Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/xsJAozXR7v9AsPhf1mj9KmkoElI.roa
File: xsJAozXR7v9AsPhf1mj9KmkoElI.roa (raw, json)
Hash identifier: bwRmsijzLqvxhnnm3OlUPJ7DrTUMyMg1dyJZUOOqeKk=
Subject key identifier: C6:C2:40:A3:35:D1:EE:FF:40:B0:F8:5F:D6:68:FD:2A:69:28:12:52
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC3423911F479E3D8D1B1E0C7B5E46
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/xsJAozXR7v9AsPhf1mj9KmkoElI.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57230
IP address blocks: 87.236.210.0/24 maxlen: 24
87.236.212.0/24 maxlen: 24
2a03:9383::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:34:23:91:1f:47:9e:3d:8d:1b:1e:0c:7b:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6c240a335d1eeff40b0f85fd668fd2a69281252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:f3:37:4f:a6:52:db:0c:2e:8a:50:12:fb:
34:a1:85:4a:e1:e5:0b:a0:e1:cf:f6:a9:df:f8:0f:
6a:d0:e3:87:2e:8b:23:38:5d:3f:47:05:7a:76:71:
d8:92:88:a2:f5:d7:ae:24:8f:87:ec:d3:5c:48:e0:
e7:35:1e:16:9f:71:0d:3d:b4:48:c0:f6:14:24:92:
da:26:b5:14:30:a4:de:57:92:3f:f8:04:aa:3d:9f:
42:04:41:29:f2:80:39:19:3a:1b:24:d8:b2:67:05:
96:5d:28:47:11:d3:e1:02:99:e3:54:10:7e:88:50:
ff:25:32:d1:e0:3c:4a:2c:39:89:b7:91:5f:da:f5:
d9:e4:6b:a1:f5:be:76:71:77:c5:41:2e:2c:a6:6b:
81:03:a5:1b:b8:cb:9c:80:db:d3:fe:cd:94:54:53:
2d:bb:1c:be:41:1f:10:23:ac:ad:49:e9:98:40:76:
0f:6e:eb:52:39:17:e2:e7:32:67:bc:f6:b5:bc:9c:
05:37:80:e0:27:89:9a:4a:ea:08:b6:8d:6e:8c:13:
4b:0d:c1:04:c0:7b:d9:5b:88:a2:d8:24:8b:29:87:
49:e0:fe:48:d2:59:f4:6d:9a:f1:3e:b5:54:e8:b7:
bc:be:c3:c1:1e:b0:78:a1:04:50:ce:53:9d:8e:d1:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:40:A3:35:D1:EE:FF:40:B0:F8:5F:D6:68:FD:2A:69:28:12:52
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/xsJAozXR7v9AsPhf1mj9KmkoElI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.210.0/24
87.236.212.0/24
IPv6:
2a03:9383::/48
Signature Algorithm: sha256WithRSAEncryption
4a:3d:e8:64:ea:63:6c:e1:dd:b3:c7:71:36:37:96:68:88:cd:
0c:a6:c2:9e:fd:33:23:e6:e8:50:c4:55:76:fd:2c:ac:1c:64:
9a:40:e0:4f:22:d4:63:f0:2b:aa:c0:e8:8d:f5:21:f3:ed:fd:
12:a1:29:48:a5:d5:81:53:93:7a:32:27:f3:f1:ad:c8:f0:9d:
f0:8a:82:8a:9d:9c:e2:1e:12:31:28:43:87:e8:fe:a6:4b:53:
49:78:05:cd:8d:0e:d3:25:a9:23:88:07:9b:ff:ee:ab:0c:a7:
c2:62:79:18:b4:f4:e4:f4:d3:1b:11:81:e7:ac:b9:bb:95:ed:
43:c2:8d:b8:b6:2d:82:e4:27:0a:9e:95:03:30:06:8b:a5:13:
d0:f6:e9:e1:94:2d:67:67:70:b9:46:e6:84:1c:19:18:74:c3:
7b:af:21:88:40:8f:c9:2a:6d:e6:5a:ca:b8:cd:b3:d0:e7:b7:
da:f1:f6:76:7a:35:26:2e:40:ed:18:dc:c5:33:43:81:6d:4f:
8a:ad:3d:03:98:37:3e:78:ac:5f:70:3b:88:38:78:58:99:c4:
61:a2:55:1b:74:bd:c7:34:7c:7a:d7:a1:eb:91:1b:0d:f8:40:
96:10:49:91:4d:cf:92:c8:66:30:ac:fa:0c:a2:fa:c1:f3:1c:
0f:fd:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:22:14 2025 by rpki-client