Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ERVdycpY4bKVWQxSzavqyLO77UA.roa
File: ERVdycpY4bKVWQxSzavqyLO77UA.roa (raw, json)
Hash identifier: KjnUBMfnbY2dTYCqn8dXExC2kP5qWbontZX2wFEns5A=
Subject key identifier: 11:15:5D:C9:CA:58:E1:B2:95:59:0C:52:CD:AB:EA:C8:B3:BB:ED:40
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019428240E1E116F733FAEF292E3BDA1221B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ERVdycpY4bKVWQxSzavqyLO77UA.roa
Signing time: Thu 02 Jan 2025 17:50:39 +0000
ROA not before: Thu 02 Jan 2025 17:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 37.218.208.0/21 maxlen: 24
37.218.216.0/21 maxlen: 24
82.163.68.0/22 maxlen: 24
149.126.88.0/22 maxlen: 24
185.86.140.0/23 maxlen: 24
185.86.142.0/23 maxlen: 24
188.215.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:0e:1e:11:6f:73:3f:ae:f2:92:e3:bd:a1:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11155dc9ca58e1b295590c52cdabeac8b3bbed40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:45:47:c9:08:6d:39:bc:42:f6:b2:af:ad:
29:77:12:5b:5e:70:90:8f:dd:bd:a1:66:2c:6d:8e:
b6:e3:5c:be:35:73:41:80:f9:b6:3f:40:a2:6d:2a:
82:c2:4d:3e:56:f0:7e:df:89:59:b7:ec:59:68:34:
92:b6:9e:b3:81:7a:e7:39:30:88:f9:ba:34:22:0b:
6b:2a:e5:30:fe:42:f6:28:39:6b:1e:bf:cd:88:6e:
2b:f0:b5:4d:42:b0:89:ed:50:5b:b7:f8:11:83:9c:
3a:0b:ba:70:c1:46:89:9a:a8:2a:e2:32:dc:b1:ee:
3c:46:f6:b6:ad:b8:1b:17:a7:e0:eb:1b:2d:ab:9e:
80:14:aa:cc:1b:44:9b:88:3f:8a:ea:84:22:b6:77:
8b:f0:c7:4d:e7:34:e6:3f:ce:15:5a:4e:07:7e:e6:
be:47:a0:7b:bf:85:fe:54:fc:39:d1:8c:85:53:1b:
e3:26:50:fc:c5:a4:b9:2f:90:94:13:c7:f2:ae:ec:
89:60:de:b3:27:0e:09:04:25:47:42:5c:50:4f:84:
35:40:03:52:04:e3:e9:71:af:a7:96:69:03:a7:03:
6a:66:3e:6c:cc:91:8e:88:12:87:de:44:79:16:9e:
a8:4b:5f:d2:c3:f3:63:5d:04:86:3c:2b:d6:0a:0d:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:5D:C9:CA:58:E1:B2:95:59:0C:52:CD:AB:EA:C8:B3:BB:ED:40
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ERVdycpY4bKVWQxSzavqyLO77UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.208.0/20
82.163.68.0/22
149.126.88.0/22
185.86.140.0/22
188.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
87:8b:e1:f3:b2:36:74:a1:aa:0a:84:b3:d8:e3:5d:86:16:11:
b3:7f:a6:9a:7c:e1:c2:b9:7b:36:82:d6:c1:e9:3c:e4:0b:7b:
04:cb:de:39:05:1d:37:ac:ac:cb:78:f9:fd:9c:69:68:80:2f:
ab:af:c8:30:e8:b2:c1:03:0c:2e:01:b1:d6:10:50:d7:9a:ac:
6c:ce:e6:1b:37:4c:c3:c0:3e:ed:b4:d8:d0:d7:b5:7b:25:8e:
76:d5:74:fa:d1:d5:2e:c2:2e:93:80:4c:46:d2:cb:69:76:1d:
3a:ca:0b:29:1d:e1:2c:6f:47:65:26:d0:50:5c:7f:9e:62:16:
19:a3:a2:d4:0d:2b:1e:73:75:0f:a8:05:e4:f2:90:2e:36:18:
44:fe:d5:84:86:a2:81:cf:60:85:a0:fc:7e:f5:3c:12:51:25:
e5:19:b4:1f:5a:ca:07:56:65:a2:4b:17:f5:bd:1d:a5:32:ac:
66:96:41:99:50:0d:a6:6b:81:80:21:50:f5:cf:10:73:5e:c9:
9c:d6:e6:24:64:1f:50:2f:74:39:d7:d0:e1:48:bf:68:e6:d7:
fd:85:0a:45:ca:7d:a9:86:33:7c:51:4a:c6:c8:f9:18:53:bf:
37:8a:ed:6a:2b:4b:0e:4c:65:0b:bc:1d:93:f4:7d:6f:c9:f7:
ba:12:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:23:04 2025 by rpki-client