Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/EnjDxu_vHCgcm-y7S37DtQI-yYs.roa
File: EnjDxu_vHCgcm-y7S37DtQI-yYs.roa (raw, json)
Hash identifier: mSpjCGbl0mXY7o0fO/n2Ugdj5zu8mv9H47MGOXxK1tE=
Subject key identifier: 12:78:C3:C6:EF:EF:1C:28:1C:9B:EC:BB:4B:7E:C3:B5:02:3E:C9:8B
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 019425223BF9094B54FF7D7E7CD2AB2989CF
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/EnjDxu_vHCgcm-y7S37DtQI-yYs.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42880
IP address blocks: 84.246.176.0/21 maxlen: 21
84.246.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3b:f9:09:4b:54:ff:7d:7e:7c:d2:ab:29:89:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1278c3c6efef1c281c9becbb4b7ec3b5023ec98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:a0:53:bf:bd:6a:ef:61:50:95:05:d4:53:
4b:75:93:eb:3a:00:42:f2:15:0e:8f:04:84:10:45:
1f:35:2c:6d:73:17:d0:65:b5:0f:45:62:a7:60:40:
63:25:c5:7f:5e:c7:56:91:27:2f:5b:fb:c6:c9:75:
20:f5:92:36:4c:19:1d:b8:2b:b3:dd:ee:fa:a7:a2:
d4:df:fc:d5:e9:5d:ac:aa:69:c3:d0:ff:ff:22:7e:
2f:bb:a2:28:8a:73:9d:f8:b1:68:d9:0c:5d:2b:d9:
c5:8c:c0:88:02:00:b7:15:4e:d9:5d:72:dd:fd:fd:
5b:cb:c9:b4:55:14:f2:c0:bc:ad:14:76:03:a2:ea:
c9:ce:62:93:04:46:6c:38:04:e0:0d:47:f1:ff:f1:
a1:3f:24:07:26:4d:b2:54:66:e3:2c:44:7c:dd:54:
45:cc:8c:71:15:a2:0c:d3:fb:95:4a:67:cd:20:9d:
ad:12:e3:b4:ee:30:bc:e1:ed:fd:0a:47:80:d8:99:
0d:c5:b5:81:b0:3f:5b:0d:34:e4:6d:3b:2f:b9:8c:
5b:21:e2:25:dc:12:eb:e2:ed:fc:24:00:76:e3:a6:
dd:18:99:61:98:9b:ba:d5:61:cb:73:ad:c8:54:67:
8f:3b:87:c7:eb:22:09:6a:da:8d:a6:fc:9f:93:97:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:78:C3:C6:EF:EF:1C:28:1C:9B:EC:BB:4B:7E:C3:B5:02:3E:C9:8B
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/EnjDxu_vHCgcm-y7S37DtQI-yYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:ee:1b:82:32:d0:7e:ea:f7:b6:ef:7c:26:74:a1:b6:e6:70:
3a:c7:66:5a:2c:54:4d:5f:cb:13:4e:f7:51:b7:ba:71:de:b9:
f6:67:91:af:ed:22:a2:2e:87:f7:9f:6c:c2:2e:c3:1e:e1:5f:
29:95:94:fe:58:a6:9f:68:e6:62:91:0f:84:8f:7d:5c:8a:e0:
a9:d0:cd:6e:7c:4f:77:e1:88:5c:36:9e:38:52:04:e1:c9:0d:
a8:43:51:ed:62:13:92:ee:2d:4d:14:a1:f3:cf:ca:fb:ec:4e:
45:53:5c:b5:f7:81:d3:95:6a:11:4c:d4:fc:6d:80:56:92:e6:
d7:0b:bc:34:12:37:3d:d4:1d:97:a9:fc:f0:9b:c3:09:42:83:
22:f1:b0:95:11:69:be:a8:6d:35:66:41:63:53:43:84:1e:83:
5a:ec:5f:b9:31:e9:99:c9:85:85:21:14:3c:dd:8e:c4:9a:09:
e4:d2:fb:b8:e6:de:9b:b3:1c:fc:95:50:c2:07:18:54:b4:31:
6d:33:c8:bc:3a:5d:86:86:00:e8:86:b9:76:52:5b:86:44:50:
66:b3:22:96:c2:31:88:ec:28:b5:2f:ae:53:69:02:7e:7d:28:
fa:c6:0f:6a:42:80:b0:33:d6:2b:cd:1d:81:d2:83:14:03:b5:
a5:94:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:07 2025 by rpki-client