Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/cvd9RTGU3JTZAIRH9oS55KeMwDg.roa
File: cvd9RTGU3JTZAIRH9oS55KeMwDg.roa (raw, json)
Hash identifier: h69IoO4en/s1W2Kqh9ozwL9uTtAJj9HR1EYmytld824=
Subject key identifier: 72:F7:7D:45:31:94:DC:94:D9:00:84:47:F6:84:B9:E4:A7:8C:C0:38
Certificate issuer: /CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Certificate serial: 0189254B7BA6A1298BD86861E6CFF5079144
Authority key identifier: C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/cvd9RTGU3JTZAIRH9oS55KeMwDg.roa
Signing time: Wed 05 Jul 2023 09:04:11 +0000
ROA not before: Wed 05 Jul 2023 09:04:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208264
IP address blocks: 87.236.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:4b:7b:a6:a1:29:8b:d8:68:61:e6:cf:f5:07:91:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c867f46624d481bea9d1ba8beb0c0189c9b44b5e
Validity
Not Before: Jul 5 09:04:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72f77d453194dc94d9008447f684b9e4a78cc038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:32:6a:2f:b7:df:3c:20:f4:ab:19:27:bf:
b4:5d:d0:c1:ec:4b:cf:e8:3e:15:7b:8d:d2:4f:e6:
d7:08:79:42:2d:fa:4b:4f:47:51:48:52:46:5f:33:
c5:40:74:87:88:ab:94:b7:cb:84:90:ce:81:bd:c9:
1f:79:3d:e6:48:65:25:3c:ae:36:d5:df:49:57:54:
ef:54:ac:67:cf:21:4e:0a:1d:f3:14:2b:96:12:e0:
cf:11:69:fc:0c:73:85:cc:f4:86:a2:77:26:9d:bf:
60:74:83:94:7d:18:a1:9e:c6:d1:f2:bc:6f:93:6f:
cf:2b:1f:c8:1d:8a:d5:c6:7c:ba:4b:53:75:f1:55:
dd:fb:46:6f:f3:ab:e9:58:7e:e5:6d:8a:0f:79:c9:
4e:87:ab:f4:4e:e3:a0:12:01:3f:d3:c3:23:75:d2:
6a:4a:74:35:da:79:0f:cb:67:d5:b6:07:14:7c:12:
70:2e:8d:72:60:07:f1:12:21:6b:38:6a:09:d0:bf:
c7:26:af:d9:24:df:2a:c8:44:a0:bc:a8:99:b9:98:
26:59:18:e7:6e:04:b1:1b:d0:92:57:af:32:a5:20:
0d:41:0a:eb:1a:9c:90:fa:38:49:dc:4a:e4:91:ac:
89:61:92:f4:7c:1f:4b:52:c2:e4:3c:47:d3:06:11:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F7:7D:45:31:94:DC:94:D9:00:84:47:F6:84:B9:E4:A7:8C:C0:38
X509v3 Authority Key Identifier:
keyid:C8:67:F4:66:24:D4:81:BE:A9:D1:BA:8B:EB:0C:01:89:C9:B4:4B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGf0ZiTUgb6p0bqL6wwBicm0S14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/cvd9RTGU3JTZAIRH9oS55KeMwDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f50b96-630e-4379-95ca-71aedbaef48b/1/yGf0ZiTUgb6p0bqL6wwBicm0S14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.38.0/24
Signature Algorithm: sha256WithRSAEncryption
55:20:55:77:34:47:8d:d7:be:8b:7c:d2:7a:b3:a9:b9:0a:e9:
d5:67:c9:c7:ea:41:fc:5f:0d:e5:0f:90:ff:ec:74:24:5e:25:
4e:2b:ed:02:fc:04:17:93:e4:73:e3:d9:84:0e:e2:c6:a6:b7:
56:d2:9d:81:6c:32:e0:64:90:d3:b4:35:68:e3:9d:e1:12:02:
47:70:3a:ef:64:71:9f:12:fb:76:ad:2d:ba:3d:a3:8b:59:af:
66:5b:30:29:22:ce:a3:97:8a:09:c6:27:5c:90:5e:6e:65:00:
1f:77:aa:ef:d2:45:e7:89:08:95:1d:2e:79:8c:ac:5a:12:41:
3b:c9:71:50:db:ba:19:54:95:58:45:c0:9f:a2:6f:58:a9:fd:
c7:6a:f8:4c:21:a2:2f:af:c5:aa:59:75:ff:b4:d1:37:30:62:
7c:47:a9:31:53:39:c9:23:38:c4:77:08:3c:14:aa:8b:63:fe:
55:d4:05:86:e4:89:46:39:12:48:69:54:1d:56:ba:4e:2b:1d:
b0:dc:b5:48:b7:97:f7:bf:1e:b2:d9:2f:65:7f:49:db:a8:9c:
92:34:58:e7:66:0d:ba:1b:5a:5f:f5:59:ff:8b:ad:83:60:6e:
ef:52:c6:50:ae:a1:2b:cc:f1:e2:d0:d8:45:3a:48:af:53:26:
aa:eb:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:18 2025 by rpki-client