Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/x5KUP4b7M2UneG9R4Ty3aaoRU6E.roa
File: x5KUP4b7M2UneG9R4Ty3aaoRU6E.roa (raw, json)
Hash identifier: 4r2sex74amynzwpK3bDSHVwPPeVxELbxt3yfW0ijSTo=
Subject key identifier: C7:92:94:3F:86:FB:33:65:27:78:6F:51:E1:3C:B7:69:AA:11:53:A1
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0194221FA974F3A038B47C8F889554C9BF59
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/x5KUP4b7M2UneG9R4Ty3aaoRU6E.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 87.238.140.0/22 maxlen: 24
87.238.140.0/24 maxlen: 24
2a06:56c1::/32 maxlen: 48
2a06:56c1::/40 maxlen: 48
2a06:56c2::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a9:74:f3:a0:38:b4:7c:8f:88:95:54:c9:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c792943f86fb336527786f51e13cb769aa1153a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:48:c4:9e:0c:2f:47:f1:ba:31:10:c5:14:
e7:e9:7a:eb:3c:4f:55:a5:0f:88:3c:94:6a:9e:bb:
b1:de:7d:2d:ed:99:a2:37:f0:96:59:b2:ed:b5:c0:
04:b7:44:a7:dc:91:e9:c5:36:30:39:f3:a1:64:b9:
e7:fd:d0:82:38:c0:e6:9a:58:9a:a3:06:5a:30:b2:
1f:ad:67:e3:dd:d7:f3:37:fd:f9:db:5b:48:db:a6:
c3:dc:9c:4e:9a:6e:5b:e9:a3:43:d2:6f:ba:4b:45:
d0:22:3e:af:88:46:ec:3d:0c:a8:f7:9d:28:09:da:
a2:ad:99:15:e4:2c:0c:f9:25:82:18:27:3f:63:41:
c2:4b:e1:0e:60:fe:43:b7:7f:65:bc:45:73:98:10:
d0:34:2b:04:7b:dd:19:b1:8d:9a:08:c0:22:4b:dd:
7b:9f:d2:9c:60:8f:8f:c8:ed:90:7e:88:8d:aa:9f:
5b:6e:6f:41:3b:0b:3e:72:d1:38:be:20:25:1d:12:
53:14:72:ed:4c:9d:4c:be:c9:4b:a3:e7:dd:f2:57:
fa:a9:5e:32:e9:c2:26:41:2b:67:c6:97:b1:91:08:
3c:98:f2:4a:12:4b:d6:e5:2b:0e:96:a1:ed:8f:e6:
1d:31:57:46:24:0b:25:55:a5:d3:32:55:f6:5b:db:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:94:3F:86:FB:33:65:27:78:6F:51:E1:3C:B7:69:AA:11:53:A1
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/x5KUP4b7M2UneG9R4Ty3aaoRU6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.140.0/22
IPv6:
2a06:56c1::-2a06:56c2:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7d:12:72:ed:db:c7:b7:56:52:9b:38:53:88:6a:8b:8d:cd:b6:
72:fb:3d:d9:af:c4:c5:d4:ec:8f:53:36:55:a0:13:94:d1:42:
bf:22:95:d5:3c:01:10:7d:ab:2e:21:70:f5:fd:88:2f:86:85:
34:8d:b4:8f:d2:41:c1:65:37:8a:88:2d:25:00:f2:39:2d:1e:
dd:23:ca:1b:7d:45:33:87:09:ed:bc:fc:cf:24:f7:b7:93:11:
a9:d3:f0:33:cb:04:67:18:25:b7:7c:6e:8c:6c:fe:62:77:1e:
52:db:9e:1a:b6:84:70:b3:95:e4:7a:f5:77:af:29:46:be:3c:
a5:43:eb:bc:42:b8:0c:9e:45:bf:db:c1:2b:85:03:0b:b9:ff:
1d:5f:08:18:a5:c8:16:2f:96:e6:0c:72:1d:6f:70:df:19:5c:
9a:2d:78:86:a3:12:3c:a8:c2:5c:81:32:7e:c8:7b:65:d5:ce:
ef:b6:ba:80:f3:d2:44:28:53:39:44:5d:63:4c:e0:96:51:93:
87:0f:85:43:49:04:01:8e:72:f9:1c:28:7e:72:ea:ab:88:da:
f1:6d:e2:14:d8:ec:88:11:a4:8e:5a:1a:fd:52:8b:3f:0c:67:
29:e9:19:b4:76:5c:a8:73:e5:df:1a:7c:be:3a:1a:3d:03:9a:
de:61:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:42 2025 by rpki-client