Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/4Xuzh35gf4Ji3QUu_krJSPEb1Ks.roa
File: 4Xuzh35gf4Ji3QUu_krJSPEb1Ks.roa (raw, json)
Hash identifier: Bja0jcxBW5fwedihSAnbA5L7T3bEjVSC9LQq7QPQlJ4=
Subject key identifier: E1:7B:B3:87:7E:60:7F:82:62:DD:05:2E:FE:4A:C9:48:F1:1B:D4:AB
Certificate issuer: /CN=ba051b540188f74aba19a90ab7b5dcc429d47a98
Certificate serial: 018AFA4E1D8EECBB8582B9B2BDE4C82C4772
Authority key identifier: BA:05:1B:54:01:88:F7:4A:BA:19:A9:0A:B7:B5:DC:C4:29:D4:7A:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugUbVAGI90q6GakKt7XcxCnUepg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/4Xuzh35gf4Ji3QUu_krJSPEb1Ks.roa
Signing time: Wed 04 Oct 2023 10:48:57 +0000
ROA not before: Wed 04 Oct 2023 10:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61248
IP address blocks: 87.236.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:4e:1d:8e:ec:bb:85:82:b9:b2:bd:e4:c8:2c:47:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba051b540188f74aba19a90ab7b5dcc429d47a98
Validity
Not Before: Oct 4 10:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17bb3877e607f8262dd052efe4ac948f11bd4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:b1:26:7e:5c:f2:c9:40:11:5c:02:9d:2f:
61:bb:16:48:78:e4:fd:92:e8:ed:75:b3:c3:ff:5a:
3f:3c:4e:29:3b:64:91:11:f7:7c:75:3a:52:92:64:
3f:99:15:44:07:86:8b:e7:52:1a:c7:ef:1a:9e:82:
09:46:09:39:cf:f9:c1:81:f5:df:51:d6:b7:0d:cd:
6c:c5:fa:82:29:8d:f5:8d:a5:82:b8:a0:23:63:cc:
b2:ad:86:06:ec:f8:7d:e1:48:67:5d:a8:a1:79:6f:
cc:33:e4:bc:1e:0a:12:54:39:97:11:ab:a2:aa:67:
d7:5f:37:ff:1c:c1:a1:b5:88:5f:0c:6b:22:50:f4:
d6:a7:0f:a6:21:7b:b1:88:6c:3a:a9:de:70:ef:4b:
1d:f6:b9:c4:7c:4f:fc:47:8b:01:e3:6d:2f:77:b8:
eb:2c:92:6a:7a:d1:76:23:06:a0:a0:1d:f7:60:3c:
4d:fb:50:d4:bd:9f:de:40:ff:d7:a4:5f:83:07:67:
e3:28:82:78:c8:e5:1b:c2:7d:f9:0c:03:a3:a9:87:
79:2d:d8:c8:3f:f9:e4:71:9a:55:08:81:fc:15:2a:
5f:33:2b:c2:bf:76:db:46:42:f3:d1:92:c0:54:77:
41:9e:52:e9:e5:5c:4d:66:49:38:05:61:97:c0:97:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:B3:87:7E:60:7F:82:62:DD:05:2E:FE:4A:C9:48:F1:1B:D4:AB
X509v3 Authority Key Identifier:
keyid:BA:05:1B:54:01:88:F7:4A:BA:19:A9:0A:B7:B5:DC:C4:29:D4:7A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugUbVAGI90q6GakKt7XcxCnUepg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/4Xuzh35gf4Ji3QUu_krJSPEb1Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/986d6c-9a44-4ee1-921c-30bfed2a719c/1/ugUbVAGI90q6GakKt7XcxCnUepg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.166.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1b:b2:52:9b:8b:17:10:56:a8:ed:29:03:4c:7a:d3:2c:36:
27:f5:46:ad:38:04:73:c9:0c:9e:ac:8a:b6:b5:db:db:50:65:
cf:2a:6c:33:d5:63:5c:76:fc:74:83:d4:95:50:fc:3c:b2:0f:
78:f7:ea:1b:91:6f:5b:46:62:7c:0f:80:f2:46:be:35:90:0e:
e7:fa:46:55:97:a8:e1:d2:01:54:42:d3:83:66:f3:b5:4d:38:
92:a8:10:60:3a:81:51:fa:af:59:5e:df:18:6f:82:35:fe:5d:
db:76:32:fc:2f:e3:d9:39:1e:c7:dc:98:d0:fe:25:02:07:a8:
7d:27:3f:58:7e:bd:44:77:03:1d:40:6d:0f:e5:b2:c6:ee:ab:
43:e5:ff:89:7e:1c:54:83:72:3e:59:98:53:3f:69:3c:f2:4e:
02:9b:ef:8b:09:e3:24:36:7c:d6:47:ea:4b:62:aa:32:c4:5d:
a8:0b:b2:43:48:33:fe:cf:90:79:06:a4:55:bf:ed:6c:ed:ab:
6d:25:af:3a:79:36:6d:72:bb:4f:56:27:56:53:9c:ec:58:d7:
05:a5:95:4c:d7:26:e1:b1:bf:72:3f:0e:e9:60:39:73:60:a3:
c0:d5:36:80:2b:18:b9:10:a7:2e:66:6f:02:51:4f:1f:da:c3:
04:c3:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:15 2025 by rpki-client