Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/JEzxWWenT3GfTXkwl9vUyNpy6Ns.roa
File: JEzxWWenT3GfTXkwl9vUyNpy6Ns.roa (raw, json)
Hash identifier: qgR7gOl4WgMIXNhv57wtr5r1gDfvvLSYLQY7icBJ4YU=
Subject key identifier: 24:4C:F1:59:67:A7:4F:71:9F:4D:79:30:97:DB:D4:C8:DA:72:E8:DB
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01942823A37BBE373F67D7FFFEEBBB69C9FF
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/JEzxWWenT3GfTXkwl9vUyNpy6Ns.roa
Signing time: Thu 02 Jan 2025 17:50:11 +0000
ROA not before: Thu 02 Jan 2025 17:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400040
IP address blocks: 87.248.135.0/24 maxlen: 24
87.248.136.0/24 maxlen: 24
87.248.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a3:7b:be:37:3f:67:d7:ff:fe:eb:bb:69:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=244cf15967a74f719f4d793097dbd4c8da72e8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:8a:05:9c:ba:16:63:0a:60:fb:6a:97:cd:
88:20:79:a8:3f:94:1d:82:17:3a:cb:86:4b:44:cd:
cc:60:a5:7f:47:a3:5a:7e:dc:45:ce:8e:cb:b3:dc:
aa:32:0c:a1:ec:bc:06:0c:ef:10:d1:72:49:db:12:
b4:25:fd:73:be:5f:99:ec:89:c9:a1:35:e5:06:4e:
d7:1d:b0:56:51:96:be:91:13:97:c2:f1:ac:a7:b8:
40:c9:94:84:54:0d:58:78:78:dc:c4:ae:d3:ab:8a:
62:54:c5:1b:27:6d:94:00:44:1c:79:7f:eb:8b:89:
32:9d:9c:3f:c8:30:44:03:cd:40:af:6b:39:72:d3:
ae:15:9a:14:e6:ce:5f:75:68:db:99:1f:51:6f:23:
11:09:cf:ca:93:71:08:ab:4b:42:77:20:66:5a:79:
7e:e6:a8:f1:7d:37:61:6e:fd:d3:08:00:03:6a:07:
cd:c1:5c:99:4e:b8:a3:87:78:44:b3:84:21:8d:3a:
f5:f9:13:fb:7a:97:23:f2:2d:d0:fd:75:87:47:23:
9a:4b:21:26:bd:47:be:c0:1e:90:d7:eb:74:fd:ef:
28:b1:df:b7:39:c4:55:4f:22:31:20:b3:13:96:3f:
70:e8:c8:7a:3a:53:75:0a:61:29:0c:04:a4:50:bc:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:F1:59:67:A7:4F:71:9F:4D:79:30:97:DB:D4:C8:DA:72:E8:DB
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/JEzxWWenT3GfTXkwl9vUyNpy6Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.135.0-87.248.136.255
87.248.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2d:94:a2:65:62:bd:27:8d:14:a8:9d:d6:be:36:ef:e7:e4:
1f:6a:2c:cc:32:81:93:f7:23:f7:1b:52:c9:34:4b:1b:6f:21:
63:ec:05:a3:f1:d6:0b:30:95:01:ca:0c:0d:7b:b5:1f:8b:04:
b7:2b:ca:4b:36:79:87:6b:77:a8:18:56:75:04:b4:0f:58:f9:
91:0c:1f:cd:46:89:e1:3d:23:d1:98:6b:25:2d:86:9e:58:84:
b5:8f:dc:ca:c1:e8:ff:40:80:61:5b:0e:68:22:62:ed:40:4e:
c1:06:82:99:2d:e1:9a:0b:05:16:12:17:9c:58:86:7d:83:e5:
82:bd:4a:6f:f9:3f:80:22:97:fc:d8:a0:77:e2:ae:7f:82:c9:
38:6f:80:8c:67:7f:d1:55:e2:25:6d:83:e7:b4:aa:60:41:fb:
d8:94:d9:41:05:5d:a1:3d:8c:e5:0e:1b:43:35:01:c0:0e:24:
39:7b:fc:df:44:96:82:1e:57:0f:f2:da:b6:98:cd:91:c8:0b:
ce:38:4a:d2:7e:13:03:dd:da:ca:69:45:13:5b:46:5e:b7:af:
9a:3f:90:c3:59:b6:7b:50:df:9d:72:1e:10:76:4a:4b:22:9f:
54:ab:e7:5b:53:24:79:3b:9a:1d:f7:04:91:a2:f2:ed:73:64:
46:85:3d:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:28:52 2025 by rpki-client