Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa
File: h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa (raw, json)
Hash identifier: zt8b+CmiqgKijkhJRz6BTVkUIsFNQWitXdvorvNbiis=
Subject key identifier: 87:55:19:DC:29:B6:6E:2F:F6:0B:C6:C9:B5:F7:2D:E6:69:DE:5F:89
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BC2A652E47DE954A28B5D32AE0234
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 87.237.167.0/24 maxlen: 24
89.251.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c2:a6:52:e4:7d:e9:54:a2:8b:5d:32:ae:02:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=875519dc29b66e2ff60bc6c9b5f72de669de5f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:68:1c:be:5f:11:0c:bb:cd:34:54:27:a7:
9e:12:db:d4:ae:14:8f:54:c7:51:f5:c5:a7:7b:05:
c0:08:ef:21:bb:16:73:46:da:af:f6:d3:53:24:0e:
95:0a:14:5c:0a:5b:41:cd:5d:78:42:74:c4:65:9f:
2d:c7:b7:a4:63:f8:ae:7e:0c:0b:e3:3c:90:7e:44:
a7:a3:48:a4:03:1f:b1:69:b4:cc:42:b0:77:f9:8d:
7a:45:6d:35:87:2b:6d:e8:6a:6b:05:cf:44:42:f3:
03:10:25:ca:a6:99:17:04:b9:78:ba:58:5d:fb:89:
d0:c9:52:df:ac:fb:1d:b9:01:cc:d0:39:21:62:d7:
22:55:8c:5d:fa:c4:dc:f2:c2:7c:d4:0a:20:8b:01:
fd:44:6f:01:7d:6a:04:4c:53:79:ec:31:ba:5d:51:
b2:eb:f8:b7:0e:9c:e1:63:9e:ec:50:ef:42:08:9b:
a1:24:ff:c5:7e:24:b0:45:a6:da:e2:40:0a:f0:1f:
50:63:40:31:38:48:6c:9a:d0:fe:ff:67:83:11:e3:
36:df:24:9c:dd:78:b6:49:d7:9b:d1:b9:8b:d9:bd:
ef:50:b2:8a:8f:31:08:35:87:aa:9a:93:fe:85:25:
b7:dd:f2:39:eb:5f:fb:bd:ab:ea:47:69:f3:06:ec:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:55:19:DC:29:B6:6E:2F:F6:0B:C6:C9:B5:F7:2D:E6:69:DE:5F:89
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/h1UZ3Cm2bi_2C8bJtfct5mneX4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
89.251.30.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e5:d4:66:a4:60:bf:5a:bc:94:ac:ff:72:76:49:dd:28:4b:
8b:65:82:4b:b2:bd:af:10:26:2b:b9:c1:cc:11:02:68:ed:f4:
e3:d2:00:b6:40:14:cf:cf:ff:20:d4:c9:dd:b1:60:6a:76:d5:
49:24:6e:56:c4:1d:03:3b:4f:66:7e:9a:27:83:45:be:c7:ec:
48:bf:4f:46:7d:ba:80:2d:b0:f6:53:ef:eb:92:86:19:9c:6a:
c4:19:8d:85:3e:36:d1:45:46:4d:a9:24:97:48:3a:ba:75:83:
03:fa:e3:f0:3f:c6:28:f1:40:fe:05:0a:a6:73:30:20:f1:80:
31:0e:55:d5:97:74:fd:3f:ca:0a:39:7c:2a:cd:ce:03:e7:33:
e4:33:18:d7:de:18:64:d4:42:5d:25:b4:9c:8a:35:51:5f:c2:
07:5b:16:c6:4a:eb:e8:30:af:4e:4b:5b:10:73:e6:ac:c6:5a:
f3:29:d0:8d:7e:f0:e9:16:c1:ea:08:d5:c1:81:e6:0a:e0:6f:
4b:b2:72:f8:54:72:f1:41:82:41:3d:78:7a:7b:ca:e8:0b:33:
35:13:b0:7e:51:ea:2d:90:2d:17:9d:e5:c9:33:2a:93:35:c4:
70:08:51:57:5a:af:29:00:e3:06:62:53:96:bb:a4:4b:d8:52:
17:b7:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:26 2025 by rpki-client