Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/m7ILrNfOu-eUx2B6UsntAxtlq9s.roa
File: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (raw, json)
Hash identifier: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=
Subject key identifier: 9B:B2:0B:AC:D7:CE:BB:E7:94:C7:60:7A:52:C9:ED:03:1B:65:AB:DB
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 019424B3C0C873FAD4FA6700510BBA8A02D4
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/m7ILrNfOu-eUx2B6UsntAxtlq9s.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31549
IP address blocks: 87.236.39.0/24 maxlen: 24
185.110.244.0/24 maxlen: 24
185.110.245.0/24 maxlen: 24
185.110.246.0/24 maxlen: 24
185.110.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c0:c8:73:fa:d4:fa:67:00:51:0b:ba:8a:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb20bacd7cebbe794c7607a52c9ed031b65abdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:e8:5b:0a:b9:68:23:90:37:3a:6f:23:5b:
50:f1:4f:8a:0a:20:88:73:27:95:63:fa:e7:e5:9a:
1e:db:f5:86:53:ee:a3:5e:42:3b:aa:3e:4d:6c:29:
c1:81:0b:32:68:78:f1:a3:98:f8:94:49:61:25:a6:
82:20:67:fa:e9:61:26:2e:4a:25:ae:8e:73:da:21:
04:13:12:03:e4:ae:72:e7:e5:38:45:87:36:d2:79:
a6:91:a5:d1:c3:9d:1f:d5:a5:a3:12:9d:6c:10:9f:
bd:e8:96:bb:be:82:e6:a7:28:88:d1:76:58:0b:12:
b8:2e:2f:3c:b9:e8:ad:06:38:b1:f7:be:7c:d3:1a:
e5:8b:10:ec:f6:af:e3:bf:a4:14:50:eb:94:33:18:
7c:0a:1c:62:9e:85:fe:16:9c:bd:df:01:5f:76:7f:
78:43:93:c7:e4:ba:1e:76:6f:b3:e3:38:ff:a5:d1:
a0:b7:c8:79:0f:f6:00:7e:d0:8a:fb:3b:08:f2:d6:
d2:3d:b0:80:97:6f:f5:4e:f9:fb:b6:af:15:24:24:
26:3c:12:46:c7:29:1a:4c:02:38:02:4a:7b:79:07:
66:e2:3d:ce:08:db:3b:81:01:8e:e2:8a:9f:26:1b:
e1:84:e4:ba:64:54:6f:57:69:5e:06:3b:4a:e9:80:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B2:0B:AC:D7:CE:BB:E7:94:C7:60:7A:52:C9:ED:03:1B:65:AB:DB
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/m7ILrNfOu-eUx2B6UsntAxtlq9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.39.0/24
185.110.244.0/22
Signature Algorithm: sha256WithRSAEncryption
88:21:70:00:8a:30:7a:eb:ce:f7:10:a7:93:f5:4c:6e:25:81:
5d:d6:4e:de:e5:0a:79:a3:43:07:e3:29:fd:7c:d5:38:c3:0f:
0e:42:12:d4:a6:29:92:17:1e:ed:fc:f2:84:83:3c:17:eb:2d:
43:10:ac:e1:96:e6:44:ef:0e:ce:3d:9c:7a:ec:d8:18:f8:07:
bb:e5:1d:07:0d:b2:e6:29:88:46:95:b3:6b:1f:3b:98:d4:25:
5a:15:6e:d9:ae:b5:92:17:94:82:f2:49:2c:01:ab:ea:bc:9d:
1d:79:1d:38:9f:43:e5:75:e0:41:05:8d:ba:2d:61:17:60:ea:
70:ac:10:35:48:d8:51:c8:1a:d6:86:6b:90:f9:6a:6e:55:07:
bf:80:ea:b6:f9:d3:f7:f4:4e:51:f3:12:b4:b6:3a:91:55:32:
93:b6:41:40:7d:69:0b:b5:ee:36:1c:60:ef:0c:19:23:5d:38:
26:f7:25:1a:96:81:24:ed:fa:3e:b7:f2:bd:88:c6:ae:81:42:
76:ea:12:cd:93:62:e1:89:3c:0b:bb:14:3c:1d:da:fb:b0:79:
8b:29:4f:4d:b3:74:ce:b0:f3:94:82:0f:a4:7b:45:10:00:63:
81:fa:7c:e0:ea:f8:62:d5:85:16:a6:01:dc:d2:bb:3b:42:a4:
46:4b:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:24:50 2025 by rpki-client