Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/3dzGYV2Fu3pxUBMyRSxl9yDzMI4.roa
File: 3dzGYV2Fu3pxUBMyRSxl9yDzMI4.roa (raw, json)
Hash identifier: m8b7ASih4Bm4w1ti2JPBYaXH/WnryaqSYblAO/qUc24=
Subject key identifier: DD:DC:C6:61:5D:85:BB:7A:71:50:13:32:45:2C:65:F7:20:F3:30:8E
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 01857169AA580827E784EBA0A84D99888EFF
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/3dzGYV2Fu3pxUBMyRSxl9yDzMI4.roa
Signing time: Mon 02 Jan 2023 07:37:08 +0000
ROA not before: Mon 02 Jan 2023 07:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 87.238.140.0/24 maxlen: 24
87.238.140.0/22 maxlen: 24
2a06:56c1::/32 maxlen: 48
2a06:56c1::/40 maxlen: 48
2a06:56c2::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:aa:58:08:27:e7:84:eb:a0:a8:4d:99:88:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 2 07:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dddcc6615d85bb7a71501332452c65f720f3308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:01:0b:7a:fb:84:84:91:b3:89:c6:89:10:
9d:6c:6f:61:ec:ec:ee:88:f7:1c:e8:f8:e5:b4:e0:
b9:66:30:e9:96:b9:00:5f:8f:dc:12:80:6e:cd:06:
02:58:4e:3c:e7:34:9a:16:34:92:de:43:73:95:b6:
81:5a:34:1d:4f:0b:ee:2c:5c:cd:0f:1b:1c:87:bc:
87:38:0a:81:f5:28:30:e0:6b:73:a9:35:e7:8b:eb:
fd:3e:80:01:b7:ca:cf:20:8d:19:4d:1a:d8:ed:98:
28:26:9e:2d:d6:c7:13:5e:23:72:dd:56:ec:4f:00:
5c:45:b8:26:68:5e:e8:f7:0a:7f:d8:ff:ed:5a:65:
6b:c3:bf:ca:07:b4:69:bc:63:ba:62:3b:6a:15:2b:
de:75:22:29:9c:b3:0a:76:f0:d1:a5:64:f8:ae:46:
fb:cc:42:6a:e1:1e:e8:03:67:12:f4:c4:6f:a8:ea:
0e:71:9e:6d:58:ea:5f:6e:cd:51:cb:1e:65:d5:c9:
ac:66:a4:35:b0:21:af:b0:bd:bd:1e:3f:06:69:e2:
0c:d1:df:c2:1f:e5:5c:13:be:ca:94:51:08:26:c9:
35:1c:a2:83:ed:1c:4f:ed:2e:ae:48:7f:ea:01:c0:
c5:8c:f0:50:af:e2:f9:50:56:99:3c:a0:d0:ed:1a:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:C6:61:5D:85:BB:7A:71:50:13:32:45:2C:65:F7:20:F3:30:8E
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/3dzGYV2Fu3pxUBMyRSxl9yDzMI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.140.0/22
IPv6:
2a06:56c1::-2a06:56c2:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:43:8c:bd:4a:62:6e:56:2d:1b:0d:bb:7f:24:87:9c:cc:4f:
6c:62:a6:a4:59:50:ed:d6:41:cc:b5:48:aa:ce:af:a4:49:f3:
fa:f6:24:ac:4d:81:e3:27:52:a3:43:07:d5:86:54:7a:8f:6a:
f8:f9:45:f4:2e:68:aa:19:89:d1:6e:37:5a:96:57:f7:d7:ce:
17:f1:1d:e1:41:e9:c4:41:3f:af:06:f7:3e:25:89:31:56:8e:
54:1b:c5:e7:c5:bc:38:e1:dc:9f:82:dd:92:20:44:0c:2f:d3:
ec:19:73:ed:7f:33:06:16:f5:c6:62:d7:33:2a:ac:fc:38:c7:
9c:58:c5:20:c3:40:0e:a6:d1:43:b8:a1:d4:a0:31:8e:f2:b5:
eb:6e:cf:ba:12:52:44:be:2e:c8:65:1d:79:1e:6f:3c:94:53:
b0:af:f0:cf:38:35:b6:c9:ab:d3:88:66:77:45:77:a8:89:78:
e3:e3:0d:65:71:1a:4e:f7:ae:2a:bf:35:27:01:34:98:0a:5f:
0d:8f:41:ad:cb:82:74:dc:9e:4b:5c:6d:8b:5b:c1:cc:cd:81:
8d:e2:2f:bd:a4:25:a8:ba:e9:0e:c7:f6:6f:72:94:55:c6:5b:
e1:c5:c9:30:c2:42:83:e6:d5:8a:32:4e:35:7a:3b:7a:87:df:
8d:91:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:23 2025 by rpki-client