Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/kO_TT369iz1QEtAMkNLwDEYroxI.roa
File: kO_TT369iz1QEtAMkNLwDEYroxI.roa (raw, json)
Hash identifier: nI8EqvV7kPl7HG2jTYPwe6gXbsqRDPDMbwLNm9bAjxI=
Subject key identifier: 90:EF:D3:4F:7E:BD:8B:3D:50:12:D0:0C:90:D2:F0:0C:46:2B:A3:12
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019420E6B956C83A6463679C445083207475
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/kO_TT369iz1QEtAMkNLwDEYroxI.roa
Signing time: Wed 01 Jan 2025 08:06:19 +0000
ROA not before: Wed 01 Jan 2025 08:06:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
194.60.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:e6:b9:56:c8:3a:64:63:67:9c:44:50:83:20:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 08:06:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90efd34f7ebd8b3d5012d00c90d2f00c462ba312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:db:32:50:d4:84:4d:f0:fc:5a:47:4b:2b:
76:7e:08:52:da:b1:9d:d7:ca:1b:68:c7:c2:11:48:
b6:ab:a5:7e:7e:9a:36:77:4f:e4:9c:44:da:15:f2:
45:3d:b9:a7:dd:25:7b:a2:30:65:f2:06:70:62:59:
f7:9f:50:59:51:ea:8c:e2:56:3a:46:0a:2b:58:30:
4d:b2:c2:0b:9b:81:96:f0:a3:d8:6b:7a:fc:1f:79:
63:e4:7e:fd:bb:02:90:d4:28:d2:a0:47:83:b3:34:
cb:db:c7:ad:c8:21:05:d7:39:4d:2c:08:ad:a0:6f:
99:26:39:37:e2:a5:b3:0d:9a:eb:1f:84:7b:9e:e9:
a5:07:72:44:8b:f1:de:bc:8b:bb:a3:25:4f:93:df:
2f:6a:0c:23:06:d9:56:a8:c3:43:69:eb:39:70:d1:
7f:e3:02:ea:db:98:7f:fe:b8:e3:2f:48:9c:d6:c2:
40:fd:cf:88:5b:3d:ba:6e:7e:ca:1f:55:fb:93:8c:
d1:20:89:14:f0:70:18:45:c7:58:a8:3f:59:a3:2b:
21:1a:16:44:bc:2c:8c:e6:8d:2f:9f:42:bd:8a:ef:
1d:4c:2a:7e:50:05:db:f2:65:ce:05:3f:d1:87:30:
fe:a8:2c:fb:36:e4:0b:71:9a:88:84:e9:41:3c:13:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EF:D3:4F:7E:BD:8B:3D:50:12:D0:0C:90:D2:F0:0C:46:2B:A3:12
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/kO_TT369iz1QEtAMkNLwDEYroxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
194.60.229.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d1:e2:bd:44:64:83:70:b3:c8:55:92:09:ab:22:3a:1a:48:
62:b9:b0:85:c0:94:bd:99:1e:11:8f:28:57:11:63:75:2c:35:
09:62:d6:b8:7b:02:ee:5d:08:f0:8e:b8:e8:ac:f0:f4:70:91:
9e:2f:88:2a:8f:a5:51:b9:0b:2e:c2:54:d2:d0:5c:21:e5:df:
c8:c7:a0:d5:59:e2:70:01:3f:1e:b6:e9:2a:4a:54:c7:12:41:
17:d3:47:95:a6:3f:66:01:d6:ce:3b:af:f9:48:12:07:bd:e1:
c3:f3:a5:69:2d:8b:a6:f0:5d:77:bd:ed:e9:62:7d:65:8f:1e:
23:8c:26:28:38:62:5a:35:dc:c4:13:ec:ee:ff:47:d7:a7:c7:
6a:0a:dd:c6:25:b6:35:d4:47:3e:30:20:a8:9c:1c:fa:cb:27:
76:d3:25:52:9a:8c:cc:d2:f5:3c:1c:f6:bf:4b:c2:50:79:fb:
34:d3:0e:78:6c:74:f5:bc:8c:97:0c:5b:69:20:0f:9d:1e:e4:
ae:aa:1d:25:a7:91:99:07:fe:fd:93:ec:df:68:d8:00:a9:17:
4f:79:af:3f:c1:33:08:4f:3b:92:4d:c7:0b:0e:22:af:c3:6c:
ee:70:8f:2e:94:e3:47:e9:29:b0:02:25:dc:8c:11:c0:11:f3:
a4:13:a5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:17:09 2025 by rpki-client