Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/hEya02Xf9kd-D5oiAew2cf9juRQ.roa
File: hEya02Xf9kd-D5oiAew2cf9juRQ.roa (raw, json)
Hash identifier: jbCwzNjHJJsCtcnhi9SoCiV0LyMvvoy50hLc24+WNPg=
Subject key identifier: 84:4C:9A:D3:65:DF:F6:47:7E:0F:9A:22:01:EC:36:71:FF:63:B9:14
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019427462D26C59E78D423D8DC3877A23669
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/hEya02Xf9kd-D5oiAew2cf9juRQ.roa
Signing time: Thu 02 Jan 2025 13:48:17 +0000
ROA not before: Thu 02 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 123456
IP address blocks: 87.237.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:2d:26:c5:9e:78:d4:23:d8:dc:38:77:a2:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=844c9ad365dff6477e0f9a2201ec3671ff63b914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:93:d5:ae:01:13:d8:a3:7b:74:1b:6c:81:66:
85:c7:e0:da:b6:a7:93:77:61:96:f8:7c:93:bd:ce:
4f:0e:73:14:fa:52:56:2f:2f:eb:8f:72:20:d5:c3:
d5:3c:6a:47:50:ff:ea:a3:b7:ad:16:63:c1:7e:5b:
6e:d2:54:f3:2b:34:01:57:98:ef:a9:82:ae:67:64:
a8:97:c8:c7:aa:5d:dd:fb:a1:c0:a7:96:b5:0f:cc:
68:58:b7:84:1e:9e:72:7b:fc:8c:ce:ad:36:e9:4e:
5e:9e:30:26:e5:8a:c9:9d:b7:15:ac:ea:c3:5c:2a:
f9:6a:ce:26:6a:05:21:89:d5:01:37:6e:19:db:cf:
0f:76:5b:f5:3c:ca:cb:0e:fb:9d:b4:f1:3f:67:10:
95:16:11:29:18:d8:03:87:0a:a8:11:5d:21:a5:62:
ef:4b:55:60:da:d8:2d:a0:82:eb:9a:b8:85:40:d3:
55:ed:8c:00:92:1c:5c:e4:79:8a:61:5a:12:dd:0c:
fc:1b:bb:b0:15:2c:4b:49:f4:0d:7a:85:39:01:e9:
00:09:63:76:32:01:c9:1c:80:10:19:b4:dd:ba:88:
b3:61:2d:61:42:5f:13:34:f8:cd:b9:45:b5:3e:ab:
66:84:d5:a7:ab:92:3f:79:2e:0e:71:6b:f3:15:20:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4C:9A:D3:65:DF:F6:47:7E:0F:9A:22:01:EC:36:71:FF:63:B9:14
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/hEya02Xf9kd-D5oiAew2cf9juRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:79:ed:20:9d:f6:d9:f7:18:ff:66:c7:87:8d:0c:c1:13:62:
f5:a3:cf:aa:67:91:b4:81:a9:3b:ad:bd:10:a6:f1:4b:c0:61:
89:df:fe:f8:2a:a8:60:a8:46:03:86:56:75:a9:e9:ae:d8:eb:
0e:a5:de:b4:b9:be:d0:03:09:9f:04:ea:62:ff:4f:ed:63:af:
11:f4:23:7c:b4:5e:3f:33:11:e9:c4:f3:f6:62:ec:6a:50:df:
b4:96:70:97:db:ba:c4:cf:fd:7c:10:ce:c7:05:07:3d:5d:66:
c2:ad:fe:57:65:71:ff:32:d1:26:86:7a:27:77:3c:10:35:ad:
73:80:19:f5:42:be:40:c5:76:2f:4a:0c:62:52:71:eb:6e:b7:
79:16:fc:aa:9f:d1:22:5f:29:da:52:58:ba:3a:d3:c7:5a:a1:
1d:bc:72:ed:7b:07:29:35:47:9b:35:3f:5f:b0:d9:2b:0a:77:
af:cd:b7:0f:c9:17:35:bf:66:37:f7:40:51:0e:9d:aa:eb:4c:
31:1d:31:fe:f4:82:b8:e0:9c:63:49:d4:26:bc:84:fb:97:cf:
90:09:66:98:45:1d:f6:7a:d3:2c:65:b2:ed:83:63:87:e0:b7:
bd:f9:ee:ad:5f:ca:b1:fe:94:6f:cb:a3:7c:0d:e5:68:84:16:
82:fb:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:45 2025 by rpki-client