Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ehzk5EGkAYpBWLFRr_zBtBcHq4o.roa
File: ehzk5EGkAYpBWLFRr_zBtBcHq4o.roa (raw, json)
Hash identifier: po9RSn1vnUJn8LraWDgTGQkIzqjsRElh5uulYlg6a2I=
Subject key identifier: 7A:1C:E4:E4:41:A4:01:8A:41:58:B1:51:AF:FC:C1:B4:17:07:AB:8A
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D62976AFCA4C2EE17C5FC4407786
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ehzk5EGkAYpBWLFRr_zBtBcHq4o.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41313
IP address blocks: 84.1.42.0/23 maxlen: 23
84.1.44.0/22 maxlen: 22
84.1.44.0/24 maxlen: 24
84.1.240.0/21 maxlen: 21
84.1.240.0/24 maxlen: 24
84.1.246.0/24 maxlen: 24
145.236.80.0/24 maxlen: 24
195.228.11.0/24 maxlen: 24
195.228.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d6:29:76:af:ca:4c:2e:e1:7c:5f:c4:40:77:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a1ce4e441a4018a4158b151affcc1b41707ab8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:8f:26:ca:ee:aa:69:f0:84:6b:c6:70:c4:
2d:14:f8:3e:8e:57:47:83:79:3d:5b:b5:87:04:6e:
24:b8:36:6a:ff:a6:09:5f:6e:27:0a:ce:01:fa:7d:
79:41:85:20:b2:26:de:10:00:83:44:de:66:e3:f2:
22:0b:26:bd:a7:8e:80:b7:f9:e7:88:3f:a1:3c:45:
f0:15:6d:f2:9b:28:56:54:54:86:bd:bd:03:a2:ca:
ba:83:cb:34:48:4a:d2:0f:b6:a7:65:3c:75:18:14:
2e:31:ed:0f:cf:cd:5f:c8:58:c4:f4:59:ac:88:a2:
b4:e2:11:1a:22:63:cf:ed:0e:87:d2:2e:d2:20:4a:
d2:c2:76:32:25:48:d4:25:fb:d7:cf:ed:f3:a3:1e:
e6:43:bc:de:3a:a9:93:69:91:eb:f5:aa:cf:26:e7:
a2:2b:4c:28:40:0a:1e:00:18:b2:88:e4:36:a1:ab:
29:40:4f:c8:2a:75:e3:71:9a:30:08:8d:0b:78:f2:
df:47:df:15:d7:d9:49:3d:4e:aa:3d:f4:15:2b:25:
e3:1b:69:89:80:05:cd:ed:6b:4d:36:4b:cb:32:2e:
b7:6c:c1:b8:80:34:2e:7d:72:d1:8d:75:a3:26:67:
88:99:0c:8b:28:f1:7d:6d:e1:0d:10:1c:6f:59:82:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1C:E4:E4:41:A4:01:8A:41:58:B1:51:AF:FC:C1:B4:17:07:AB:8A
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ehzk5EGkAYpBWLFRr_zBtBcHq4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.42.0-84.1.47.255
84.1.240.0/21
145.236.80.0/24
195.228.11.0/24
195.228.43.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8b:78:e7:41:b6:92:01:4d:14:71:c8:24:cf:8b:2d:9f:88:
10:a9:d4:0e:a9:86:85:cd:55:ff:5f:52:a0:8f:9e:7e:e8:68:
96:9f:d6:cc:2f:5c:53:fd:a3:f7:95:c3:53:dd:89:0e:bd:e1:
ae:e4:1f:a1:fe:b9:92:a6:5e:3d:ae:99:f1:03:a0:67:f7:ce:
2d:35:b2:74:70:bf:8e:95:b3:97:c9:25:69:12:bc:35:58:d7:
85:8e:8d:2d:e2:ac:97:b0:0e:93:bd:a8:47:e4:62:4c:fa:f5:
24:db:2a:66:a5:46:cf:55:df:53:a2:1e:52:8a:e9:27:30:00:
e4:6d:f3:34:fb:05:37:04:9d:63:b1:f5:1e:da:50:26:f7:d7:
a4:f4:d1:0b:66:23:ee:de:bc:f8:1d:b0:67:5a:40:d2:07:e2:
1f:e1:61:d6:1c:25:0d:e3:bd:a4:72:5b:eb:ff:82:93:87:98:
a8:0d:24:5c:a2:be:0a:9a:3a:f2:e0:f0:cf:0b:ff:aa:b4:23:
3e:68:a6:92:d3:17:d0:80:2d:6c:6a:63:59:73:b8:ef:61:9a:
54:22:09:08:f7:56:de:7b:63:d0:86:90:11:65:ef:91:73:ee:
80:99:05:e2:8d:08:95:6a:8d:34:3b:54:95:e6:86:be:bc:13:
39:7a:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:25:12 2025 by rpki-client