Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/4lb8MH7GOJnctq74IYYrPz2MrXI.roa
File: 4lb8MH7GOJnctq74IYYrPz2MrXI.roa (raw, json)
Hash identifier: j6r/F3I87KdB4Ik/hzhNmN4mf0uzrhpeKqetEtToc9c=
Subject key identifier: E2:56:FC:30:7E:C6:38:99:DC:B6:AE:F8:21:86:2B:3F:3D:8C:AD:72
Certificate issuer: /CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Certificate serial: 019421B2212287B38CF75CCD367217961E5B
Authority key identifier: C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/4lb8MH7GOJnctq74IYYrPz2MrXI.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 87.236.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:21:22:87:b3:8c:f7:5c:cd:36:72:17:96:1e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e256fc307ec63899dcb6aef821862b3f3d8cad72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:e4:1d:4b:99:08:39:65:f0:74:f7:f7:70:
55:04:9d:23:9a:ae:dc:c3:a9:bc:25:eb:39:ce:b9:
8c:37:84:c0:f4:ae:bb:fc:c9:eb:60:fd:7a:a6:a6:
f1:65:36:31:95:da:e7:d2:aa:5d:02:c6:34:de:a2:
8c:b2:cb:83:7e:1c:02:cf:68:6d:50:a5:8b:be:bc:
c3:d3:95:f2:48:07:61:b3:50:25:72:62:34:6d:2a:
05:f3:76:29:bd:98:46:8a:35:05:18:d2:86:94:46:
84:ef:10:8d:f4:99:d8:90:7d:75:2a:85:e8:0a:c3:
69:84:26:67:a3:5a:b2:1a:bb:be:19:a8:17:5e:90:
82:fc:ce:23:88:58:70:9e:08:a2:03:33:6d:47:89:
3e:c6:da:8e:3c:64:44:ef:de:39:c0:f3:51:ae:94:
d6:c7:79:cc:04:64:83:cb:77:d1:86:d6:55:62:e8:
2c:1b:ff:71:5f:37:54:c6:c8:8a:69:25:b5:e9:81:
a1:52:c9:17:a7:c7:0e:22:ec:53:fb:1e:5a:b3:15:
93:06:e8:49:cb:73:b2:8c:8b:15:77:1b:78:15:96:
6d:f2:c7:54:75:f3:fa:05:1b:f7:bb:99:da:37:cd:
90:c5:c6:05:12:4e:b8:50:61:30:a5:08:1a:17:65:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:56:FC:30:7E:C6:38:99:DC:B6:AE:F8:21:86:2B:3F:3D:8C:AD:72
X509v3 Authority Key Identifier:
keyid:C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/4lb8MH7GOJnctq74IYYrPz2MrXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fd:44:33:6b:73:34:3f:48:34:da:a6:0b:e2:e9:1c:40:49:
40:8c:81:b9:55:a1:c1:65:08:07:26:40:16:03:39:74:22:0a:
2a:af:ea:49:09:44:2c:e6:ad:6e:aa:89:2d:ad:a4:8e:08:eb:
35:3c:f7:aa:c6:46:2c:77:55:88:5c:2e:f0:aa:fa:cb:a4:06:
d8:9b:39:24:ac:e1:d8:52:e3:3d:8e:91:74:d5:99:92:4f:00:
34:2f:f7:89:84:5e:5d:9e:ca:5f:d4:96:f0:0d:61:1f:63:85:
b8:c8:67:9b:22:1b:91:bf:63:4a:e1:79:72:d8:d5:9d:81:d2:
49:6d:24:a0:00:7d:06:8e:48:86:a8:5b:11:00:1f:bb:ce:ba:
4c:f1:93:5a:ff:0a:f8:9f:43:c2:74:2c:13:d6:a0:80:60:29:
7d:71:bd:b6:47:ee:37:f6:33:72:51:1d:3b:c2:3a:e4:a3:ef:
9a:42:54:53:20:0b:97:cd:de:47:1a:3c:2a:75:85:16:53:47:
4a:4d:98:1c:30:3d:9b:57:51:74:40:4d:77:d2:24:91:dd:5b:
80:10:16:01:7b:35:b1:9b:a1:6e:9e:55:ac:ac:fc:7f:32:23:
ab:a5:a1:80:67:0f:b7:8a:ad:ea:09:95:81:fe:79:2f:c3:9f:
c6:43:37:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:14:52 2025 by rpki-client