Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/aetyZPe2DLK4_q4vVtSA8EdOKIo.roa
File: aetyZPe2DLK4_q4vVtSA8EdOKIo.roa (raw, json)
Hash identifier: dt4FfCe0yC3OCEdlYE9DXRdw+myscgVZpEv643uad/g=
Subject key identifier: 69:EB:72:64:F7:B6:0C:B2:B8:FE:AE:2F:56:D4:80:F0:47:4E:28:8A
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 0195328921C5A97F0A2FE607E89CAE177024
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/aetyZPe2DLK4_q4vVtSA8EdOKIo.roa
Signing time: Sun 23 Feb 2025 11:20:02 +0000
ROA not before: Sun 23 Feb 2025 11:20:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 185.84.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:89:21:c5:a9:7f:0a:2f:e6:07:e8:9c:ae:17:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Feb 23 11:20:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69eb7264f7b60cb2b8feae2f56d480f0474e288a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:2a:e3:78:a7:e0:66:e4:b0:2a:cb:72:d9:
83:f1:ec:4f:34:e3:b0:62:15:af:95:d4:dd:4e:d7:
e3:80:0d:2b:10:3e:ff:46:38:ef:b2:4c:c8:50:85:
08:b3:a4:eb:86:b6:f4:18:fc:33:f8:61:f8:7a:e3:
d3:4b:e1:2d:b6:07:38:81:3b:62:88:8d:db:0f:e7:
de:95:2c:3e:82:4c:23:ff:ae:96:d5:5c:69:64:11:
0c:e5:5d:6d:ec:e2:e7:af:71:67:f2:cf:d2:26:32:
a5:55:c4:68:d4:b8:37:c3:5c:ed:9c:95:15:77:93:
54:43:29:ed:04:54:48:9d:80:17:23:d3:3f:4e:56:
aa:70:ff:7e:90:81:6c:01:dd:85:03:1c:eb:ad:36:
bb:27:e5:8f:66:8a:f2:fc:82:34:12:28:cf:b4:ea:
7c:81:11:69:63:9b:4b:eb:eb:12:5a:a7:ad:25:9d:
7c:e6:d5:88:de:74:ed:cd:7f:d0:8d:ce:ce:30:67:
6a:2e:b1:c9:73:d0:f0:da:4c:c3:23:60:81:5f:ed:
c3:01:20:8d:d9:eb:26:74:da:f5:d6:41:a0:2f:e6:
87:7f:f6:8c:f2:2a:f6:aa:d9:7a:e2:1a:a6:c2:30:
48:15:fe:c5:ce:8c:3c:86:ea:34:33:8a:fa:26:c9:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EB:72:64:F7:B6:0C:B2:B8:FE:AE:2F:56:D4:80:F0:47:4E:28:8A
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/aetyZPe2DLK4_q4vVtSA8EdOKIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
46:7b:1a:70:7d:59:46:c5:ed:7d:97:cd:1b:b0:06:58:2d:7b:
96:11:b5:45:71:db:2f:ec:e9:cf:31:8c:cf:11:f0:ea:52:61:
83:59:13:1e:45:39:b5:17:4d:97:54:07:6b:8f:89:c4:5c:9c:
c8:fd:ec:82:78:7d:75:01:d7:ca:f1:b7:84:9b:ec:aa:13:a7:
7f:c1:0e:b4:7f:57:f9:1f:82:ed:e7:b8:05:0f:a6:87:e2:28:
ab:8b:8a:7a:75:15:95:18:f3:1d:55:17:f5:8f:01:ec:a4:d6:
ea:1e:ec:ae:50:fe:7c:35:02:58:96:c8:40:f7:b5:f1:2a:f9:
05:46:3b:aa:9c:b8:f2:a4:7a:d1:00:a9:e5:4c:4f:e6:af:7d:
44:77:fa:5c:35:27:47:00:29:c9:36:8e:44:70:4e:ad:23:3a:
d8:45:9f:27:dd:92:be:32:d7:f6:8d:bf:ef:52:da:1c:05:42:
7a:3f:ad:f4:e4:94:bf:f4:e1:d0:ff:d8:40:02:c5:1f:5d:6e:
e0:89:13:3b:d6:3d:55:66:e1:0e:7f:6e:a7:b7:ea:76:02:bd:
37:2a:5e:75:7b:37:5c:71:ec:5e:b9:29:6f:b9:bb:c2:f9:cb:
ef:6f:8d:4f:0d:0c:4c:de:61:0e:f2:0f:f4:82:f5:9f:fb:bd:
52:a8:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:51:33 2025 by rpki-client on console.sobornost.net