Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/L5WtoV3BFHEh7ee302wn8vi_VdY.roa
File: L5WtoV3BFHEh7ee302wn8vi_VdY.roa (raw, json)
Hash identifier: aeS2KxRTadI0bQvnm7vgoZxmnQFSj7clIU01Ondzlk0=
Subject key identifier: 2F:95:AD:A1:5D:C1:14:71:21:ED:E7:B7:D3:6C:27:F2:F8:BF:55:D6
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019428239F514B090CEA42DE29FCA1A9D6C5
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/L5WtoV3BFHEh7ee302wn8vi_VdY.roa
Signing time: Thu 02 Jan 2025 17:50:10 +0000
ROA not before: Thu 02 Jan 2025 17:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 87.248.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9f:51:4b:09:0c:ea:42:de:29:fc:a1:a9:d6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f95ada15dc1147121ede7b7d36c27f2f8bf55d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:dd:77:2e:77:7d:68:83:a6:92:9f:64:cc:
52:c8:a5:60:41:49:31:91:c5:6e:6f:b7:1b:38:0c:
ef:67:36:f7:03:09:28:a7:55:dd:b6:a3:a5:e7:3e:
0a:2c:d4:af:d1:ae:3c:95:0a:2f:3c:fb:4d:0c:2b:
76:42:f7:3a:8b:2f:e2:74:1e:87:3d:5f:55:f2:6f:
48:1d:38:0c:43:09:55:df:78:54:84:8d:ef:5b:37:
fe:f6:8e:f6:79:24:20:93:9f:5a:57:f2:28:f4:36:
83:24:ee:be:ac:fe:92:f1:8b:fb:93:83:8b:8f:38:
a5:47:48:90:bb:93:5d:fb:01:e7:59:86:a6:91:4b:
8e:a6:71:73:74:40:4c:f9:17:e1:14:2f:48:cd:a8:
91:64:70:38:f6:a4:17:e1:0b:5a:2e:6e:a3:d0:05:
5b:7d:fc:f4:06:13:fd:bb:60:0b:c0:c6:5e:bb:c6:
e1:c9:fd:eb:db:7e:4a:d1:fb:e4:b9:26:14:ea:9f:
69:47:95:a6:5d:b1:58:a7:32:28:5c:80:d8:82:2d:
22:d0:e7:88:48:ab:ba:0c:f7:b4:f3:29:10:ad:93:
36:02:79:03:17:ed:6d:10:f3:e3:bf:83:83:fe:b8:
cc:34:3e:08:f3:f7:2b:06:11:1e:df:d4:0c:e6:e2:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:AD:A1:5D:C1:14:71:21:ED:E7:B7:D3:6C:27:F2:F8:BF:55:D6
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/L5WtoV3BFHEh7ee302wn8vi_VdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:2a:cc:0f:7a:77:94:31:0e:42:15:07:de:c9:d5:fc:57:43:
b6:59:5b:12:e4:13:d8:3a:6b:f4:ac:0e:a7:a0:0a:72:3e:56:
34:b9:32:9e:a1:ae:47:4c:53:62:91:a4:fe:e5:ba:c1:9d:6b:
ac:8e:25:c1:b3:79:51:e6:54:a5:9c:a3:be:ad:af:d7:f3:82:
88:27:73:c7:3e:67:04:e8:db:94:83:a1:5b:c3:13:01:03:dc:
3e:b7:8c:dc:c4:5b:39:71:a2:2f:8e:2b:df:95:df:58:e1:46:
35:92:32:3c:af:56:a1:2f:82:2b:74:a9:ed:12:0c:e8:51:6f:
63:dc:74:96:44:47:0c:eb:32:f6:21:85:3d:04:f1:38:79:7a:
87:96:39:35:42:9b:b0:fa:19:d5:e6:47:9b:f7:05:0a:24:c6:
b4:6e:25:ad:ff:4b:2c:20:fc:fe:d1:72:26:9d:31:b3:3b:59:
ce:10:d6:7c:bb:cd:61:da:c5:67:8b:98:a6:38:73:d1:58:e4:
0c:94:98:14:ac:bd:1f:75:bd:06:ca:3c:cf:36:6b:11:2c:bd:
f8:14:e0:1e:4e:8c:7c:6f:00:91:16:b5:7c:67:a7:c1:af:c6:
26:21:c7:24:a3:50:3f:4f:0a:e3:61:ea:94:8e:af:50:16:b5:
ee:bf:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:59 2025 by rpki-client