Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/dzbMTYGCieBVBPgENTHt9L5KJ8M.roa
File: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (raw, json)
Hash identifier: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=
Subject key identifier: 77:36:CC:4D:81:82:89:E0:55:04:F8:04:35:31:ED:F4:BE:4A:27:C3
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 0194221FA259E4E898491C801F8EC3AE969C
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/dzbMTYGCieBVBPgENTHt9L5KJ8M.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202463
IP address blocks: 87.243.71.0/24 maxlen: 24
87.243.77.0/24 maxlen: 24
87.243.79.0/24 maxlen: 24
185.49.88.0/22 maxlen: 22
185.73.236.0/24 maxlen: 24
185.73.237.0/24 maxlen: 24
185.73.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a2:59:e4:e8:98:49:1c:80:1f:8e:c3:ae:96:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7736cc4d818289e05504f8043531edf4be4a27c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:4d:0b:a8:f0:56:e5:75:2e:e8:73:56:ee:
1b:b1:5d:d8:70:bf:37:9a:48:c9:5f:02:42:5b:66:
93:92:06:eb:dd:43:cb:bf:3d:23:ca:44:b7:70:71:
00:b1:5b:23:74:40:b2:fa:5b:15:5f:af:73:14:fa:
4a:2f:63:50:b7:63:14:34:c9:50:d2:d0:2f:3a:31:
38:c6:62:68:7c:69:62:f5:1a:0e:50:7f:d1:1c:de:
8c:91:a9:e4:28:73:80:65:ae:21:6e:d0:63:74:b5:
12:1a:13:a6:35:c1:c3:c9:47:1a:ae:d5:36:91:79:
4d:58:4f:4a:1b:b9:69:d9:42:00:58:b4:1f:c6:91:
ac:38:e7:1f:2b:d2:d4:90:7b:0f:60:b8:e5:38:7b:
33:de:ff:ed:57:6f:a2:7c:bf:bb:1d:fb:20:6d:52:
bb:9d:7b:8f:60:57:1b:8c:68:f5:c0:fb:b7:4c:5c:
5d:01:41:58:e2:2b:d8:fe:96:68:24:ec:94:22:ba:
08:70:c3:ad:23:be:df:e0:9c:30:d7:44:35:12:ee:
a9:0b:84:cf:c2:d7:7d:9b:3a:da:5e:f7:21:ff:92:
05:36:8e:93:98:ef:56:84:6e:fd:37:ff:03:dc:d1:
f2:f6:9e:eb:03:1f:cd:2d:e1:09:22:8d:c5:cb:55:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:CC:4D:81:82:89:E0:55:04:F8:04:35:31:ED:F4:BE:4A:27:C3
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/dzbMTYGCieBVBPgENTHt9L5KJ8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.243.71.0/24
87.243.77.0/24
87.243.79.0/24
185.49.88.0/22
185.73.236.0-185.73.238.255
Signature Algorithm: sha256WithRSAEncryption
1f:88:40:3e:99:85:45:6d:a3:6c:19:ce:7c:55:91:e0:c0:61:
05:a2:09:ab:7c:be:05:1c:fd:d1:c9:49:e3:90:9f:04:cd:3a:
56:da:9f:40:6b:ac:9a:cd:a3:22:f1:92:6d:56:39:b2:4a:2f:
d5:89:fd:e2:89:8a:b9:66:b6:44:cf:2f:c6:4a:34:c9:18:d2:
1f:dc:d1:c9:e8:a1:0a:a6:78:dd:d5:54:39:34:bd:d3:39:eb:
ec:ff:63:43:4e:0b:63:7c:37:54:0e:c6:af:df:77:38:49:1c:
39:37:d3:88:bb:b1:27:ea:54:05:58:1a:77:a1:33:39:de:09:
54:2e:0d:bf:27:69:28:21:3e:ec:60:86:11:7f:04:04:9f:fd:
78:74:e1:01:cd:15:61:e5:43:20:f3:75:c9:fe:f2:74:f2:b4:
45:ec:14:3d:fd:7e:8b:48:2d:39:44:9c:ee:bc:75:39:75:cf:
5c:49:6f:55:9d:50:4e:82:d8:79:61:dc:69:81:d5:b7:09:ed:
36:a9:9f:97:59:f2:ed:35:e8:bf:ec:77:1f:9d:4f:34:b5:d0:
04:39:9e:70:f8:f3:95:cc:d3:44:e2:f9:e3:7f:0c:2e:66:85:
f2:62:99:ca:03:ec:41:5c:47:51:bd:c5:a7:52:bf:d3:30:e9:
24:5b:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:43 2025 by rpki-client