Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/4e5pIyH-5Elgfcqbgv__FOG63l8.roa
File: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (raw, json)
Hash identifier: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=
Subject key identifier: E1:EE:69:23:21:FE:E4:49:60:7D:CA:9B:82:FF:FF:14:E1:BA:DE:5F
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5720F6E87D4667A18E0AB2831BF2
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/4e5pIyH-5Elgfcqbgv__FOG63l8.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 87.246.16.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:57:20:f6:e8:7d:46:67:a1:8e:0a:b2:83:1b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1ee692321fee449607dca9b82ffff14e1bade5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:4c:a5:53:26:55:eb:e4:6e:0f:e0:01:c4:
45:cb:cf:8d:b2:74:fe:8d:58:4f:6c:9c:e6:37:3d:
43:45:e3:93:20:16:52:a8:47:60:ab:b1:85:0e:7b:
6a:5a:91:8c:d7:3b:4c:ec:16:53:9e:39:b9:c5:27:
59:1f:79:69:99:f4:6e:31:14:24:11:9c:e3:bd:06:
a5:26:99:41:da:b0:dc:af:7f:a8:0f:5b:ab:f0:95:
a6:81:f9:e7:46:bb:7a:5b:3e:d4:fd:48:6f:9a:58:
9f:14:f0:33:d6:04:02:2f:10:34:f8:13:67:6f:7e:
e0:00:bf:5d:10:90:e6:6f:51:69:44:98:2a:07:91:
c2:8c:c1:6f:72:8d:6e:1d:d9:56:02:e6:89:de:c5:
4e:ba:3f:58:23:fb:21:c2:61:a0:b6:a6:cd:f6:34:
9a:9c:65:8e:ef:c5:32:d2:10:a8:c6:2b:19:c4:bc:
f2:0e:50:b9:1a:a3:7f:90:f9:52:89:2d:4f:24:45:
19:21:44:01:73:97:15:87:d3:62:46:2e:e2:e9:ea:
3f:b1:5c:56:69:11:65:bd:78:dd:6c:9d:f5:82:c8:
e3:47:0a:02:72:f2:8e:fa:a4:47:83:c1:e6:69:c1:
b0:8c:37:b7:a9:4a:d5:ad:85:1f:41:63:0f:55:af:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:69:23:21:FE:E4:49:60:7D:CA:9B:82:FF:FF:14:E1:BA:DE:5F
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/4e5pIyH-5Elgfcqbgv__FOG63l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.16.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:0a:89:0c:8b:2b:4f:15:18:9a:92:a0:d2:f8:ed:a3:53:9a:
12:15:e5:e8:42:81:61:fe:81:27:c7:4a:a0:77:e9:0d:6f:0c:
8f:29:6d:ec:05:22:2b:f4:65:18:dd:c6:6c:89:18:85:c6:5b:
d8:3e:d0:b7:fd:97:56:31:ab:61:c7:3b:77:1e:65:b6:7c:6a:
88:ec:2f:09:20:2a:0c:61:ac:9c:56:dc:7c:63:8d:38:40:3c:
87:37:8e:db:9b:8b:19:28:8f:26:b9:d6:ea:e9:41:34:4c:25:
96:da:ad:7a:03:90:e1:67:ef:f4:f8:16:d8:fb:ca:ee:dd:43:
b5:73:0f:ca:a6:cc:f1:23:cd:37:fe:c2:a1:e3:6d:cb:3f:3d:
82:f1:12:e2:83:e5:ef:1d:c8:5a:d6:36:35:b0:8f:2e:48:4e:
c5:5f:8c:6f:12:2b:b8:c4:2d:78:1b:a4:59:34:2a:69:9f:16:
da:49:a1:44:ab:dc:a9:2f:86:8d:60:39:2b:8a:52:30:03:7a:
44:c8:08:a7:7f:e3:b1:ed:84:f9:94:a9:14:62:bc:ff:f8:25:
32:58:40:ee:eb:b3:56:de:ef:d4:d3:41:0f:f3:93:1d:78:84:
a9:a2:3a:49:99:41:3f:09:d1:ee:b6:9d:e2:6f:cc:3e:da:a3:
b3:86:32:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:21:49 2025 by rpki-client