Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/rYKTx0nL3KpouO_aEG54Y81fax4.roa
File: rYKTx0nL3KpouO_aEG54Y81fax4.roa (raw, json)
Hash identifier: U8k6Z6wFvQxh2jmlJpmKkiKIDJ2daF7abfgpCSFD+Kw=
Subject key identifier: AD:82:93:C7:49:CB:DC:AA:68:B8:EF:DA:10:6E:78:63:CD:5F:6B:1E
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 01941FFA895CA4DE0311FC46358616FCB2F3
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/rYKTx0nL3KpouO_aEG54Y81fax4.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35568
IP address blocks: 87.236.136.0/21 maxlen: 21
87.236.136.0/24 maxlen: 24
87.236.137.0/24 maxlen: 24
87.236.138.0/24 maxlen: 24
87.236.139.0/24 maxlen: 24
87.236.140.0/24 maxlen: 24
87.236.141.0/24 maxlen: 24
87.236.142.0/24 maxlen: 24
87.236.143.0/24 maxlen: 24
185.236.132.0/22 maxlen: 24
185.236.132.0/24 maxlen: 24
185.236.133.0/24 maxlen: 24
185.236.134.0/24 maxlen: 24
185.236.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:89:5c:a4:de:03:11:fc:46:35:86:16:fc:b2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad8293c749cbdcaa68b8efda106e7863cd5f6b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:26:ec:ba:45:d2:4e:ad:34:fc:01:df:93:
a2:b6:fa:3b:44:ec:68:fe:cb:4b:a8:f7:f7:9b:65:
39:02:e1:88:fd:48:b7:c5:5b:c0:12:8a:f7:23:2b:
59:4a:42:a9:f6:7d:df:b9:90:a3:e9:35:9e:c0:79:
08:ec:ba:d5:79:21:c5:11:1d:c9:4c:ad:7e:d7:e0:
22:28:de:5d:28:85:21:c7:62:21:27:1f:30:4d:fe:
de:18:0d:d2:f4:f6:d7:9d:7b:fb:85:0e:70:df:31:
53:f0:fa:89:f2:ee:b1:98:3e:fc:fd:19:63:f9:43:
ae:9f:91:35:bd:0c:d6:ba:66:8f:13:a3:f2:c8:55:
88:6c:63:d2:97:3e:7f:06:03:94:ad:08:49:c9:d8:
12:5d:84:c6:4a:de:f3:60:e8:85:42:b5:bd:1d:5f:
2a:1d:6f:b4:8c:4b:79:31:a6:d3:08:1a:4f:dd:6c:
44:5c:7e:75:0d:d9:56:0c:b6:44:94:62:19:e7:94:
92:ec:4f:d3:62:cb:d8:b1:1a:ec:ae:54:db:11:2f:
68:f1:a4:6c:f4:00:56:8a:4c:63:98:9a:a6:e6:1c:
d9:d7:99:b8:b1:c8:41:82:78:34:24:86:df:12:70:
70:e0:bf:08:14:e8:35:4d:31:56:71:0e:44:33:16:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:82:93:C7:49:CB:DC:AA:68:B8:EF:DA:10:6E:78:63:CD:5F:6B:1E
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/rYKTx0nL3KpouO_aEG54Y81fax4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.136.0/21
185.236.132.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:7b:d1:ee:78:50:15:62:25:bd:f2:31:ec:af:ab:25:06:a3:
0e:78:62:51:d5:97:6d:87:84:5f:6e:d8:7f:24:0e:60:cb:39:
4c:bc:2d:c3:90:6c:64:05:a5:7b:38:76:66:0e:78:f7:e8:bf:
b7:7f:ca:72:57:dd:1c:0c:c9:3c:03:85:83:ff:14:ba:39:15:
76:1c:b9:8d:4b:27:bc:f4:be:0e:05:73:73:8d:8e:72:0e:0e:
d5:cc:dc:ba:2a:28:a1:f3:e3:27:b1:98:96:51:37:f4:14:36:
6a:f4:a3:16:b3:83:1e:fe:82:4a:86:60:da:6d:f9:b9:a8:cc:
d7:48:fb:34:0e:71:29:a6:e8:87:d9:6e:30:27:e3:2e:6c:9e:
37:28:a6:73:6f:40:4d:11:37:a9:f9:f9:68:0d:28:45:b0:55:
c9:67:57:c6:ba:b1:68:6c:8f:9c:cc:be:b3:fd:10:c8:96:0a:
c1:14:ef:09:59:d4:99:e9:e8:0e:2d:3c:f6:e8:ee:22:01:d9:
f9:8f:cb:18:0c:49:6d:09:fb:8f:f8:92:90:81:f8:4e:1d:e8:
82:37:61:20:4e:34:21:b8:8b:3a:50:63:6f:6e:a6:65:f2:07:
86:08:f1:04:ba:9b:81:ed:98:f0:cc:7d:59:f9:64:0d:60:9a:
43:33:98:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:17 2025 by rpki-client