Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/eRk2-urEJNMbXDnC8eQR6ctcmdk.roa
File: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (raw, json)
Hash identifier: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=
Subject key identifier: 79:19:36:FA:EA:C4:24:D3:1B:5C:39:C2:F1:E4:11:E9:CB:5C:99:D9
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019584947B6411AA5FD6F40B7A4D0C576CDE
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/eRk2-urEJNMbXDnC8eQR6ctcmdk.roa
Signing time: Tue 11 Mar 2025 09:41:18 +0000
ROA not before: Tue 11 Mar 2025 09:41:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50438
IP address blocks: 193.58.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:94:7b:64:11:aa:5f:d6:f4:0b:7a:4d:0c:57:6c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Mar 11 09:41:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=791936faeac424d31b5c39c2f1e411e9cb5c99d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:17:41:a0:39:9c:51:f6:4b:f0:c9:40:e3:
84:f8:69:45:d0:cc:12:fa:96:c6:71:c2:6a:a0:a9:
59:0e:08:4b:96:81:0c:b4:e4:5b:91:93:19:32:85:
17:a1:02:49:e9:15:05:29:61:c0:bc:69:ad:01:1f:
ea:1b:d6:72:7d:45:3a:35:dd:a7:d9:8e:3e:80:18:
ea:8d:fa:c5:01:af:66:2a:b7:28:07:93:a2:05:4b:
34:4c:d4:42:81:fc:f6:83:a4:a4:93:1b:ac:03:78:
61:f9:8f:79:61:b0:14:5f:54:b9:cf:0d:6a:d7:2a:
c2:cc:a0:83:28:42:92:7c:77:6c:d2:a0:4c:b0:d7:
ad:9f:73:db:2a:b9:ee:a5:2c:93:ea:36:89:e7:37:
90:f4:9e:85:24:e5:29:ee:31:94:30:57:79:87:c4:
54:49:58:0b:47:64:55:7d:7a:c7:99:3b:e3:20:52:
d8:aa:f2:34:2a:31:71:68:70:43:04:42:01:d0:f0:
f7:4a:46:52:b9:dc:ee:86:93:be:a3:b9:f3:38:58:
98:94:23:21:50:ef:05:52:c5:b6:3a:e1:91:d4:90:
0e:e6:0b:c3:0f:9f:93:2e:7c:b7:90:e2:a4:ae:14:
c0:1c:23:77:08:c0:c3:ab:63:61:86:f5:07:63:47:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:36:FA:EA:C4:24:D3:1B:5C:39:C2:F1:E4:11:E9:CB:5C:99:D9
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/eRk2-urEJNMbXDnC8eQR6ctcmdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.255.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b0:c8:2d:dd:90:48:c2:60:32:d7:6e:2c:01:ae:a4:53:ca:
f1:9f:5f:59:41:62:03:33:ff:ef:a7:58:6b:44:36:a6:ce:00:
de:51:9b:39:1f:62:eb:47:73:30:d0:f4:94:66:64:ac:d3:ca:
b2:2e:38:58:8e:90:eb:e5:c7:0e:19:74:ad:d8:30:b6:e7:72:
cf:83:5c:98:5b:19:37:87:da:81:1b:80:cb:30:39:33:20:e0:
b5:f0:89:31:51:83:05:ce:e3:b2:ee:b0:b9:ed:80:67:3d:f8:
3f:95:51:d2:66:9c:61:7a:25:a3:0b:6c:04:14:44:f4:e6:d9:
79:45:a8:7f:ce:b5:ac:2c:de:2e:62:3a:55:8a:2d:ef:f4:a5:
60:fc:cb:77:6f:a1:58:ad:0b:e2:d0:29:ed:29:79:2c:b4:77:
09:50:96:0e:43:c0:4e:23:10:60:ac:4c:da:b3:6c:2b:e0:3d:
d0:76:76:39:2a:3e:88:bc:e8:9b:51:08:84:09:e5:48:13:43:
6c:93:2a:e9:a2:23:68:f1:99:fd:f7:36:ac:65:ff:2d:6a:dd:
83:0c:73:9d:3e:20:61:8d:b2:88:92:ab:46:09:c5:e4:35:42:
ac:57:67:f2:ef:f9:9d:ae:e6:16:ed:1b:d0:a6:b3:c6:2b:87:
17:cc:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net