Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/XQuJXpDkA9qYgxcQ38huwth57wA.roa
File: XQuJXpDkA9qYgxcQ38huwth57wA.roa (raw, json)
Hash identifier: DXlOkVbY/RHDCgHRhEXU+SDyImy4MVnIFTYuOjrcEzE=
Subject key identifier: 5D:0B:89:5E:90:E4:03:DA:98:83:17:10:DF:C8:6E:C2:D8:79:EF:00
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019428239B17BD5D30E2AD79CCEBC4970D9E
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/XQuJXpDkA9qYgxcQ38huwth57wA.roa
Signing time: Thu 02 Jan 2025 17:50:09 +0000
ROA not before: Thu 02 Jan 2025 17:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48029
IP address blocks: 87.248.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9b:17:bd:5d:30:e2:ad:79:cc:eb:c4:97:0d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d0b895e90e403da98831710dfc86ec2d879ef00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:56:d2:f2:76:0f:41:62:07:e5:fd:ae:a4:
ba:bc:3a:80:c4:a8:07:98:04:e7:8a:3f:91:b9:1a:
2e:82:c8:8c:1c:d1:b6:ad:28:ac:7c:7a:45:f7:dd:
8c:21:e0:22:84:de:9f:2f:75:a1:a1:dc:4d:56:48:
21:6e:34:f3:8e:dc:56:b7:87:63:f5:59:86:66:c2:
d6:71:19:a8:e4:b2:6f:53:23:6a:55:5a:81:d0:07:
fb:be:3a:2a:6f:0a:87:61:2a:50:27:d8:45:39:b5:
37:25:8e:09:b9:e1:5c:ab:00:48:55:49:16:29:25:
98:34:25:2b:28:7f:0d:56:b6:2c:ef:cd:3a:57:3e:
f9:18:10:0e:64:f8:93:73:9f:f0:fc:a6:eb:8d:1f:
30:48:fc:a7:2a:9e:11:5b:75:ba:63:f3:9d:92:c1:
62:a9:0f:69:09:ee:b8:7e:82:7c:3e:4b:1a:84:ee:
11:c0:44:c7:b7:43:9c:35:3c:fa:27:ad:c5:e8:21:
8a:21:60:ea:27:d7:dd:08:1e:cb:c7:b7:1b:ee:68:
dc:d3:95:5f:45:81:a0:bf:2d:32:54:f2:a5:bb:e2:
3b:6f:0c:9a:f6:fc:62:0a:41:3c:d7:45:a5:d7:39:
9a:07:ed:52:5e:35:90:3f:93:ca:dc:96:76:6f:70:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0B:89:5E:90:E4:03:DA:98:83:17:10:DF:C8:6E:C2:D8:79:EF:00
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/XQuJXpDkA9qYgxcQ38huwth57wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.159.0/24
Signature Algorithm: sha256WithRSAEncryption
25:19:02:a8:a0:65:19:b6:88:04:70:59:18:da:ad:5d:d2:25:
9d:27:f8:c9:e6:05:b1:3b:a7:3b:1a:cc:18:58:c6:d9:97:42:
db:74:cc:16:82:41:71:63:9e:cd:ac:09:ca:f5:3c:e3:a7:8b:
2d:bf:23:6d:27:83:d8:72:ec:51:6a:2b:4b:e5:91:76:8f:14:
29:3a:61:20:cd:32:03:53:71:c1:66:4b:fb:38:e9:4e:ba:31:
11:69:4b:3f:79:ff:e7:b6:81:b2:c1:b4:33:cb:13:c6:de:f4:
7c:6f:60:80:7c:2a:85:c5:92:eb:4c:dc:3a:c3:bc:33:ba:ac:
70:78:8a:9f:90:cb:47:43:cc:98:83:71:f7:0e:49:37:a6:14:
f1:e8:3d:d5:33:29:96:e0:39:41:46:1a:a0:80:0c:c1:e1:0b:
a1:ea:84:57:67:b8:5b:d7:5b:f7:e2:f8:40:9b:8b:a1:fb:73:
95:5d:61:1e:10:3e:f9:ae:a1:24:2e:1f:93:cc:41:db:e6:f8:
b4:16:5c:9c:7a:0b:34:7f:20:66:51:d8:13:7c:16:23:67:10:
8f:31:fd:72:8b:62:ca:ca:c1:7a:90:82:d3:4f:dd:1e:62:33:
8a:93:78:fc:74:aa:f1:c6:48:40:99:27:95:4c:2d:00:d6:46:
06:f9:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:14 2025 by rpki-client