Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/87GgPRL6Ryh46r3TT4tcFMFBiXg.roa
File: 87GgPRL6Ryh46r3TT4tcFMFBiXg.roa (raw, json)
Hash identifier: fYSCe00fLniySK0GExj/bFthq02VJKcsjVTFT2vf+R0=
Subject key identifier: F3:B1:A0:3D:12:FA:47:28:78:EA:BD:D3:4F:8B:5C:14:C1:41:89:78
Certificate issuer: /CN=23accae620e9e49f1ab69a1e6979c288bc0136ba
Certificate serial: 0128225D
Authority key identifier: 23:AC:CA:E6:20:E9:E4:9F:1A:B6:9A:1E:69:79:C2:88:BC:01:36:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6zK5iDp5J8atpoeaXnCiLwBNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/87GgPRL6Ryh46r3TT4tcFMFBiXg.roa
Signing time: Sat 12 Feb 2022 22:03:35 +0000
ROA not before: Sat 12 Feb 2022 22:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 86.111.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19407453 (0x128225d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23accae620e9e49f1ab69a1e6979c288bc0136ba
Validity
Not Before: Feb 12 22:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3b1a03d12fa472878eabdd34f8b5c14c1418978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:9f:58:24:31:f8:71:4d:03:b2:ee:d0:b5:
9e:d2:14:e3:eb:b8:fd:c9:e1:66:a0:89:03:60:46:
8d:17:20:e9:f6:bc:cb:73:8c:f5:2a:86:df:11:e0:
3b:94:eb:8d:24:77:d1:5a:0a:61:9f:c6:53:38:fa:
01:3c:cd:67:74:48:92:e3:25:06:31:e2:66:f3:7b:
4e:34:95:13:3e:90:1f:f5:d8:eb:22:40:d1:8f:74:
6f:7a:f4:01:0c:7a:aa:54:e6:62:cb:74:d8:af:3c:
29:4b:2d:10:fb:77:55:2b:5e:99:f3:50:7e:73:63:
7d:9d:59:b2:78:f7:81:cf:94:7f:15:82:72:4d:2c:
9b:0f:03:26:78:70:47:44:df:5f:4a:88:2a:a7:6d:
05:cc:d2:8e:7f:82:15:81:6f:bc:24:20:b5:2c:ff:
88:93:2c:4b:5e:9b:7f:13:57:4f:6c:df:c1:db:a1:
77:35:a6:fa:94:09:1e:ed:b6:06:34:ab:c9:4f:5d:
e0:7e:1b:19:ae:02:e3:79:44:73:f0:2c:6e:29:1a:
ac:76:fe:8d:34:6e:04:cf:4b:9e:68:53:7a:dd:75:
19:49:ba:86:ac:0e:b2:b1:e3:d1:9d:b5:3f:15:86:
62:03:45:7e:a1:f2:01:9b:f2:0b:cf:0a:c4:af:d0:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B1:A0:3D:12:FA:47:28:78:EA:BD:D3:4F:8B:5C:14:C1:41:89:78
X509v3 Authority Key Identifier:
keyid:23:AC:CA:E6:20:E9:E4:9F:1A:B6:9A:1E:69:79:C2:88:BC:01:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6zK5iDp5J8atpoeaXnCiLwBNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/87GgPRL6Ryh46r3TT4tcFMFBiXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/I6zK5iDp5J8atpoeaXnCiLwBNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.226.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:52:2f:62:8d:fd:50:f8:c5:92:8e:85:f1:23:78:ff:22:9c:
e4:78:c8:82:4e:b5:16:87:c5:fc:5b:68:18:04:15:51:1d:b8:
fd:d3:c9:70:1b:fc:48:2d:3e:dc:ae:bc:ea:f2:34:b9:b4:67:
8d:50:e0:63:50:57:93:e5:c1:2b:ac:15:9f:67:1f:ad:e8:d2:
3c:a3:ea:3d:f8:74:94:f4:80:f5:77:44:b0:30:b0:d4:42:84:
4b:d5:af:c6:af:b1:9c:8a:ae:e5:12:e6:51:b3:65:76:07:bd:
86:a6:58:4e:1f:0e:0a:5f:99:34:ec:b5:74:09:ce:cd:9b:db:
e3:d5:04:cd:ad:99:56:b5:5c:5a:6e:ec:37:3b:dc:11:cb:71:
7b:00:6c:8b:64:a0:d2:8d:37:09:e5:27:da:23:2a:54:a9:3c:
36:e5:7d:af:08:c7:1e:61:70:bb:18:8f:b1:80:47:13:a6:c1:
18:13:d9:17:bb:65:c0:a1:89:4a:ee:f0:43:dc:e2:de:dc:ae:
9d:53:8b:a2:8f:64:49:0d:56:d5:b6:72:8b:40:2d:68:2a:72:
e5:80:2d:36:9d:1d:b6:7a:9c:22:99:83:99:b7:de:7e:7c:df:
4d:e5:82:5d:fb:10:b7:15:65:6d:4a:01:0f:f8:f6:36:70:cd:
17:83:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:16:53 2025 by rpki-client