Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/j6ubfcYe8OmJnz0Tck2GJ_Ylx2Q.roa
File: j6ubfcYe8OmJnz0Tck2GJ_Ylx2Q.roa (raw, json)
Hash identifier: NT5Fv3izq+cgScIrT+W7BN66cmU8k9vJ1qajaYVMK2Y=
Subject key identifier: 8F:AB:9B:7D:C6:1E:F0:E9:89:9F:3D:13:72:4D:86:27:F6:25:C7:64
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 10565984
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/j6ubfcYe8OmJnz0Tck2GJ_Ylx2Q.roa
Signing time: Mon 07 Mar 2022 08:12:08 +0000
ROA not before: Mon 07 Mar 2022 08:12:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 87.238.140.0/24 maxlen: 24
87.238.140.0/22 maxlen: 24
2a06:56c1::/32 maxlen: 48
2a06:56c1::/40 maxlen: 48
2a06:56c2::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274094468 (0x10565984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Mar 7 08:12:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fab9b7dc61ef0e9899f3d13724d8627f625c764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:7e:d2:cf:ea:e6:fe:fc:90:ae:aa:05:c5:
1e:85:a0:2a:ab:ff:ee:3b:46:9c:e7:e6:c9:3f:fa:
51:75:7c:43:79:64:ce:70:d0:3d:f0:ca:79:1d:a8:
a1:c7:40:e6:31:af:c2:d1:86:0b:9e:68:32:ea:ff:
89:6f:10:51:5a:e0:e2:95:a6:31:3e:33:ff:1e:6d:
18:dc:51:d2:5c:83:f2:fd:39:d2:41:1d:c1:9a:27:
00:54:c2:f4:c9:c8:7f:db:08:a6:6d:d3:a7:a7:88:
74:77:b5:dc:96:4f:ed:37:48:33:16:3c:44:75:2b:
0e:22:cc:ec:e2:7f:a3:fd:86:05:56:40:b1:29:77:
74:1b:a0:98:12:e0:ca:bd:26:8b:a3:b2:54:41:33:
d2:44:24:6e:59:94:52:10:e8:9a:a5:32:e4:1f:3d:
63:cb:7a:26:76:af:7e:11:23:b3:f0:68:df:96:d9:
8b:70:31:27:26:e4:9d:88:e0:99:92:2a:1c:57:32:
18:c4:23:f1:12:93:bd:68:9c:bd:90:c0:c9:b3:d2:
84:dc:ca:29:4e:1d:dc:6e:c9:12:b7:3b:b0:57:9b:
48:e9:e3:cd:9b:c0:a4:87:96:d1:c2:60:8c:52:fb:
7d:2e:67:1f:9d:94:16:cf:7e:8b:91:f9:3a:62:41:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:9B:7D:C6:1E:F0:E9:89:9F:3D:13:72:4D:86:27:F6:25:C7:64
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/j6ubfcYe8OmJnz0Tck2GJ_Ylx2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.140.0/22
IPv6:
2a06:56c1::-2a06:56c2:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:10:07:7c:a1:fc:08:0d:b3:8c:b4:70:4b:f0:03:fa:fa:13:
4c:55:35:7a:a2:cd:01:23:f0:24:a8:ae:01:95:cb:6a:c8:0a:
6f:35:90:76:3f:d5:f1:23:00:4e:37:97:10:f1:7b:c1:a5:cd:
0a:00:9e:4e:ff:ba:86:10:bd:6c:2e:4c:92:50:48:93:35:1e:
30:53:7f:07:94:36:c7:37:b0:a3:c8:b8:5e:17:6a:7e:48:e6:
c1:e5:3a:a0:12:d2:bf:d9:97:9c:d9:62:3a:fe:be:8d:59:6e:
19:5f:76:97:d3:ec:03:4b:17:01:d1:02:11:e7:82:a5:f3:44:
50:62:5f:f5:cb:d2:80:10:8e:1e:0e:8c:59:60:21:1d:cf:59:
30:af:20:9b:ba:76:d3:d7:67:3e:b1:ca:7b:f7:42:0f:96:14:
5a:30:a0:03:43:1d:c5:46:a8:b2:de:b9:3f:6f:7c:7d:0c:3b:
00:83:2e:b3:25:ce:e6:0c:a5:4c:c9:a7:31:72:d8:18:4f:3d:
a0:b7:d5:91:20:f6:7f:7c:45:30:9a:f6:3b:95:dd:a7:69:19:
b5:bb:36:f6:18:f1:5a:d3:d2:3b:42:54:38:fc:30:ee:d7:6d:
fb:8a:b7:8b:21:e8:1c:b8:40:00:ca:7b:34:a7:0a:41:bb:b0:
b8:28:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:53 2025 by rpki-client