Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/uLirnnwX72a0N3OriOBn_DEyQSk.roa
File: uLirnnwX72a0N3OriOBn_DEyQSk.roa (raw, json)
Hash identifier: 6+Yqbp1RGXrWNzgrWITGoM7VyJxkBiJJi44XDI1jM7s=
Subject key identifier: B8:B8:AB:9E:7C:17:EF:66:B4:37:73:AB:88:E0:67:FC:31:32:41:29
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 019421B2184F1B5982BF9BDEDA8DC21CDA17
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/uLirnnwX72a0N3OriOBn_DEyQSk.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 87.237.84.0/24 maxlen: 24
87.237.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:18:4f:1b:59:82:bf:9b:de:da:8d:c2:1c:da:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8b8ab9e7c17ef66b43773ab88e067fc31324129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:7e:b6:56:c1:6d:01:73:0b:01:00:07:c3:
7b:ec:05:98:c6:3c:8c:d2:e3:98:fe:9f:c9:12:ba:
be:d5:a9:9f:ef:84:ed:16:a5:98:ba:25:39:af:2d:
4e:8e:fe:57:db:d2:7e:61:61:cb:43:fb:d2:2f:5c:
5e:c3:e8:d0:d8:88:7f:24:a8:28:1e:87:bb:44:ec:
22:3b:58:28:c9:c0:d9:f7:56:44:e4:64:11:bc:33:
33:c7:92:e8:b8:4e:16:06:d0:35:3d:50:64:55:fa:
d1:6f:2a:62:c4:69:67:97:5a:74:0f:84:85:ee:15:
ff:1f:91:80:ec:29:e7:02:f5:e7:24:dc:e0:a7:9b:
34:32:0e:15:6d:c0:88:ca:8c:ae:b3:9f:47:80:40:
6c:90:48:80:10:d6:d3:5f:66:20:d5:92:d8:8a:f5:
c5:d6:cd:09:d4:ca:25:14:17:49:8a:8e:d6:ed:00:
25:82:19:e0:85:74:dd:95:71:d0:1a:67:2e:6c:5f:
64:07:83:61:56:56:38:10:d4:2e:a4:b2:60:b8:1e:
88:4b:6b:34:08:ec:90:a0:ec:72:dc:9b:90:82:72:
60:85:f4:f5:f0:f4:08:91:1a:d2:79:ba:af:80:1c:
61:67:94:fd:5f:d3:29:89:25:03:32:7d:24:62:d0:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:AB:9E:7C:17:EF:66:B4:37:73:AB:88:E0:67:FC:31:32:41:29
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/uLirnnwX72a0N3OriOBn_DEyQSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.84.0/24
87.237.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:44:5d:3c:6a:2c:7b:3e:c8:f7:02:99:43:b9:66:a6:f5:b2:
7c:45:63:f0:9f:2a:82:7f:8b:4f:e3:7a:46:43:32:0c:13:67:
ec:d8:ca:6a:46:e3:09:1d:82:85:8e:70:fc:11:48:6e:97:9d:
37:53:ae:f7:14:41:77:e9:85:9e:a7:02:27:f1:1a:81:91:bc:
68:18:09:6d:18:30:e7:45:5b:54:5b:d4:9d:7e:56:7c:21:4e:
03:58:37:21:d5:ac:8b:70:78:05:74:d1:4f:fa:e5:60:a0:6b:
7b:25:12:c5:8b:f0:02:2c:a7:45:05:36:fd:ea:3d:d1:dc:c4:
eb:0c:1e:9c:33:e1:0c:b5:61:84:fc:1b:10:b0:2a:02:f9:71:
38:c1:7d:e9:fa:63:a6:6e:e5:25:06:af:b3:46:ed:e6:35:ef:
8c:a5:24:56:c2:99:5a:4e:6c:f8:31:ba:0c:b3:65:15:17:87:
79:e5:5c:41:b9:5f:ea:3c:9d:d9:a5:8d:24:03:7c:62:fb:e7:
3e:ae:82:c5:45:b8:26:5f:e1:7c:82:25:f9:24:95:f1:5c:50:
c4:dc:21:f0:75:41:bd:9b:a3:6b:47:83:f5:d3:c3:a6:72:3c:
da:c5:2e:b8:09:82:33:7f:ce:6c:9b:86:45:31:88:6c:e9:c4:
06:66:76:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:48 2025 by rpki-client