Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/eY-UGZSTVukPVNUPYtti3vLhBJE.roa
File: eY-UGZSTVukPVNUPYtti3vLhBJE.roa (raw, json)
Hash identifier: dfotzkpTyAo04u9HJOD4NQ6DENGjVCMeFLRZZ05vvzI=
Subject key identifier: 79:8F:94:19:94:93:56:E9:0F:54:D5:0F:62:DB:62:DE:F2:E1:04:91
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D786AC4CD6E627A177DDC4DE72BDFF
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/eY-UGZSTVukPVNUPYtti3vLhBJE.roa
Signing time: Wed 01 Jan 2025 21:48:34 +0000
ROA not before: Wed 01 Jan 2025 21:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59967
IP address blocks: 87.246.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:86:ac:4c:d6:e6:27:a1:77:dd:c4:de:72:bd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=798f9419949356e90f54d50f62db62def2e10491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:29:6a:48:97:03:14:3d:c3:22:13:c3:89:
62:11:e7:b8:fb:f1:75:23:71:02:82:f1:18:ed:bc:
01:5a:cf:9c:be:6e:99:4e:d5:5c:62:89:95:68:a7:
f3:75:19:3f:2c:bf:7b:8d:bc:8d:d9:48:e5:de:4f:
d3:3b:53:8e:4b:32:e5:68:91:b1:47:d0:30:35:2a:
9b:09:33:9f:19:aa:e1:2c:46:20:f1:8a:02:fc:6e:
94:d4:1e:99:47:58:79:14:ab:79:41:25:0d:77:2d:
fb:fb:dd:f0:a3:93:d8:56:64:01:26:c8:d6:36:b9:
26:b1:91:71:3e:f8:c5:53:23:a3:5c:fd:d2:12:98:
73:4f:35:af:06:9b:fc:65:0d:9b:b7:12:f8:45:48:
c1:f7:54:e0:12:26:ed:45:b5:c2:3a:6f:07:ba:82:
26:fa:aa:1c:20:fb:22:68:1e:30:df:02:b1:05:10:
58:d0:d2:1f:3c:14:ea:44:99:42:8d:ff:12:67:3a:
0b:e9:c9:c6:4d:ae:73:15:72:a4:ec:41:84:d5:80:
33:a9:ca:de:22:1a:a2:23:6b:9a:e9:57:c9:c1:fc:
a2:2c:10:1c:c7:de:ba:1d:d0:76:4e:4b:a4:ca:6f:
f5:f6:45:3b:95:6b:e0:db:27:24:f1:01:9c:73:61:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:94:19:94:93:56:E9:0F:54:D5:0F:62:DB:62:DE:F2:E1:04:91
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/eY-UGZSTVukPVNUPYtti3vLhBJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.163.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ba:32:36:be:92:0d:40:55:e7:d0:d2:25:a5:0a:68:e9:1f:
f5:df:a0:0b:7f:f6:22:c4:a0:01:b9:63:58:f9:69:b9:f4:66:
d1:d7:dc:81:75:be:26:0d:04:3e:23:a0:2d:6f:88:9a:38:48:
a5:32:eb:57:da:ff:49:e6:ee:84:d4:ae:05:b4:5c:18:f7:42:
79:e9:e3:f4:81:95:bf:32:b3:65:db:6b:d6:21:9f:6d:f3:3a:
29:6d:3c:2a:23:92:3c:61:b6:6b:7e:84:94:5e:9c:b4:11:d7:
d7:08:a1:b9:07:da:6a:8a:e8:13:dd:14:2c:13:f6:32:8b:76:
0f:8e:17:51:2c:56:fc:9b:a0:82:b8:d0:f3:4c:7a:cc:e2:8f:
56:6f:72:0f:71:fd:cb:7f:06:e7:c2:df:fe:a8:7e:e1:19:7a:
a4:7e:b4:1d:35:05:e6:e2:0a:a9:86:a9:6f:a6:42:43:f9:bb:
d9:9e:03:b8:d3:57:ef:08:b8:06:6d:5b:52:05:e4:6e:10:4d:
83:dd:90:8d:27:ea:17:d3:8e:9d:1b:67:d5:8b:75:94:70:ef:
76:0e:64:48:a5:64:15:2d:7a:76:b5:fb:2b:47:b2:a1:66:23:
7d:dc:a0:3f:b2:57:73:db:2b:f6:3c:cc:71:53:0b:23:28:20:
df:1d:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:22:51 2025 by rpki-client