Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/SX0SSdlhu0d_hWz_CFux6RbsTSo.roa
File: SX0SSdlhu0d_hWz_CFux6RbsTSo.roa (raw, json)
Hash identifier: /fIScUu5FIDna/FI0o1bvvwQ+BVC4Yir+CHk4+1BpTc=
Subject key identifier: 49:7D:12:49:D9:61:BB:47:7F:85:6C:FF:08:5B:B1:E9:16:EC:4D:2A
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D78147846FC9D895D140217DFAB926
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/SX0SSdlhu0d_hWz_CFux6RbsTSo.roa
Signing time: Wed 01 Jan 2025 21:48:33 +0000
ROA not before: Wed 01 Jan 2025 21:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43482
IP address blocks: 87.110.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:81:47:84:6f:c9:d8:95:d1:40:21:7d:fa:b9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=497d1249d961bb477f856cff085bb1e916ec4d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:1a:44:ce:b0:97:ef:88:53:63:d4:3d:fd:
8a:09:01:e9:24:dc:5f:ca:89:35:df:08:5e:9d:10:
ae:c3:8e:cd:3a:59:e5:85:45:cd:99:87:b4:cf:43:
33:25:90:b4:c7:5c:51:9e:9c:d2:8f:9e:d4:be:9b:
99:e9:01:cf:10:c7:c0:a3:67:c1:77:4b:e6:a2:f3:
c6:9d:98:77:96:99:69:78:87:ce:e4:e3:57:3a:13:
73:98:00:8b:40:ce:70:7e:eb:9b:b6:8d:fc:1c:02:
fd:53:5f:cd:1a:c1:29:79:97:71:b5:62:74:04:46:
e9:57:83:68:ac:25:8a:87:f9:8c:45:d1:73:21:71:
28:f5:52:9f:fc:54:32:81:66:91:0b:7f:a5:f5:b1:
ce:2f:09:4b:4b:0a:e3:e1:c2:92:a5:48:50:55:13:
7a:55:c1:da:1a:fb:77:0e:40:ba:1f:11:9d:01:b6:
cd:85:6b:ed:ae:b4:96:f8:f6:b3:23:4a:84:10:d0:
73:2e:21:ce:ac:dc:51:77:72:ab:a2:c2:ba:64:2c:
e5:08:21:29:30:4b:af:9c:39:a9:bb:f8:59:03:4d:
49:28:3c:ea:99:35:b6:43:b1:74:cc:4f:11:fe:77:
ad:c4:50:ad:a6:04:d2:5f:e6:ba:0d:2b:9d:aa:8a:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:12:49:D9:61:BB:47:7F:85:6C:FF:08:5B:B1:E9:16:EC:4D:2A
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/SX0SSdlhu0d_hWz_CFux6RbsTSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.233.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1f:44:92:7e:ef:90:90:00:13:f8:4b:b1:4c:18:13:d0:d1:
e4:f6:bb:2f:67:5e:81:1e:ac:72:16:0c:52:1a:9e:e3:1f:81:
eb:ed:9e:ec:b2:a6:96:bb:4a:07:7f:53:fa:cc:a7:65:7a:aa:
27:bb:44:48:0e:f4:4e:8d:87:c0:bd:23:95:cf:88:66:99:83:
e8:f8:80:43:b3:98:34:87:93:2a:76:66:dc:fa:1f:89:39:45:
ec:43:66:01:a0:5c:92:32:a3:7f:80:64:66:fc:bb:fd:0f:c0:
2f:94:11:0d:ab:82:1b:e9:fa:63:13:f0:37:f0:98:5b:d6:b4:
b8:6e:cd:f9:6a:ed:c3:e6:ec:6b:ba:52:10:b9:81:30:76:19:
5e:bf:d8:2d:15:ca:92:6d:aa:a8:30:3a:9d:a8:84:75:dd:2d:
e3:de:13:46:78:d2:0c:55:b1:a6:99:46:87:a4:0d:d7:9b:b3:
bc:99:76:94:82:99:d4:60:b7:79:33:3e:6d:c4:b9:fd:cb:91:
f6:29:b1:e9:69:3f:c6:da:7a:7f:61:2e:0a:88:4c:15:9b:f0:
10:d4:0b:af:35:7e:b5:d7:0e:2a:0c:30:ba:fa:e9:ef:69:55:
0a:ee:e6:c3:cc:93:68:f3:2b:ff:5d:c0:22:dc:47:f9:15:04:
e3:90:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:50 2025 by rpki-client