Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EtekPnQ4J2LDY5oKSvhstJ9m_ao.roa
File: EtekPnQ4J2LDY5oKSvhstJ9m_ao.roa (raw, json)
Hash identifier: M62wUmQErjens2SoCaExTtjfrIm6yt+sPVqKLWgN1Kg=
Subject key identifier: 12:D7:A4:3E:74:38:27:62:C3:63:9A:0A:4A:F8:6C:B4:9F:66:FD:AA
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424448B479D59D3490DBB858F4BE861F0
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EtekPnQ4J2LDY5oKSvhstJ9m_ao.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 185.222.218.0/24 maxlen: 24
2a09:0:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8b:47:9d:59:d3:49:0d:bb:85:8f:4b:e8:61:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12d7a43e74382762c3639a0a4af86cb49f66fdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:1b:52:3f:b0:b5:8f:45:52:4d:fe:b6:43:
b1:83:d2:61:75:fe:26:d3:df:3c:14:d1:07:6e:ee:
8f:9f:1a:5c:95:c2:a5:4d:3e:ac:5c:50:ed:8b:09:
64:ab:3f:44:77:e4:2a:fd:90:9e:f8:f2:70:3d:be:
7c:7b:a4:18:2a:39:a4:02:b0:fe:2e:5a:7f:fc:21:
a4:c4:f3:1d:0b:c9:77:c2:a9:11:f4:26:ed:e4:e3:
f5:6f:47:ab:8f:ff:94:83:e5:73:01:d3:e3:34:bb:
03:6b:5b:bb:f0:75:e7:b9:c4:3a:90:58:26:46:c8:
37:32:42:12:2b:86:a9:50:07:25:ac:77:c9:90:4c:
3e:aa:a8:e6:7b:9f:7d:99:5b:c4:b0:02:cc:34:0b:
3c:8c:ee:bc:20:3d:81:76:a6:b7:19:d3:5b:08:ae:
44:95:6a:05:49:cf:68:4c:95:41:16:b3:ab:d4:0e:
9d:33:9e:fc:b3:d1:23:ae:9d:d8:55:aa:31:86:5f:
d0:79:6e:1a:c8:63:75:a3:63:fa:1c:fb:04:e0:6c:
52:6c:e3:8b:89:36:d1:b0:4f:0c:c0:03:ee:cb:20:
25:66:0c:d4:47:68:ac:eb:a1:fd:74:da:11:d7:cb:
9e:e8:42:01:87:19:a6:8b:ff:6c:d8:bf:2a:00:77:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:A4:3E:74:38:27:62:C3:63:9A:0A:4A:F8:6C:B4:9F:66:FD:AA
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EtekPnQ4J2LDY5oKSvhstJ9m_ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.218.0/24
IPv6:
2a09:0:13::/48
Signature Algorithm: sha256WithRSAEncryption
5e:f2:04:3e:e7:34:3d:85:27:66:45:54:63:68:e2:b0:e3:1a:
ec:64:3c:04:8d:55:77:99:57:98:d1:63:e8:65:c4:b1:00:c0:
b6:c3:ae:5a:06:af:42:5c:19:63:7c:d8:73:42:82:72:8c:5b:
af:67:0b:90:06:de:64:dc:02:5a:47:a0:cc:39:c2:34:8a:b1:
0f:2b:5c:58:ec:c7:2c:9a:38:bd:f9:e9:13:cc:1f:d7:e1:ae:
32:5b:bb:26:2f:b3:6c:bd:5b:e3:ab:8b:3c:e3:d2:98:50:6e:
14:01:45:ea:9e:b4:66:1a:35:91:29:90:dc:b7:33:9e:10:07:
2c:86:ea:70:4a:67:44:67:f4:4e:b1:33:19:61:42:68:92:75:
7f:53:e7:9f:37:1e:37:b5:f2:d3:cb:fe:2b:fc:38:47:c0:b9:
fc:22:f4:cf:4b:96:54:d4:26:2c:33:67:14:83:f8:fe:e8:60:
81:13:a6:3e:3f:19:5f:fc:6c:8a:62:31:d0:b8:5e:15:f7:f9:
78:ca:69:5b:4a:3d:45:ea:4d:95:53:08:8e:03:53:95:51:b3:
a2:c5:66:6a:2f:69:c8:83:43:e8:bc:72:c9:64:aa:94:fa:d5:
4c:b2:e1:97:17:c7:e9:6b:9c:12:7f:61:bc:50:23:f7:b1:3c:
e6:a7:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:14 2025 by rpki-client