Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/B9HvEWurx9L9P9Dq6ClJb8XAu0c.roa
File: B9HvEWurx9L9P9Dq6ClJb8XAu0c.roa (raw, json)
Hash identifier: AFXFGFpSRd+PdRwQszutkw82mKGDZyVx/mcDQwz3fRM=
Subject key identifier: 07:D1:EF:11:6B:AB:C7:D2:FD:3F:D0:EA:E8:29:49:6F:C5:C0:BB:47
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 04930CDD
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/B9HvEWurx9L9P9Dq6ClJb8XAu0c.roa
Signing time: Sat 01 Jan 2022 14:06:00 +0000
ROA not before: Sat 01 Jan 2022 14:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 87.237.84.0/24 maxlen: 24
87.237.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76745949 (0x4930cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Jan 1 14:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07d1ef116babc7d2fd3fd0eae829496fc5c0bb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:14:bd:6f:df:80:7f:0a:51:5f:90:19:13:7e:
12:cd:d4:66:f6:85:be:89:63:9c:f4:5e:c0:e2:2e:
7d:09:db:02:2a:88:4d:95:a1:bb:74:1d:c2:75:63:
c0:e6:69:43:d5:c3:64:5d:5d:25:26:73:95:32:de:
a1:bc:02:75:a9:eb:c5:99:24:33:42:fb:72:1f:d5:
53:9c:ce:16:df:70:de:27:a6:8a:21:c8:fe:0f:20:
1b:13:be:77:c2:f4:3b:a5:12:ef:17:dc:bb:57:ba:
49:1e:4b:2d:d8:5e:c6:9c:34:6a:be:9c:99:17:a2:
c9:47:8d:94:ac:fc:34:06:f0:ca:94:25:f1:a6:4b:
d9:75:e1:9b:10:3c:12:49:6e:20:e0:a4:65:d2:c7:
5f:df:51:28:76:9b:c4:3f:17:ba:a5:22:ab:d9:81:
10:08:ec:cc:7d:19:11:a5:cc:94:8f:8e:ab:b1:45:
97:68:46:dd:65:d7:62:53:8c:cb:a0:67:52:3d:15:
02:fa:bc:e0:5d:5d:0a:a8:a4:22:a3:30:bb:2c:c5:
49:fc:7d:15:84:e3:5a:4c:09:51:05:7a:30:70:d8:
e3:fb:c6:cf:fe:54:f8:7d:e7:39:1a:de:33:94:84:
19:ee:d8:a0:ed:ee:fd:ce:2b:7c:28:5c:7e:9e:cb:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D1:EF:11:6B:AB:C7:D2:FD:3F:D0:EA:E8:29:49:6F:C5:C0:BB:47
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/B9HvEWurx9L9P9Dq6ClJb8XAu0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.84.0/24
87.237.86.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:05:69:3d:2a:c1:ca:a1:76:55:39:28:b4:58:36:dc:10:01:
8e:98:b6:03:17:ef:fe:e9:d5:27:16:f8:a0:1c:89:17:21:09:
f5:f8:25:f5:38:d1:d8:3f:cc:6f:ae:ef:9b:9e:5a:d6:a8:8d:
79:45:69:95:a8:6b:45:8f:ef:2c:d3:48:41:1c:5d:ba:a2:62:
e1:26:8b:b8:59:71:c9:ef:1b:ea:36:da:88:b5:24:75:aa:81:
09:c2:c3:7c:b5:c7:47:e6:5f:9d:3c:45:d6:5f:19:05:6a:fb:
09:bd:a1:de:ec:29:91:1b:47:19:65:87:15:3d:5e:7d:36:60:
47:01:d2:d1:1e:a1:fb:ce:37:9d:0b:12:84:ca:a0:8d:4d:12:
dc:c2:3c:7a:c1:89:06:4f:b8:7d:bd:f1:14:33:32:c6:24:b3:
93:94:c5:bc:24:a2:80:a2:fc:e2:fb:8a:b3:20:65:e9:e5:59:
17:c6:fa:2b:e7:6a:0e:c0:15:e5:69:a1:21:b9:19:93:f6:02:
29:0c:83:fe:ac:47:ac:03:74:ad:5c:b5:44:88:52:7a:8e:81:
36:a1:19:60:a0:41:c9:8e:2c:a4:12:4b:c8:90:c3:8a:ad:db:
0b:7c:fa:7b:96:a7:0a:ee:5f:4a:6c:92:4d:06:84:6b:cf:2f:
e9:58:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:48 2025 by rpki-client