Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/E0jD3zaQKNcY4OwTowy1qkc7UII.roa
File: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (raw, json)
Hash identifier: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=
Subject key identifier: 13:48:C3:DF:36:90:28:D7:18:E0:EC:13:A3:0C:B5:AA:47:3B:50:82
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B56E9E2E300CFE3D7298F8B7E5E4A
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/E0jD3zaQKNcY4OwTowy1qkc7UII.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 87.246.8.0/24 maxlen: 24
87.246.9.0/24 maxlen: 24
87.246.10.0/24 maxlen: 24
87.246.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:56:e9:e2:e3:00:cf:e3:d7:29:8f:8b:7e:5e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1348c3df369028d718e0ec13a30cb5aa473b5082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:32:e6:75:a9:1a:d1:b2:64:ac:5e:56:0c:
33:98:e9:09:e2:7b:b4:0f:02:76:da:08:d2:9e:c4:
c9:58:3b:a5:fb:0a:12:aa:e4:99:8c:07:98:e1:ed:
ec:57:02:51:1d:89:7c:4e:1b:b4:3d:fc:33:72:ec:
47:32:16:89:31:ea:be:6e:29:19:47:b2:f3:e8:d3:
fe:01:eb:4e:18:58:ab:66:6e:a5:d8:33:22:02:70:
82:25:2f:7d:c9:ad:d1:6d:13:c5:19:e8:30:8e:be:
06:8b:24:9d:99:48:65:4f:e1:06:da:f8:c0:08:80:
79:b2:53:69:ae:ff:5c:31:02:9b:8a:53:56:1f:74:
60:8a:26:c6:8c:98:3b:fa:ce:db:ef:47:60:c5:8c:
24:e2:a7:de:34:b4:a0:1f:32:b7:36:6c:ec:aa:0e:
31:8b:4d:19:0c:6b:8d:a7:ad:a6:60:89:bb:53:1f:
9d:de:33:40:1c:15:46:bb:07:a7:81:f7:9f:b5:10:
d3:bf:b8:37:86:f4:b7:d0:bd:68:03:c8:8e:d8:fc:
4d:21:f0:19:28:23:36:41:bd:54:3d:5c:8b:f9:36:
8d:0e:51:2e:92:f1:ca:4b:6c:5c:f6:1f:a9:c7:5c:
dc:54:6d:ab:2a:15:7d:c9:a8:04:19:61:c4:f2:cf:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:48:C3:DF:36:90:28:D7:18:E0:EC:13:A3:0C:B5:AA:47:3B:50:82
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/E0jD3zaQKNcY4OwTowy1qkc7UII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.8.0/22
Signature Algorithm: sha256WithRSAEncryption
31:fc:23:30:99:4c:3b:46:6b:7e:05:bb:10:1f:7a:b8:65:e9:
e7:58:e2:67:70:8e:5d:09:e3:d9:b8:6e:a5:34:f5:ea:c2:df:
c9:f1:39:06:69:78:7f:3b:89:6b:15:bc:43:08:01:e7:6a:68:
19:94:e4:bf:67:ff:b0:4f:c8:72:b1:60:d3:cf:4c:cb:b6:ea:
fb:46:0e:9c:95:29:92:db:58:84:95:73:ca:d4:74:af:b0:b5:
d9:bb:e8:ea:55:29:de:76:3c:ad:dd:d4:9e:af:6d:2a:3c:5e:
e8:3d:ba:44:67:c4:f2:20:d8:d6:3b:6a:19:cc:bc:84:0f:d8:
b5:1e:76:c3:5d:bd:e8:91:e7:34:a6:de:97:7a:c2:a4:6b:b7:
54:6e:38:18:c2:f9:62:e1:6a:67:03:06:a0:32:8d:6f:32:1a:
fc:6e:af:0d:d3:9d:2f:6b:b0:25:22:82:c5:08:7c:83:fe:8e:
eb:35:97:40:9c:a6:9e:c7:1b:dc:f3:ec:c4:5e:07:83:ac:76:
96:f7:a8:08:bb:31:8f:16:8a:88:19:c4:f6:3f:8a:ce:73:c0:
9e:77:d8:ad:2e:70:67:43:b1:8e:30:44:a7:88:65:9c:38:2d:
7e:fc:ad:73:d6:50:58:3a:74:12:84:d3:ef:2b:f4:95:56:35:
50:88:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:19:01 2025 by rpki-client