Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/xbmurPTkB-xulJQ5WBcKQVAPb5k.roa
File: xbmurPTkB-xulJQ5WBcKQVAPb5k.roa (raw, json)
Hash identifier: +MiB0ke0QuNZJvLEptFL8aLWDT++jiXflZJWJd3jYe4=
Subject key identifier: C5:B9:AE:AC:F4:E4:07:EC:6E:94:94:39:58:17:0A:41:50:0F:6F:99
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019498F209FC5901063E01B2D2EA966EDEA1
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/xbmurPTkB-xulJQ5WBcKQVAPb5k.roa
Signing time: Fri 24 Jan 2025 15:33:06 +0000
ROA not before: Fri 24 Jan 2025 15:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208349
IP address blocks: 87.247.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:f2:09:fc:59:01:06:3e:01:b2:d2:ea:96:6e:de:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 24 15:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5b9aeacf4e407ec6e94943958170a41500f6f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:ef:2d:12:28:43:bb:4c:a8:45:16:6a:cc:
81:c8:09:6b:98:d1:b8:11:4f:29:47:a9:6e:0c:5a:
80:c9:cf:8e:f2:bf:d6:5b:61:43:b2:8e:39:0f:01:
1b:d6:a7:f8:b4:09:20:dd:a6:a6:15:f0:a9:ca:df:
d9:28:ce:17:8a:a3:63:b3:32:ee:00:9e:96:58:42:
41:45:2e:97:91:ac:0d:7f:d4:03:a2:05:2d:7d:2b:
24:dc:e5:88:2c:87:06:35:cc:26:7a:0c:8a:5d:45:
c0:8e:e9:bc:87:03:0a:82:9a:be:74:4b:40:c0:a8:
f5:16:1d:a8:06:a8:61:a5:90:0e:49:de:c2:59:25:
26:1b:97:a8:a9:d1:9a:62:f0:95:41:4a:d4:8a:e3:
57:6a:be:4d:09:1a:d3:94:da:ed:c2:ca:3b:df:69:
85:40:3f:20:d9:34:01:30:47:ba:eb:c8:85:86:b3:
0c:eb:4e:0f:f5:08:e2:62:75:65:57:60:44:d8:3a:
d2:3a:02:67:76:80:e5:42:fe:60:9d:8c:12:df:ec:
1e:ae:81:60:f8:49:54:f8:c6:10:68:01:b6:35:b7:
a2:ff:d0:a5:cb:50:2a:8a:9c:28:ca:a7:33:37:2f:
24:69:a4:8a:72:76:e5:34:b4:fa:eb:f6:2e:f8:14:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:AE:AC:F4:E4:07:EC:6E:94:94:39:58:17:0A:41:50:0F:6F:99
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/xbmurPTkB-xulJQ5WBcKQVAPb5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:93:b7:34:f1:02:8e:b9:4a:7d:ba:a3:86:43:bc:4d:4d:2e:
e4:e0:7b:f4:cc:56:9a:1b:4d:0f:06:fe:79:ee:79:cf:9d:d8:
62:33:05:fa:d3:23:b9:d8:64:e2:01:3a:ed:f0:ab:9e:02:b1:
fc:9a:7b:41:c6:03:fd:ed:0c:d2:54:da:6f:58:03:a2:51:0d:
ca:4a:32:c5:ad:15:6f:2f:8c:f1:3d:fb:62:43:b9:a7:6c:be:
57:88:aa:20:cc:80:3b:2f:51:f9:c4:f3:da:4f:94:4e:f5:a5:
c1:90:b0:61:a6:2d:2e:fa:f6:12:30:95:3d:32:7d:6f:a6:09:
4f:9b:f3:58:70:0b:cd:c9:3c:97:d7:80:fc:63:32:a6:85:48:
07:53:f7:f5:9e:c1:bb:f1:75:01:20:52:ec:88:1c:71:6b:1e:
cd:5c:a6:cf:ba:9c:aa:4e:9e:7d:8f:8c:dc:ff:7b:cd:ab:94:
11:6b:74:27:c3:dd:c0:68:bd:14:f0:a6:cf:b0:a0:5a:96:86:
00:d0:ee:19:d6:16:fe:8e:51:04:8c:9c:dc:1a:86:a8:f6:a6:
cd:cd:50:58:d3:6b:d4:8a:50:5e:54:1c:ff:f0:6d:2c:f5:24:
fd:7c:f0:b2:ff:bf:f7:92:78:5e:a1:1f:60:62:5e:91:89:31:
33:cf:83:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:38:01 2025 by rpki-client