Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/8o-Xtz22wK0aqcxTR7JaE19wWYQ.roa
File: 8o-Xtz22wK0aqcxTR7JaE19wWYQ.roa (raw, json)
Hash identifier: +HXfCxO8q1Z50yqNMfU4IjvWQJ1OZF4ZJr2oEPLmqm8=
Subject key identifier: F2:8F:97:B7:3D:B6:C0:AD:1A:A9:CC:53:47:B2:5A:13:5F:70:59:84
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D78051A1E9F9ACA4799C98703CD8DE
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/8o-Xtz22wK0aqcxTR7JaE19wWYQ.roa
Signing time: Wed 01 Jan 2025 21:48:32 +0000
ROA not before: Wed 01 Jan 2025 21:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41376
IP address blocks: 87.246.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:80:51:a1:e9:f9:ac:a4:79:9c:98:70:3c:d8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f28f97b73db6c0ad1aa9cc5347b25a135f705984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:d4:93:84:63:88:30:76:20:a4:82:4e:10:
8b:83:aa:a7:26:57:d8:11:f5:d9:7a:71:aa:4c:a3:
5b:bb:a5:ae:1a:67:0f:ec:dc:28:89:99:5f:04:0b:
98:e1:10:a0:98:ad:d7:7a:f2:60:83:6f:c0:90:e5:
83:ef:76:7a:bc:df:c1:65:bd:65:d6:de:9b:3c:d9:
77:55:6f:c3:1c:43:98:18:d5:c0:7b:f7:9b:51:e2:
27:15:b3:99:37:b1:83:65:da:d1:62:ff:9b:2a:49:
f7:60:78:3b:99:47:1a:97:6a:d2:6b:aa:af:6f:1e:
ec:99:41:e6:c2:e7:c0:cd:e6:29:fa:17:f1:06:3e:
59:22:7f:ad:cb:d3:44:95:70:98:6d:b7:a7:d7:10:
84:22:ff:60:92:28:18:0a:74:55:df:f3:ab:d2:ef:
c0:7d:5e:4c:29:bc:72:86:89:58:8d:54:60:31:95:
db:31:44:1f:1d:28:d4:a1:7c:74:ce:2c:06:79:03:
6a:88:85:57:56:00:b9:22:69:f3:5a:23:ca:51:1d:
06:fd:47:6e:9e:c5:fc:38:74:4f:11:ef:79:30:59:
35:60:79:ee:f2:b3:8b:27:1d:91:00:82:03:3e:ba:
92:55:1a:f5:dc:59:d4:ce:79:60:94:2d:b9:21:11:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8F:97:B7:3D:B6:C0:AD:1A:A9:CC:53:47:B2:5A:13:5F:70:59:84
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/8o-Xtz22wK0aqcxTR7JaE19wWYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a0:6c:0e:e3:ec:3e:4e:31:38:96:27:e2:db:42:da:81:77:
87:c9:ce:0b:d3:63:9f:95:8e:bc:77:5f:a0:f5:97:ab:55:3b:
0b:51:b6:a6:be:5c:2b:68:0b:7a:75:93:8c:99:79:7e:2d:11:
e6:3d:1d:a8:48:12:38:31:57:ad:5f:50:8b:9f:f3:57:28:02:
32:0e:6d:b9:e6:dc:a2:28:64:2e:54:65:8b:15:ee:61:47:5d:
a9:52:e1:27:ed:dc:f4:51:89:33:ab:95:29:d3:00:51:cb:46:
7d:3b:f7:44:ce:16:69:0a:1a:d4:bf:b5:66:00:3c:bb:af:98:
1d:68:81:7f:35:87:be:e0:ac:5d:d1:fa:62:f5:84:9a:eb:46:
d9:40:be:8e:00:d9:a8:58:7b:fd:16:01:40:c1:b6:60:df:ea:
09:e7:ac:16:7d:4a:67:3c:38:af:6a:cf:5a:74:4b:d1:cc:04:
86:ae:a5:24:9a:5e:22:cc:c0:67:ad:2f:69:61:67:1a:c8:92:
0a:f3:f7:8d:ba:de:9c:d3:26:04:d9:73:33:49:0a:c5:03:6f:
95:9f:5e:a0:87:3f:b5:49:60:5e:fc:91:df:39:5b:fb:12:97:
77:7f:aa:5c:27:d5:8a:f6:05:d5:9e:fc:2a:f8:da:bc:7f:21:
b9:c7:5d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:57 2025 by rpki-client