Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/t6StEaWnLoumzmRC7W_1uRzyt3M.roa
File: t6StEaWnLoumzmRC7W_1uRzyt3M.roa (raw, json)
Hash identifier: 7euynLbOtDikn3nhpWGoBQ7LeWzX6L0xNZZA3gqGYgI=
Subject key identifier: B7:A4:AD:11:A5:A7:2E:8B:A6:CE:64:42:ED:6F:F5:B9:1C:F2:B7:73
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 01942521DBC62138D459ABB944D5B6DB1108
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/t6StEaWnLoumzmRC7W_1uRzyt3M.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 87.236.37.0/24 maxlen: 24
2a12:b2c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:db:c6:21:38:d4:59:ab:b9:44:d5:b6:db:11:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7a4ad11a5a72e8ba6ce6442ed6ff5b91cf2b773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:d5:93:5d:f4:02:7e:d0:fa:c8:b5:7d:f1:
d6:50:73:2c:46:69:81:d9:3f:6c:21:fc:31:a4:9b:
41:8b:2a:aa:5c:b2:77:eb:1a:b1:25:c7:c0:1f:18:
36:40:f7:5f:cb:6d:49:58:3c:94:53:dc:d2:21:f2:
2c:4f:77:5d:53:68:b1:b6:45:51:2d:fd:5d:e9:4d:
45:a3:73:4d:8c:78:65:9b:74:c8:6c:fa:2a:3d:a2:
a3:e2:80:ca:ef:0d:c6:01:b8:13:6a:fd:bf:21:d5:
52:49:8b:38:2f:f9:a7:2d:0b:74:11:70:9f:ac:c0:
19:c2:b6:28:54:56:e1:62:24:3c:d5:17:e9:4f:0b:
d8:42:3a:8c:34:95:f9:29:0b:7f:2c:56:24:20:69:
a0:51:d5:c3:e1:1c:d4:12:6e:b6:04:d9:d5:41:62:
96:7e:8e:30:7b:1f:7e:d3:04:e1:d5:ef:cc:4c:f4:
18:79:fb:1f:81:8b:a3:c7:2f:27:f4:0e:b8:a5:84:
86:d0:72:d2:84:75:31:91:a4:6e:70:93:4c:5d:01:
7e:dd:f1:f1:67:43:ee:2b:4d:18:e0:19:db:96:f2:
63:ba:0b:09:b0:97:d2:0c:e9:4f:3b:af:09:17:e9:
83:9e:bf:aa:04:d4:0c:95:67:df:9d:c8:4a:15:fa:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:AD:11:A5:A7:2E:8B:A6:CE:64:42:ED:6F:F5:B9:1C:F2:B7:73
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/t6StEaWnLoumzmRC7W_1uRzyt3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.37.0/24
IPv6:
2a12:b2c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
92:05:2f:7c:06:e5:33:d2:4d:9b:9d:b4:4b:11:10:f0:a5:d9:
f8:59:65:e1:36:c1:9d:9d:9f:c7:52:9f:1f:a2:8e:7a:e0:08:
23:79:f0:79:b9:a5:a9:5a:36:2f:d1:f8:c7:9e:33:f1:77:0a:
90:8b:4e:c3:2c:33:b5:99:4a:b2:6a:8f:e8:11:cc:51:d0:84:
29:d0:df:d2:d2:b7:05:00:b0:87:e4:e0:54:c3:8d:e8:47:72:
22:d9:38:b5:09:25:60:ea:ea:21:e2:71:f2:77:8f:5e:4f:a9:
ad:05:a6:78:41:17:be:c5:a9:4d:0e:7e:fe:1f:00:b7:07:9e:
97:1d:e9:1e:cd:04:f7:8a:bc:9d:b5:f8:2f:33:b2:da:81:ea:
60:d6:02:c1:e0:1e:e7:b1:69:7b:a5:98:5f:94:fc:13:63:d8:
39:e6:f2:47:26:09:57:71:6f:69:3e:ee:d1:ad:1f:d0:f8:cc:
b7:fa:d8:54:69:d8:28:ef:a0:48:59:a6:8a:1f:04:17:83:d9:
a3:57:14:8d:74:3a:05:12:63:ab:24:92:93:6d:31:e2:22:fc:
0d:e1:ad:4f:81:15:57:7d:19:ce:92:a6:35:f2:9b:66:32:8d:
0b:de:c7:17:f1:c7:e9:dd:b6:c1:92:1e:a8:f3:5f:c8:47:ea:
16:b7:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:48:49 2025 by rpki-client