Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/BkeFXdw6YR4RKG1L5FOienqkv_g.roa
File: BkeFXdw6YR4RKG1L5FOienqkv_g.roa (raw, json)
Hash identifier: XBW9KuBhSdstDGhf5rwHqCu97WH8yMlvYoc3sSZytPs=
Subject key identifier: 06:47:85:5D:DC:3A:61:1E:11:28:6D:4B:E4:53:A2:7A:7A:A4:BF:F8
Certificate issuer: /CN=d880c00d25e5a77e7d334cedf9e0f26a2c5aa328
Certificate serial: 01856DD40D2E27237A7403F96EDE760EA4D8
Authority key identifier: D8:80:C0:0D:25:E5:A7:7E:7D:33:4C:ED:F9:E0:F2:6A:2C:5A:A3:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IDADSXlp359M0zt-eDyaixaoyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/BkeFXdw6YR4RKG1L5FOienqkv_g.roa
Signing time: Sun 01 Jan 2023 14:54:51 +0000
ROA not before: Sun 01 Jan 2023 14:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35456
IP address blocks: 87.124.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:0d:2e:27:23:7a:74:03:f9:6e:de:76:0e:a4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d880c00d25e5a77e7d334cedf9e0f26a2c5aa328
Validity
Not Before: Jan 1 14:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0647855ddc3a611e11286d4be453a27a7aa4bff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:ad:51:01:b0:62:14:5d:4f:88:c9:02:48:
41:20:99:d3:50:e9:ff:dc:49:f3:23:e7:e7:be:b7:
0b:48:b4:6a:95:2e:a5:0f:39:eb:67:80:9a:81:f2:
ea:e9:68:51:f0:71:4f:fb:71:8d:bc:8b:aa:4e:b7:
98:4c:2e:29:69:16:e0:98:ef:08:93:ac:3e:51:a6:
be:aa:0f:83:7d:9a:b1:a8:08:53:25:36:d3:ac:5b:
b0:07:e5:bd:5a:80:1b:7e:ff:76:25:a8:10:61:da:
f8:7f:36:48:7e:36:46:db:11:9c:db:2b:24:38:da:
4b:4c:e8:86:50:d4:bb:e3:fb:06:96:26:fa:9a:98:
31:9c:17:61:c4:8b:59:2e:e7:4e:d8:44:89:b2:98:
27:1f:02:d5:cd:c9:34:23:c1:26:4b:ea:f7:72:79:
80:8c:ab:57:3f:67:12:dc:18:fb:dc:ec:50:bb:34:
b1:5c:13:28:19:00:bf:94:15:d0:92:6b:5b:de:57:
eb:ce:02:b6:c5:b8:dc:9c:4b:44:11:e4:2f:16:02:
d6:19:0d:f2:9d:df:57:f8:8c:29:f4:51:8e:6e:c3:
32:06:f2:08:55:4a:76:1b:65:8e:1b:0a:ff:3d:84:
b0:98:2b:e1:5a:fe:56:6b:1d:26:e7:3a:fa:9e:6c:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:85:5D:DC:3A:61:1E:11:28:6D:4B:E4:53:A2:7A:7A:A4:BF:F8
X509v3 Authority Key Identifier:
keyid:D8:80:C0:0D:25:E5:A7:7E:7D:33:4C:ED:F9:E0:F2:6A:2C:5A:A3:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IDADSXlp359M0zt-eDyaixaoyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/BkeFXdw6YR4RKG1L5FOienqkv_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/2IDADSXlp359M0zt-eDyaixaoyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.124.0.0/17
Signature Algorithm: sha256WithRSAEncryption
13:42:36:ef:c9:f4:2b:68:64:a5:e7:cb:70:1a:e3:2e:d8:95:
24:dd:2b:a5:9e:ad:85:c9:01:8e:94:fa:49:cd:26:8e:27:3d:
b3:13:6c:09:3e:46:29:ae:f0:88:c8:7c:15:d8:26:c7:4d:d5:
d5:4e:c8:5e:16:b8:1e:8d:99:fc:a7:d3:13:b9:3a:a7:e5:18:
56:5a:37:df:9e:2e:17:b8:ef:a5:1a:6e:84:99:1a:ae:50:87:
85:1c:82:bb:ba:2c:71:a6:29:68:f4:f1:b5:b6:ec:25:1a:1a:
9b:bb:ce:b8:85:90:98:4f:f2:ad:37:16:47:c0:5e:35:8c:8f:
10:7a:90:c0:44:a7:9e:84:bc:ab:e3:33:3f:80:b5:7a:fb:b5:
50:d6:75:5d:a9:26:df:2e:27:7b:10:77:a8:22:f3:e7:5c:4d:
f1:9b:3f:20:15:8e:8b:ea:32:4d:8a:dc:40:fb:4e:08:95:6d:
72:53:66:03:11:56:2c:f3:a5:0b:b3:26:ff:09:53:e6:0e:bc:
b1:00:07:fe:11:25:a9:f2:ae:0d:49:2a:20:30:15:c2:5d:39:
1d:bd:9c:9f:25:63:e8:0d:59:41:ce:45:39:9a:1c:a6:1e:93:
c8:a9:12:e1:3c:e1:5a:84:1b:e6:5b:a4:e3:03:6d:ec:35:d2:
dd:02:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:43 2025 by rpki-client