Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/23FE1oy_BAZmJkd81HCsu1MHa4M.roa
File: 23FE1oy_BAZmJkd81HCsu1MHa4M.roa (raw, json)
Hash identifier: XgMSku4Hr0QiLLVlfP0P+OjcCWijIwZIMflI7dpCQf8=
Subject key identifier: DB:71:44:D6:8C:BF:04:06:66:26:47:7C:D4:70:AC:BB:53:07:6B:83
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0194221FAA731D0C078C5205F822BE9BD3CF
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/23FE1oy_BAZmJkd81HCsu1MHa4M.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 87.238.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:aa:73:1d:0c:07:8c:52:05:f8:22:be:9b:d3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db7144d68cbf04066626477cd470acbb53076b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:40:8d:21:27:9a:f3:d1:de:fd:dc:41:65:
a8:37:d4:4e:ea:7c:ec:2b:84:e6:bb:ac:c7:ce:55:
df:74:48:da:62:9d:4c:22:ff:c0:6a:76:72:64:86:
7e:73:0f:62:87:a0:d6:68:f0:57:fc:ca:a3:43:16:
9d:8d:ee:9b:18:de:1e:84:d6:19:ae:3f:b6:4f:ed:
d4:c6:6c:e4:52:84:1b:29:22:ac:91:d7:66:31:26:
47:52:1a:40:19:71:a0:56:c9:11:49:fb:b5:38:cb:
6f:b2:e3:d6:f9:18:0c:44:da:d0:40:b5:eb:3e:77:
43:1c:d4:c9:25:e5:7a:af:c5:74:4f:06:13:8d:1e:
51:c5:34:46:53:79:d4:aa:fb:97:84:a2:f1:5b:52:
6f:7d:c4:92:63:1d:0e:6b:8e:89:b8:14:bf:43:f6:
75:86:3d:aa:8c:d9:37:c2:9c:a3:62:75:44:20:f9:
2a:dd:3f:29:3f:10:65:c6:06:60:96:94:69:45:bc:
b5:af:82:b6:b7:bf:4c:5c:40:7c:d0:b5:b1:14:70:
f1:0b:45:9b:f6:0e:ef:05:d4:de:37:6b:00:bf:3f:
26:04:58:1c:21:5d:3b:53:9c:2a:fd:77:1d:bb:fa:
19:9a:3e:8b:5f:d4:1e:b1:3c:fb:52:66:74:e3:6e:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:71:44:D6:8C:BF:04:06:66:26:47:7C:D4:70:AC:BB:53:07:6B:83
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/23FE1oy_BAZmJkd81HCsu1MHa4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e3:43:1a:28:ab:cc:53:a5:4b:20:4d:e0:2b:03:6c:31:49:
ce:aa:a7:dd:57:30:e6:03:f7:b5:d5:75:b3:d4:34:d0:ce:6f:
25:d9:e3:de:21:92:0d:e3:b0:48:3a:d1:57:15:30:83:21:1c:
19:e8:b6:64:33:c1:53:da:0c:f6:0d:83:a0:7f:04:68:72:0b:
f5:64:50:78:2d:2e:29:f8:f8:94:ff:e1:a2:5b:0e:4d:20:c2:
8e:b7:3f:99:d7:ac:e4:c5:e4:e9:fd:32:ba:c0:d4:2f:d6:70:
ed:f8:7b:7b:8b:39:1e:ba:20:ac:31:a2:98:30:5a:10:b4:66:
e1:43:43:8d:ca:da:01:37:51:fd:65:ee:09:d0:1a:40:a8:8e:
37:a3:b2:95:05:1b:db:65:2c:77:ab:30:0a:4a:e3:dd:2a:65:
f0:55:ca:6d:aa:1c:82:37:fa:18:c5:03:89:63:dc:8c:ff:42:
3a:3c:d4:8b:ae:eb:1c:ce:73:54:b4:a5:d8:a3:4d:f8:e8:6d:
7e:90:03:2c:1f:dd:37:89:9c:f6:ca:da:2f:c5:66:f1:15:e7:
3b:40:83:d7:df:41:aa:73:39:07:09:68:4c:54:e8:b0:75:ca:
9d:45:31:e7:f4:62:f4:86:4d:d4:9b:49:4d:1c:df:8e:fc:28:
2b:07:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:20 2025 by rpki-client