Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/9PCEGLXY6xCziVFP40kVixOzsgM.roa
File: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (raw, json)
Hash identifier: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=
Subject key identifier: F4:F0:84:18:B5:D8:EB:10:B3:89:51:4F:E3:49:15:8B:13:B3:B2:03
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 0194266C19CD82D506441514338031891B70
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/9PCEGLXY6xCziVFP40kVixOzsgM.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8315
IP address blocks: 87.237.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:19:cd:82:d5:06:44:15:14:33:80:31:89:1b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4f08418b5d8eb10b389514fe349158b13b3b203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fb:a6:e2:ff:e7:71:f1:d4:9e:66:77:3e:06:
db:37:8a:dd:11:4a:fc:02:7e:6c:54:9f:71:12:a0:
a7:e3:c7:5e:11:b7:89:70:b8:08:e4:34:d7:ab:a8:
4b:7d:ab:a3:17:a6:b3:97:f8:21:84:f5:62:73:77:
4f:73:a0:cb:a0:f3:55:a6:24:58:c1:f8:02:2e:1c:
e1:b4:81:f7:7c:40:8f:eb:07:c7:df:b6:47:b4:09:
4a:94:bb:4c:34:41:90:da:61:cd:f4:63:de:61:3b:
b0:72:6b:9d:55:7e:f9:36:7f:3b:b4:c5:a1:2e:a5:
e0:ab:46:6d:f3:61:01:e1:42:f9:c2:c8:56:4d:67:
30:81:2e:87:1a:40:a4:ca:3e:9e:01:82:b5:dd:36:
b9:9b:6b:5e:eb:79:33:84:71:27:d4:8c:f2:b0:98:
d8:48:29:1c:33:ca:21:be:aa:81:0d:86:5d:6e:f7:
cf:a3:f4:7a:5c:76:c0:46:10:48:75:f4:c2:9a:b1:
cb:aa:57:85:f3:4d:ba:36:38:d0:d5:bf:cd:3c:fd:
40:47:38:e1:42:02:88:b2:37:74:2c:18:9f:f9:40:
c3:c1:1f:b3:05:c8:e4:83:3c:a2:12:75:84:7d:4a:
e0:71:14:da:24:42:20:f9:b5:a2:79:6f:cc:23:88:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:84:18:B5:D8:EB:10:B3:89:51:4F:E3:49:15:8B:13:B3:B2:03
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/9PCEGLXY6xCziVFP40kVixOzsgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.99.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b8:21:3d:52:78:ed:d3:aa:18:e5:4b:27:07:b0:e9:4b:97:
35:f0:9a:34:6a:a3:fd:26:67:a3:1a:2c:a1:7a:1b:dd:cc:05:
05:64:ce:54:ff:04:2f:b2:b8:39:b7:8f:62:20:d4:5c:a0:5a:
66:53:1a:81:2a:d0:43:ad:7c:a1:ca:3e:d2:28:4e:a7:5d:7e:
c1:a3:da:06:da:4d:87:e0:5f:2b:db:a8:12:27:f7:fb:ea:af:
d4:d6:a7:32:d3:aa:9a:9a:9f:08:12:aa:e2:93:8b:43:9c:d2:
db:e2:4b:f1:33:64:8b:b8:1b:60:f7:5f:0f:60:43:a7:a5:54:
4c:df:4a:68:3a:23:58:65:54:52:fd:29:a5:d5:be:af:fd:ae:
c8:90:7b:43:a4:cb:c9:a2:82:23:35:d0:90:b7:cd:0f:7b:b5:
af:a9:6e:d0:fc:5d:41:40:f5:b8:27:e0:fc:cc:4b:99:08:89:
ca:b1:56:14:43:a7:38:56:03:b5:a4:fe:2d:e2:96:e9:69:3f:
c6:6d:f2:55:de:14:c9:93:23:b8:3a:fb:02:4a:8e:4b:42:0a:
87:78:7e:51:db:56:85:06:73:f2:91:78:8e:be:82:df:6e:fb:
ef:42:26:20:04:90:21:1b:fd:1a:3e:82:6e:6c:e6:4a:38:0c:
d5:97:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:04 2025 by rpki-client