Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa
File: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (raw, json)
Hash identifier: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=
Subject key identifier: 44:1F:B5:17:2E:6C:0F:96:55:0C:56:6F:EF:9D:4F:4B:28:77:1F:D4
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 019426D9475BC8120F13DB48DB3BFF05D22A
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa
Signing time: Thu 02 Jan 2025 11:49:21 +0000
ROA not before: Thu 02 Jan 2025 11:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8426
IP address blocks: 87.236.245.0/24 maxlen: 24
87.236.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:47:5b:c8:12:0f:13:db:48:db:3b:ff:05:d2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jan 2 11:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=441fb5172e6c0f96550c566fef9d4f4b28771fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:16:c6:91:d3:63:65:2b:0d:24:ff:86:db:
01:27:90:1d:30:41:7a:e5:63:0b:e8:d1:b6:f6:9e:
18:07:0c:e2:fb:29:ed:a4:05:a3:eb:20:f5:41:b8:
23:b5:73:72:d7:e0:1f:84:84:d8:51:a7:3d:39:48:
e1:55:9e:74:07:dc:3f:2b:08:2b:9b:15:47:9f:62:
73:72:35:f3:f5:fb:72:10:41:c7:1a:fc:49:72:24:
68:d5:ce:80:f2:a6:30:7b:86:23:d5:67:c7:42:f5:
a8:41:76:ac:6b:7e:bc:96:eb:cc:69:bf:ce:66:c0:
1b:87:96:1f:2e:73:23:88:ce:56:e5:ad:20:f9:0c:
a3:cf:28:ee:87:48:fd:15:1a:fe:c2:a5:62:92:97:
3e:7e:22:78:93:2a:f7:32:38:cb:c8:21:3e:4f:8d:
02:ea:83:96:b1:e2:c6:a3:25:d9:9d:f4:22:77:39:
f5:19:79:7c:fb:bb:5c:88:be:a3:8b:ce:d2:84:01:
6c:6f:a9:6f:a8:fa:ed:77:21:69:22:35:d9:17:6a:
0d:64:0d:e7:98:87:15:fd:bd:39:24:15:25:50:88:
72:c9:95:02:7d:05:7b:26:42:db:54:90:58:78:fc:
59:a9:01:69:33:06:13:a8:1c:1a:56:0a:9a:65:14:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1F:B5:17:2E:6C:0F:96:55:0C:56:6F:EF:9D:4F:4B:28:77:1F:D4
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.245.0-87.236.246.255
Signature Algorithm: sha256WithRSAEncryption
07:64:26:4d:3b:a3:d1:b3:cb:0e:b6:0b:d9:87:3e:eb:44:3a:
96:ad:79:46:41:2b:c3:75:7e:d9:20:b2:85:81:75:34:40:67:
4d:dc:9e:f0:d8:16:cc:cb:86:db:7b:08:50:8d:6f:74:fe:6d:
e8:b6:74:70:9a:86:6c:4c:91:34:8d:f2:17:b8:a6:fb:e3:7a:
ee:0d:f8:84:33:98:46:13:7e:68:66:14:14:5c:58:16:ae:eb:
be:5c:71:8d:57:f2:14:f0:72:37:82:2c:7f:96:28:80:71:d1:
28:5a:4b:a8:4d:8c:eb:78:96:45:64:be:6f:52:61:9d:94:e2:
0e:35:a8:35:3d:f2:a2:3b:25:d0:45:17:06:a6:ea:59:d5:95:
ea:32:a4:74:bc:e0:12:da:ab:ed:fd:93:91:64:76:91:67:13:
03:ff:af:38:01:cf:48:7b:34:29:5d:b3:8b:f9:7d:e1:35:81:
6d:55:18:fa:19:0a:e1:48:15:5e:bc:e0:70:bd:93:20:25:17:
de:32:3f:19:25:6c:e1:f6:4d:6e:53:b5:da:0c:e2:d3:21:95:
bc:ae:61:14:15:9d:35:2d:a4:f4:53:c1:9e:9e:02:d0:3b:f9:
0c:4b:32:72:2d:d2:7a:df:97:62:8c:7d:8f:59:15:91:1a:d7:
b7:33:86:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:00 2025 by rpki-client