Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/OleDVeMsgfpW00YVA_pbpKv--1A.roa
File: OleDVeMsgfpW00YVA_pbpKv--1A.roa (raw, json)
Hash identifier: gG5NHOs0eN2awbNKoLqd++zQFoNIkFY+KrUQnnrrfBA=
Subject key identifier: 3A:57:83:55:E3:2C:81:FA:56:D3:46:15:03:FA:5B:A4:AB:FE:FB:50
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0197C4D76FAD26BF54BE3DD9794A7B4F8032
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/OleDVeMsgfpW00YVA_pbpKv--1A.roa
Signing time: Tue 01 Jul 2025 07:15:42 +0000
ROA not before: Tue 01 Jul 2025 07:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 87.248.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:d7:6f:ad:26:bf:54:be:3d:d9:79:4a:7b:4f:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 1 07:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a578355e32c81fa56d3461503fa5ba4abfefb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:b3:d9:9f:73:da:0c:23:f2:fa:15:4a:bb:
38:28:b5:d5:49:7e:1f:aa:7d:bb:d9:54:8d:56:8e:
34:1b:67:fd:ae:fb:a4:37:6a:d5:9c:ab:15:6c:b2:
50:e7:70:66:47:78:0e:76:d6:7c:a9:44:cf:a7:f9:
7d:3c:65:92:06:ad:90:1b:c9:4b:4e:ec:98:d1:10:
ee:18:e1:5f:44:0a:cf:4b:6e:c7:8f:4e:83:d9:96:
dd:1b:02:3d:dc:5b:1f:cb:bd:7a:85:27:65:90:ad:
1b:52:e4:9e:62:2a:c8:3e:08:27:19:0a:ab:97:b0:
60:19:a4:16:f9:09:ad:6f:da:ff:cf:1e:23:29:e9:
6f:99:dd:8f:08:1a:6a:56:7c:ac:94:9f:55:1a:84:
ce:4d:fb:8f:ba:da:2f:5f:2e:4c:1f:81:32:72:8d:
0a:fe:da:58:7d:f0:94:a2:80:c7:a3:90:fb:e3:07:
8d:7c:9a:bc:e9:05:e0:e7:d9:c8:01:10:06:d5:e6:
ef:12:d6:e6:98:62:e8:bb:74:6d:36:68:ae:1c:3e:
fc:99:07:f6:93:fa:03:87:df:61:6d:ae:2e:f4:63:
98:69:cd:61:e3:d2:c4:33:88:a8:3f:62:06:52:8d:
7a:14:aa:64:ee:1d:dd:4e:43:41:f4:1c:8c:24:28:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:57:83:55:E3:2C:81:FA:56:D3:46:15:03:FA:5B:A4:AB:FE:FB:50
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/OleDVeMsgfpW00YVA_pbpKv--1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9f:98:aa:89:55:1b:35:40:e3:6a:bb:5f:0d:cd:76:84:dd:
39:78:cf:88:fe:46:5a:8e:a0:b2:f8:1f:be:45:dc:01:2b:e4:
29:15:8e:23:13:c2:b9:84:38:33:f7:60:58:33:e9:07:34:64:
1b:9f:86:f0:b5:b2:83:ab:ec:c9:44:1b:c2:12:23:9f:55:9d:
c0:a7:aa:5b:20:60:5b:80:d1:bd:d5:3b:74:be:5b:34:2e:62:
8e:10:ea:04:e0:4e:62:5f:78:50:97:56:b0:d8:9d:ee:a1:c9:
ff:17:68:f6:39:25:69:c2:ac:17:d1:70:0f:92:79:ac:67:e5:
3c:5d:2f:94:56:91:5e:02:84:1f:56:76:9f:19:d1:28:e6:d9:
ea:36:c6:8b:15:25:41:92:8c:39:ee:06:67:5b:6b:bc:10:59:
2a:e2:ed:4e:5d:ea:02:86:d6:72:9b:89:74:17:50:7f:46:2a:
1c:2b:4f:47:16:c5:e3:58:bf:7d:a6:bd:20:3b:e3:ce:38:b9:
c3:42:00:e3:58:c1:e5:ad:a3:37:7c:05:dc:91:a0:34:cb:74:
09:b6:32:47:67:89:b2:88:57:3d:ba:8e:62:de:a5:6f:d0:fb:
d1:b9:94:57:85:68:94:24:fa:1d:16:79:0f:19:22:22:9a:8b:
a3:18:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:52:13 2025 by rpki-client