Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/13wcgFYF8fX_qF6SpJlCrxkRivc.roa
File: 13wcgFYF8fX_qF6SpJlCrxkRivc.roa (raw, json)
Hash identifier: kOtFe/Siify7XUHVvPBdt4Y4PHMdjU6+zO229uKiUYo=
Subject key identifier: D7:7C:1C:80:56:05:F1:F5:FF:A8:5E:92:A4:99:42:AF:19:11:8A:F7
Certificate issuer: /CN=3d4709d8bd7573ab1df2233b741def2f84c94fee
Certificate serial: 0186C7AF324851BBA6E2CB90A71A6D3F9532
Authority key identifier: 3D:47:09:D8:BD:75:73:AB:1D:F2:23:3B:74:1D:EF:2F:84:C9:4F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUcJ2L11c6sd8iM7dB3vL4TJT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/13wcgFYF8fX_qF6SpJlCrxkRivc.roa
Signing time: Thu 09 Mar 2023 18:43:13 +0000
ROA not before: Thu 09 Mar 2023 18:43:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 87.236.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:af:32:48:51:bb:a6:e2:cb:90:a7:1a:6d:3f:95:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4709d8bd7573ab1df2233b741def2f84c94fee
Validity
Not Before: Mar 9 18:43:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d77c1c805605f1f5ffa85e92a49942af19118af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:fb:9d:b1:40:b9:17:68:0f:bf:9d:f9:a3:
56:f0:72:bf:e9:21:a2:d9:92:68:95:c9:ed:80:d2:
cd:8e:5b:cc:88:ac:41:98:75:aa:7d:8a:ec:54:95:
eb:ca:c2:39:3c:e4:ac:b1:d9:db:42:38:3f:de:f3:
5d:2c:91:8c:7d:5e:0d:78:28:b3:e8:ee:a8:34:bc:
89:89:0c:56:8e:bc:6b:4d:e9:6b:fb:4c:3e:cc:30:
6f:8f:91:06:a5:f1:c2:6d:9e:b4:1d:60:3d:09:b5:
19:cf:e7:89:cd:e2:c5:da:51:e3:27:e7:a0:22:19:
9f:0a:e8:ee:ae:9c:f9:32:19:38:d5:38:a5:e2:82:
69:e5:e1:25:8c:1d:94:29:e9:fe:be:0e:c2:9e:14:
ef:21:f3:93:d4:a0:85:a0:4c:8c:07:80:ed:25:b4:
d5:dc:14:ce:3d:f0:b5:34:c1:62:e1:ad:a9:f6:bb:
bc:60:43:55:2f:71:80:78:1f:16:07:9f:13:a0:11:
53:c7:b4:52:a9:59:70:bc:ac:61:c5:bc:06:d2:5b:
9f:02:79:8a:8c:a5:03:fd:af:87:93:eb:c0:85:18:
38:7b:4d:9f:b6:95:e7:6c:da:bc:69:51:f1:b3:fe:
b9:1f:a1:8f:58:60:c3:b2:97:cc:bd:38:32:3b:c6:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:1C:80:56:05:F1:F5:FF:A8:5E:92:A4:99:42:AF:19:11:8A:F7
X509v3 Authority Key Identifier:
keyid:3D:47:09:D8:BD:75:73:AB:1D:F2:23:3B:74:1D:EF:2F:84:C9:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUcJ2L11c6sd8iM7dB3vL4TJT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/13wcgFYF8fX_qF6SpJlCrxkRivc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/PUcJ2L11c6sd8iM7dB3vL4TJT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:69:cd:6f:4d:c5:cf:d6:cd:0e:73:39:24:8a:34:fd:1f:72:
b1:04:a6:e0:ea:be:68:ef:20:62:bb:88:81:a1:6c:d1:9f:18:
a1:f2:2a:f4:95:08:b8:03:51:80:5b:a4:e1:a7:38:5e:9e:47:
c8:8d:db:e9:29:64:08:b1:1a:0c:86:92:1e:b2:3b:12:27:e3:
89:73:d5:2e:c0:83:ae:ae:92:12:79:c4:c4:49:05:5c:70:93:
77:d4:fd:1b:ab:c8:45:1e:5a:6f:1a:56:52:5e:4d:f6:76:db:
d9:f5:5b:4f:9f:e0:43:f5:57:10:21:a9:f3:c1:cb:0c:b5:40:
f7:db:59:97:6f:17:ae:da:97:5d:b5:bf:07:c1:a9:48:c3:01:
78:1d:cf:1c:99:97:91:bc:28:f4:2f:8b:4d:6e:77:86:22:36:
ea:13:e7:58:e3:d4:1f:2f:a8:d8:0c:73:e3:61:7a:1e:54:6c:
d5:1a:ed:2d:6a:8d:f0:00:44:ed:b0:17:0d:cb:da:8b:59:98:
e6:30:19:5b:26:af:e9:a0:3b:5c:b5:2d:fa:60:c8:0f:b6:7b:
36:d2:e8:04:df:17:40:ba:dc:41:ba:88:49:d3:9d:76:b7:60:
5e:bd:28:e6:3f:f3:79:ad:b0:cd:09:f9:cf:eb:6a:a9:5a:e0:
fb:0c:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:42:25 2025 by rpki-client