Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa
File: 7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa (raw, json)
Hash identifier: osSdmDl/G/dF/W3n4ltU1jPl+UamVuVRPceUmIJCb+c=
Subject key identifier: EE:24:7D:5B:83:00:E5:F1:28:1B:D3:51:59:FF:44:FB:7D:8C:6B:94
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 019421B21972728355125E16C576FA2D716D
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 87.237.84.0/24 maxlen: 24
87.237.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:19:72:72:83:55:12:5e:16:c5:76:fa:2d:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee247d5b8300e5f1281bd35159ff44fb7d8c6b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:04:2b:b4:9e:b0:fb:39:af:dd:fa:57:8f:97:
ec:5e:67:33:88:e3:96:ab:18:17:9a:75:ee:21:7c:
14:3f:a5:85:20:58:c6:45:37:f8:d5:33:1b:ff:78:
fe:a0:38:dd:d8:ef:38:45:49:27:5c:36:d3:5c:ae:
a7:bb:cc:10:31:77:d2:40:ab:b1:fc:90:d5:8c:0c:
12:08:37:14:f8:1f:9c:a9:a3:ff:aa:df:d3:73:46:
da:89:4d:ea:bc:1f:c4:ea:82:df:45:40:a5:ef:ea:
0f:84:ec:f9:2e:32:38:93:ca:4e:41:f0:27:1d:65:
c3:b9:a0:bb:02:27:6a:19:cf:31:58:cc:0f:c2:09:
23:61:b0:73:92:22:ea:43:f2:1f:43:f4:2e:41:1a:
59:d3:e5:37:03:23:3d:7d:28:82:4b:6d:68:e0:97:
4d:1c:8f:24:75:36:fc:59:10:5f:5c:cc:43:93:fa:
96:a2:ac:28:a2:c9:f0:4a:0c:89:be:3c:17:f3:14:
30:f8:d2:49:e4:44:f9:11:5d:bd:3a:88:1e:c7:e8:
ff:e2:88:62:71:08:de:dc:22:76:c2:65:7a:27:1e:
f6:ee:b7:37:8c:a1:bd:8e:3c:1b:55:06:c9:9c:0d:
b4:58:ec:8d:ea:61:bc:eb:8f:f8:d6:18:ca:91:b5:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:24:7D:5B:83:00:E5:F1:28:1B:D3:51:59:FF:44:FB:7D:8C:6B:94
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.84.0/24
87.237.86.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c1:65:d7:ff:23:b3:9e:d5:bb:a6:8b:09:ba:1b:e6:31:fc:
3f:c2:48:6e:d4:26:51:0e:60:65:bc:0d:2b:60:ca:8a:b8:53:
59:18:cf:21:9c:0f:e1:65:06:14:5d:de:ab:d7:23:82:ef:cd:
55:00:a5:a8:2d:7e:67:db:6e:8c:48:56:ff:3a:34:75:df:11:
72:ff:f7:9e:32:f5:0d:4b:1f:77:20:18:c3:f3:c7:a0:91:c2:
8b:5b:4d:1a:79:d1:a0:3a:d2:71:72:fa:9b:d7:6e:4a:9c:93:
84:6e:33:a9:06:f7:a0:8c:ff:70:6d:a8:c5:0e:04:7b:c7:95:
12:f6:0d:87:eb:d9:f4:9f:af:27:29:e8:87:28:65:61:11:35:
64:57:27:5a:07:95:08:59:81:57:e6:a4:fd:c1:8f:da:51:f3:
da:ea:cc:2b:fe:ae:4c:fe:e7:45:0c:09:d9:62:15:37:05:2d:
bc:a3:bb:5d:37:aa:e6:1e:46:8e:6a:80:2b:56:ce:29:a8:58:
9c:a9:ff:07:dd:b9:ce:6e:e3:be:cf:7b:07:c0:7a:47:4e:5b:
6e:9f:25:df:d9:cf:ff:b1:3a:32:21:01:b5:fc:12:88:a2:ff:
3d:c6:4e:c6:b1:e3:47:a8:fd:e5:82:96:0b:ed:ea:8a:25:94:
da:6b:1a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:24 2025 by rpki-client