Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Elw5UXhx2UaEnLV2EuqtJ32OHnk.roa
File: Elw5UXhx2UaEnLV2EuqtJ32OHnk.roa (raw, json)
Hash identifier: ja7+j+sQT6nOers6AAdzRunO2qy0Vf7hB6OxEdfVESI=
Subject key identifier: 12:5C:39:51:78:71:D9:46:84:9C:B5:76:12:EA:AD:27:7D:8E:1E:79
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01945EF21837FC55F797B329A65C2B1E6C9C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Elw5UXhx2UaEnLV2EuqtJ32OHnk.roa
Signing time: Mon 13 Jan 2025 09:15:11 +0000
ROA not before: Mon 13 Jan 2025 09:15:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 170.62.246.0/24 maxlen: 24
170.62.247.0/24 maxlen: 24
198.55.30.0/24 maxlen: 24
212.78.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:f2:18:37:fc:55:f7:97:b3:29:a6:5c:2b:1e:6c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 13 09:15:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=125c39517871d946849cb57612eaad277d8e1e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:cd:c9:75:54:d2:58:13:1f:7b:fd:13:1f:
47:36:ef:7f:9b:fd:75:4d:01:93:64:cf:a6:42:f1:
98:70:35:61:d5:d8:7e:d1:54:c6:e5:69:0d:29:42:
bc:a3:16:10:71:25:02:9d:e6:b2:e6:cb:00:1a:9f:
50:b7:ce:b7:d7:57:02:13:db:c7:a2:ce:1d:34:b4:
8e:f8:83:f6:70:57:92:7c:a3:bd:66:6c:16:7f:7f:
00:59:57:59:55:0f:09:75:5d:a1:c4:59:56:b7:e7:
d5:d1:7b:9c:8a:19:31:d1:de:ca:d0:fa:ae:32:22:
64:c6:73:18:01:8a:4e:81:bb:40:88:20:69:5b:1e:
0b:d0:dd:8f:cd:dd:78:25:34:ee:94:02:67:24:9f:
6b:a4:b2:69:6e:b3:8d:ce:e3:cf:75:fc:52:87:ff:
55:00:7a:c6:4a:96:b1:dd:27:a3:6d:19:5e:dc:70:
12:1a:55:d1:c2:f3:a7:b6:e9:e7:d8:c9:cb:09:cc:
de:2d:ea:3b:14:19:f6:60:72:46:58:90:51:d6:1a:
79:2a:84:36:e8:7d:34:fe:e0:6c:35:82:3d:14:26:
bf:b8:e7:7c:e0:a3:9b:66:a6:c2:4b:c1:ba:5b:1f:
93:b3:28:21:02:c7:aa:ec:10:c5:ca:32:1e:64:40:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5C:39:51:78:71:D9:46:84:9C:B5:76:12:EA:AD:27:7D:8E:1E:79
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Elw5UXhx2UaEnLV2EuqtJ32OHnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.246.0/23
198.55.30.0/24
212.78.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:34:68:75:ca:0d:b5:4a:87:22:b3:c3:cc:d5:6b:9f:e2:dc:
16:1c:c3:7f:8d:3c:0e:ca:50:02:28:f3:e9:a5:86:b9:fa:69:
e9:ea:8d:cd:73:ef:c4:dd:0c:31:36:80:1e:79:62:8c:a9:eb:
1b:66:9b:ce:67:44:22:4e:bb:36:12:dd:3a:e3:22:a2:79:77:
9e:d1:8f:2e:eb:cb:7f:83:82:65:f8:dc:c1:7e:c7:a6:52:17:
ff:d6:44:5e:72:34:4d:2e:76:bd:4c:10:ba:2e:cb:74:5a:43:
f0:f1:dd:c8:41:b6:3d:35:9b:8e:b6:17:0f:10:ba:eb:8e:db:
58:3d:0f:ea:f4:b3:a5:d3:be:bd:51:27:7b:f5:d1:74:6a:c4:
7d:ba:af:06:16:68:f1:62:99:fe:73:2d:6b:6d:e7:82:dd:b1:
85:ae:5a:ab:6c:65:22:dc:de:c9:fd:44:33:ff:5f:75:b7:ab:
e4:a4:1d:02:8e:cb:fe:93:1d:e4:48:0b:c5:a2:c4:a3:26:18:
3d:18:14:b7:ff:0a:92:4d:2f:bb:dc:26:60:5e:30:cb:d9:84:
77:e0:15:f4:9a:d5:61:1f:4e:43:4a:be:9d:99:a1:c6:03:ba:
97:ed:df:a5:d2:7f:5f:53:17:df:45:ec:05:8d:d0:d6:7b:8e:
79:b9:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:08 2025 by rpki-client