f:6d:55:7f:93:00:a0:b9:f6:f4:35:2f:cf:
bb:1e:53:5e:c7:c1:9b:6f:97:cd:aa:cf:29:45:15:78:fe:35:
9d:56:52:02:d7:f9:e6:cd:bb:8f:1b:db:31:96:a8:06:7d:ec:
30:72:a9:79:a6:52:76:e7:91:e9:4d:12:44:ab:8d:30:88:5f:
31:c1:e6:2e:7a:89:67:b1:9b:6f:4f:fb:d7:80:da:cd:5b:50:
16:10:62:a7:80:3a:81:ad:fc:6e:a7:ac:b6:94:a7:bd:e4:77:
d3:79:2f:16:77:2a:90:08:f8:3f:50:1d:f1:10:6a:8f:49:bc:
08:70:38:8c:c2:81:c0:58:e1:a6:0d:1d:c9:a4:42:fb:69:01:
30:7b:a6:4c:26:4a:a2:c0:d7:20:e1:85:4c:64:3b:88:f1:d9:
bf:94:b1:79:0b:0f:eb:e0:5b:b6:39:10:f2:9c:24:a9:ee:95:
48:15:c7:5e:dd:6a:8d:3d:58:6f:eb:57:ef:04:40:c9:28:5b:
ac:a8:d4:ac:a1:5e:ba:cf:6f:ed:cd:d2:16:1e:29:f8:15:2d:
15:c4:53:c6:22:c0:cf:e3:95:4f:ce:04:ce:2f:f1:1f:b3:6d:
a0:d8:e2:db:d2:f6:4f:63:9e:8a:71:28:45:4a:73:6b:11:bb:
e4:27:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:38 2025 by rpki-client