Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa
File: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (raw, json)
Hash identifier: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=
Subject key identifier: 63:5B:81:0B:0D:88:0F:46:32:67:DF:6F:F9:9F:E5:C8:21:FD:F5:E8
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC36A834FC08A81B9E5FDC7E53F3C4
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208161
IP address blocks: 87.236.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:36:a8:34:fc:08:a8:1b:9e:5f:dc:7e:53:f3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=635b810b0d880f463267df6ff99fe5c821fdf5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:b0:74:d8:72:1a:ff:c3:ea:64:6e:78:e3:
1c:62:bf:2c:c9:e7:e5:4d:fb:8f:42:e0:a5:e5:bf:
ac:d6:61:77:70:1c:2c:2c:0f:5b:d3:47:a0:41:7f:
09:9d:a5:e5:1e:3e:5e:e9:c7:09:a3:29:38:7a:95:
6b:4c:9c:10:6e:93:97:2e:f4:56:1b:50:ff:f3:c0:
4b:13:27:78:6f:f3:00:83:f8:5a:bc:71:62:37:3a:
f8:3b:c8:2c:ec:9e:c6:e0:9e:11:73:ba:89:f0:e5:
50:1d:81:51:b8:0a:dc:8f:12:50:03:08:6e:4f:ba:
cf:1f:a5:20:fd:61:d8:2d:b5:b9:ab:08:c3:b3:eb:
5e:72:ca:98:45:56:9a:a8:3f:d6:3f:f5:36:db:d0:
fc:fb:fb:e7:16:1d:01:5b:be:b9:b0:62:e2:58:94:
f5:34:63:fb:8c:cc:94:e9:81:0c:84:55:c3:a3:4c:
e8:df:e8:e7:39:c9:6b:f5:da:82:14:57:0a:37:0a:
e8:3d:b9:7c:a1:50:8b:9d:b0:28:1c:2d:ca:f3:e2:
6c:3e:5b:29:ac:38:b1:95:1d:86:a0:7f:6b:6d:78:
2e:9f:d4:b2:db:55:68:18:4d:48:4c:71:33:73:7f:
dd:05:99:be:d9:5e:82:5b:1a:fa:c8:51:2f:f7:ec:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:81:0B:0D:88:0F:46:32:67:DF:6F:F9:9F:E5:C8:21:FD:F5:E8
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.215.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d1:55:be:ab:ed:e2:96:03:28:9f:ef:51:f7:f7:ed:f7:97:
fc:dd:91:12:61:ce:cd:e8:42:08:13:85:cd:2e:a6:1d:01:f3:
24:15:70:33:4f:b0:fe:fd:a3:30:f6:24:8f:bf:1d:59:f1:c6:
c7:06:65:fe:d2:ec:90:f4:9f:02:a3:fe:d3:aa:e0:01:eb:fe:
e2:2f:e8:eb:61:37:8c:e6:a9:6c:17:1d:2a:f0:d9:fd:50:aa:
73:69:d6:ad:89:f3:7a:5e:e0:07:03:16:fe:9c:75:96:d7:dc:
1b:dc:77:fa:62:cd:a9:92:ec:8d:f9:6d:c2:a1:4a:be:1a:11:
a3:d8:3c:0a:5f:5d:d9:9d:e2:f9:ca:79:db:ee:ab:6a:13:2d:
fc:e1:dc:39:86:56:11:2d:de:2a:6a:77:cf:a3:65:5a:f8:76:
97:b4:a1:1d:94:3c:db:77:91:c5:a2:70:d6:61:26:2f:49:f8:
af:ea:12:cf:18:96:3b:1e:b6:22:b9:f5:cf:9b:00:b7:7b:62:
95:21:6a:a6:e3:e9:e9:48:7d:e2:07:4a:c8:75:40:88:87:1f:
d3:ed:34:24:73:e7:26:cc:e6:41:18:47:0c:1a:75:73:58:eb:
cd:7a:45:f2:2e:d1:43:e7:d4:1f:a7:15:3a:7f:94:50:28:00:
f3:8b:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:53 2025 by rpki-client