Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/1MqnWOr2XX863k_xrrBNGhpSTM8.roa
File: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (raw, json)
Hash identifier: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=
Subject key identifier: D4:CA:A7:58:EA:F6:5D:7F:3A:DE:4F:F1:AE:B0:4D:1A:1A:52:4C:CF
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019425220295AB816E7CF674BF68401B1A81
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/1MqnWOr2XX863k_xrrBNGhpSTM8.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204287
IP address blocks: 87.239.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:02:95:ab:81:6e:7c:f6:74:bf:68:40:1b:1a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4caa758eaf65d7f3ade4ff1aeb04d1a1a524ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:3b:b3:ba:09:1f:5f:e4:fa:55:92:83:f5:
59:c2:ec:2e:34:52:c3:f2:5a:e3:bf:83:64:a3:05:
c7:ed:4b:d4:98:cf:d2:b7:7a:27:6d:74:b3:cd:38:
c8:dd:3c:31:aa:fb:1a:5d:f9:e4:1a:d5:ce:89:02:
d1:39:dc:42:54:cd:ac:f6:46:0f:1f:c5:0a:df:c6:
ac:a1:3a:d5:2f:61:af:6f:e6:a6:50:8e:c9:5c:6e:
5d:e3:47:77:81:a7:bb:fe:93:6a:24:92:90:27:94:
5e:27:a9:0a:b8:dc:96:0c:d0:45:ab:61:6e:10:ae:
af:60:f8:02:46:ab:30:b5:c3:95:aa:92:96:3a:25:
0a:be:86:07:9e:0c:99:cf:1b:19:83:b9:af:7b:ad:
c7:be:c0:a5:04:62:1a:65:5d:a4:09:df:5c:44:05:
db:ed:69:68:25:f2:18:9a:f7:18:7a:cc:95:d3:46:
07:e7:99:4e:a6:f3:c5:01:68:fc:8f:b0:de:52:8c:
08:e5:ab:f4:aa:e8:04:e9:b0:d6:0f:c9:63:ff:af:
2a:42:72:c9:f4:f4:47:c0:95:10:a6:41:a8:5a:0b:
b0:e6:a7:ce:36:46:86:aa:da:48:e2:70:16:8c:2a:
d3:f5:c1:80:da:ee:77:c2:ff:3e:84:f9:cc:ef:c1:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:A7:58:EA:F6:5D:7F:3A:DE:4F:F1:AE:B0:4D:1A:1A:52:4C:CF
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/1MqnWOr2XX863k_xrrBNGhpSTM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.248.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1c:8a:42:80:34:c8:cd:96:96:c2:d0:39:42:cc:b6:01:3e:
e9:59:b0:b6:2a:d6:9b:de:05:16:9a:01:7e:75:bc:bc:e9:cb:
90:21:ef:3a:e8:f2:dd:80:dc:33:df:9d:ad:2d:47:04:f1:c1:
95:06:59:9f:85:ac:11:c0:e8:b0:8a:6e:52:2b:c7:0e:89:81:
8d:68:ea:7d:bc:a0:05:1e:e3:05:d1:29:cc:43:87:9d:96:c5:
7d:da:36:78:1a:92:f8:4e:1b:a6:25:9a:ef:09:78:f5:72:82:
a3:07:15:50:e6:0a:3c:92:fc:30:5a:0b:80:f9:23:27:fe:db:
f4:cf:c0:22:e5:4e:bd:c7:7d:72:03:2e:2f:38:58:44:41:ac:
20:af:d4:a8:c5:2f:04:1c:f6:ee:f8:c6:7c:ca:2a:86:3d:82:
28:15:82:49:d7:94:2c:5e:a6:4f:d4:1d:89:71:66:6d:f6:b5:
11:75:51:8c:bb:94:38:fb:95:5a:d7:de:83:6f:91:62:a0:cc:
b1:68:24:55:78:0e:ea:69:f1:e3:fe:2f:fd:8e:36:a4:f5:a9:
58:b2:93:81:7f:ca:cb:73:22:3e:3b:25:66:3d:02:d0:d2:54:
23:7a:7b:5c:28:75:a5:11:36:b6:70:2e:b2:41:9d:e4:d6:54:
16:a1:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:27:23 2025 by rpki-client