Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/2_z48hJvW9cSrimqDQBgMrVpEQs.roa
File: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (raw, json)
Hash identifier: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=
Subject key identifier: DB:FC:F8:F2:12:6F:5B:D7:12:AE:29:AA:0D:00:60:32:B5:69:11:0B
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B60D1DC7B2885DD94A7A5B09DEC4A
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/2_z48hJvW9cSrimqDQBgMrVpEQs.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199191
IP address blocks: 87.246.27.0/24 maxlen: 24
87.246.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:60:d1:dc:7b:28:85:dd:94:a7:a5:b0:9d:ec:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbfcf8f2126f5bd712ae29aa0d006032b569110b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:b1:15:dd:c4:83:d2:0d:b3:d1:26:80:87:
8d:7f:d9:18:ce:4a:67:50:6d:2d:82:1d:13:b2:e2:
5d:13:20:3e:1f:b8:7d:ac:db:59:6f:7d:d4:80:ff:
cc:8a:ff:1a:2e:72:e4:f1:95:db:1c:df:d0:08:57:
f8:39:32:2c:0f:14:51:1f:57:51:a1:4d:a5:5d:d6:
d0:34:b0:d2:cf:c0:dd:b5:da:8d:07:1d:67:fa:02:
0a:5d:1d:2f:63:43:75:1f:2a:ee:fe:8a:a3:e3:8b:
65:85:8c:f1:ae:35:57:89:79:b2:12:45:63:42:be:
01:20:3e:21:75:27:c8:03:e3:05:23:23:82:46:64:
fd:73:37:87:c4:41:3e:d7:a2:b1:f7:54:74:00:78:
62:6a:b0:33:0f:b2:bb:b1:54:db:76:87:a5:eb:0f:
e3:7b:01:a9:cc:46:5d:aa:6f:35:72:8c:85:f8:eb:
36:d5:2a:06:9e:d2:37:78:bc:6a:c0:18:f9:97:7a:
08:30:e7:09:a0:e4:3d:26:af:5a:4c:ea:06:d8:ed:
a8:18:f9:76:a0:f1:7f:ff:8c:c0:a3:a6:41:fa:ea:
de:8c:65:fb:c0:43:1e:31:52:f5:bf:fe:ea:17:e9:
c9:04:d5:fc:d8:ad:3e:2f:ef:2a:29:bf:d6:e0:b6:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FC:F8:F2:12:6F:5B:D7:12:AE:29:AA:0D:00:60:32:B5:69:11:0B
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/2_z48hJvW9cSrimqDQBgMrVpEQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.27.0/24
87.246.32.0/24
Signature Algorithm: sha256WithRSAEncryption
41:31:72:bb:c3:46:6f:dc:30:c1:48:22:ec:be:db:b0:94:4f:
ec:ac:5b:7c:43:02:ec:57:07:a9:47:b5:34:f1:0d:63:7c:0b:
1d:6c:7e:ae:05:9c:35:af:84:d5:23:9d:b6:03:85:dd:a8:6e:
16:17:80:99:36:d9:04:7b:39:af:b0:f3:71:81:4d:2e:f1:c0:
4b:e7:45:f9:82:85:4f:dc:db:13:66:f1:c8:1c:6f:7e:8b:85:
1d:b8:b5:61:dd:5d:ed:62:5a:de:87:f0:bc:04:0c:11:01:42:
52:ee:e9:9f:c1:31:79:16:49:42:e3:26:90:e8:da:b1:f9:a3:
5c:55:15:43:a6:08:42:e0:eb:eb:2d:bf:44:38:57:35:ef:07:
26:cf:ff:3f:d0:4b:6a:19:b6:43:2c:28:f8:f2:c0:5e:e8:9a:
ce:0a:a3:1b:0e:74:f0:9a:bc:ac:0c:a7:35:d1:6f:a9:e5:7e:
57:2d:94:ac:b5:62:0f:30:38:1a:f1:03:ff:25:78:f6:e9:c4:
3c:cd:56:12:dc:2d:b7:ae:70:08:1a:35:91:b8:97:5b:b0:9b:
c7:75:ce:32:a3:f2:c1:20:2f:85:42:70:1c:e3:a9:94:ab:a0:
a1:95:01:36:73:6c:fc:dc:58:ad:c1:cc:f0:5d:61:f5:d2:d3:
d8:6d:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:22 2025 by rpki-client