Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/exNBWzsJdV3aicSdEIBpUGacx74.roa
File: exNBWzsJdV3aicSdEIBpUGacx74.roa (raw, json)
Hash identifier: 6hKpyXwmjMPvF2uI11MjVhC+6m0ZJvy5FnDNsSRaDUA=
Subject key identifier: 7B:13:41:5B:3B:09:75:5D:DA:89:C4:9D:10:80:69:50:66:9C:C7:BE
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0195B43D4965DC85FB61F49902F89248C730
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/exNBWzsJdV3aicSdEIBpUGacx74.roa
Signing time: Thu 20 Mar 2025 15:47:50 +0000
ROA not before: Thu 20 Mar 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208091
IP address blocks: 87.251.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:3d:49:65:dc:85:fb:61:f4:99:02:f8:92:48:c7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Mar 20 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b13415b3b09755dda89c49d10806950669cc7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:48:eb:4c:f8:c5:51:c7:c4:78:23:13:5c:29:
00:7f:12:fd:05:fe:f2:78:e8:b3:6f:e0:17:31:e5:
8c:61:59:cc:80:2a:5c:a9:9e:b3:56:e4:96:9d:a4:
46:8a:1b:be:1c:f5:9b:5d:82:cd:d3:46:8a:7c:2b:
d5:f1:5a:f8:b3:20:a5:0c:92:30:36:06:c2:2a:db:
3e:fa:2e:b1:97:4a:52:fb:75:64:e9:24:ef:76:bb:
24:a6:0b:e2:c0:ab:6c:9d:d4:26:8d:00:e1:fe:47:
f5:9a:d6:a5:44:2e:db:ba:74:3a:7c:f1:f7:0c:c4:
80:67:89:9c:8b:e6:9d:e9:e9:81:84:b8:1a:02:5b:
2a:7e:3d:f2:18:f6:0d:56:26:df:b2:26:9b:37:b6:
c6:c3:01:b7:4a:67:28:e5:52:c1:a5:3d:ef:2c:dd:
22:f8:5a:3f:cc:d0:f2:6c:ea:74:f9:05:64:ba:dc:
49:3a:78:9e:2f:71:13:fe:c6:9f:e3:af:00:5a:a9:
e7:23:f4:d4:fe:50:04:e7:70:a1:ae:ae:ac:1f:e1:
25:37:5d:3d:a1:f7:55:cf:e6:d8:3c:cd:8b:c3:6f:
c0:0b:71:1d:35:eb:72:e4:86:84:8b:cf:82:c3:e4:
1f:c7:02:2a:da:13:c6:5e:3d:ea:f7:ef:94:c8:49:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:41:5B:3B:09:75:5D:DA:89:C4:9D:10:80:69:50:66:9C:C7:BE
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/exNBWzsJdV3aicSdEIBpUGacx74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
13:57:ed:8a:48:0e:bb:9d:9d:f5:48:e0:3c:f8:f3:81:ea:d3:
00:b8:36:0c:1b:d1:7e:59:3c:e0:45:ee:9c:92:1f:af:12:98:
44:56:dc:d1:0b:af:52:9c:ac:e3:f8:96:8f:28:c2:27:a7:fa:
d4:ee:8b:18:69:14:ad:38:44:0c:f7:8c:d2:3a:f8:ff:f8:47:
20:c5:bd:0d:a6:73:73:a4:cc:ed:5a:6f:c9:37:6a:b8:40:05:
ca:a8:a2:88:fd:c7:39:24:f6:db:47:48:b1:d3:32:61:2c:21:
10:75:c2:cd:a7:1a:ea:f0:39:ee:d0:64:3b:b0:5e:cc:c8:24:
e6:5b:3a:9e:17:12:10:35:79:8a:0b:1c:c1:cf:0d:84:50:bc:
51:79:22:3b:d3:cf:c0:f8:8d:80:6e:3f:e3:53:27:49:0f:cf:
bd:2e:c0:74:68:15:85:10:d4:f3:8d:42:f8:28:f2:32:de:3d:
ef:15:0b:dd:b6:0f:43:22:89:57:62:59:bf:e0:c0:ab:82:08:
49:61:7e:46:bf:c3:1a:1d:fd:54:8c:c5:98:ac:18:96:6f:73:
97:ae:9a:08:aa:29:1a:41:5a:b9:e0:ad:6f:0d:3b:65:ef:e8:
de:e5:e6:f1:21:d1:6c:df:f8:32:ab:ab:08:e6:6f:ba:a3:b0:
95:2d:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:14 2025 by rpki-client