Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/IdDlLdw7BoTdzBtFB1E0uOHrQGM.roa
File: IdDlLdw7BoTdzBtFB1E0uOHrQGM.roa (raw, json)
Hash identifier: oxqKVIIPyBzl9OwY6PNLV7ENnoFxIzvFSykwyfKgnHI=
Subject key identifier: 21:D0:E5:2D:DC:3B:06:84:DD:CC:1B:45:07:51:34:B8:E1:EB:40:63
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 0195F5EAF18D659D736CEF49AFD6A7242A6E
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/IdDlLdw7BoTdzBtFB1E0uOHrQGM.roa
Signing time: Wed 02 Apr 2025 09:52:49 +0000
ROA not before: Wed 02 Apr 2025 09:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 185.87.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:ea:f1:8d:65:9d:73:6c:ef:49:af:d6:a7:24:2a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Apr 2 09:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21d0e52ddc3b0684ddcc1b45075134b8e1eb4063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:85:e4:8f:ed:96:55:e1:68:6c:a7:35:df:
ea:e0:8f:95:7f:a5:3c:3b:b6:b3:4f:2b:83:1c:39:
37:0e:5f:20:9d:56:45:15:9c:d2:35:1b:7d:a6:c9:
d7:15:05:72:f6:c0:c8:b1:12:f2:c7:ef:59:83:a0:
6d:02:0a:e0:6b:19:ef:91:6e:03:9a:99:bc:1f:8c:
c9:e4:85:91:e6:51:fb:85:f8:7c:c9:e1:fb:90:ac:
25:8d:de:fb:65:bb:64:0e:54:4f:35:aa:3e:64:b5:
b0:3f:3e:79:98:6a:2e:66:57:97:88:3c:8f:57:57:
c7:d8:6d:c3:36:d3:4d:4a:04:f7:8a:87:54:cb:92:
b1:75:b3:7d:f3:b6:3e:59:dc:e4:8f:fe:34:43:39:
e9:1d:7a:99:50:01:5d:fe:2c:19:a3:4f:45:50:24:
16:cc:62:1e:4f:60:40:c0:87:7c:d0:e0:f1:d8:fa:
d8:7d:a5:44:16:33:0f:79:8c:e4:3b:fc:f7:d6:a9:
ba:d7:1a:63:db:bb:f8:26:28:30:81:63:ac:14:22:
cd:73:fa:96:04:e4:c6:48:5c:13:43:10:fe:19:0a:
94:6a:6d:44:47:89:3f:be:1e:41:ac:95:22:a1:57:
23:9a:45:13:45:3c:10:31:c7:2d:41:94:3e:ca:b5:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:E5:2D:DC:3B:06:84:DD:CC:1B:45:07:51:34:B8:E1:EB:40:63
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/IdDlLdw7BoTdzBtFB1E0uOHrQGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.76.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:a6:4c:2b:cc:2d:0f:82:4c:94:67:be:22:60:a2:69:28:89:
ad:ea:51:f8:be:b8:58:46:cd:e5:47:b2:10:89:5f:0e:78:18:
e3:d9:59:af:42:7a:82:0c:4e:6e:6e:a6:f6:6e:2e:cb:ee:25:
12:b6:22:32:ee:4a:e1:b6:71:31:ab:2e:0a:be:33:7b:92:e3:
78:de:ff:f0:81:f6:b7:92:98:c9:22:4d:15:44:8e:00:09:e0:
f3:b1:c8:f5:e8:2b:5f:49:ac:33:b0:71:d4:8b:ad:a1:2c:39:
51:da:dd:4c:ae:8a:c0:70:79:84:31:84:9b:b3:79:78:23:15:
6b:19:85:4a:4a:92:30:b6:ee:f1:a9:82:f1:a9:87:e7:d0:6b:
54:f5:7c:32:a8:23:9a:e0:ef:26:71:4a:5a:ef:4d:23:4d:10:
b5:35:91:30:ac:9c:e6:ad:60:ca:4a:e9:ae:ac:01:c2:54:16:
93:da:12:60:36:1d:4f:8d:9f:f1:96:e5:ab:50:c2:04:8e:0d:
94:84:2a:84:1f:b3:e6:c0:93:2d:a4:92:bf:52:20:5f:3c:be:
e6:0c:7c:2a:ac:fd:2d:0f:a4:4a:04:3b:70:0c:aa:da:cf:84:
ed:00:07:61:f6:09:ec:25:6c:36:96:f8:a5:82:a7:2b:43:f0:
14:59:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net