Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/xNEUjA7ITLvBkxdzmbme9661TlQ.roa
File: xNEUjA7ITLvBkxdzmbme9661TlQ.roa (raw, json)
Hash identifier: 1h+l7pX24LlIz83Xj6rt/K305QYrLmEd1uwS9wbn8l8=
Subject key identifier: C4:D1:14:8C:0E:C8:4C:BB:C1:93:17:73:99:B9:9E:F7:AE:B5:4E:54
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 0195FCFA30F4252D26A20B7F2406B7D61D5E
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/xNEUjA7ITLvBkxdzmbme9661TlQ.roa
Signing time: Thu 03 Apr 2025 18:46:49 +0000
ROA not before: Thu 03 Apr 2025 18:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62044
IP address blocks: 87.58.78.0/23 maxlen: 24
87.58.80.0/23 maxlen: 24
87.58.82.0/23 maxlen: 24
87.58.100.0/24 maxlen: 24
87.58.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:fa:30:f4:25:2d:26:a2:0b:7f:24:06:b7:d6:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Apr 3 18:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4d1148c0ec84cbbc193177399b99ef7aeb54e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:16:50:e9:a5:76:2d:86:b3:70:1b:ff:1f:
2f:ac:25:53:ba:9c:21:b6:9a:d4:9e:fb:02:3b:8c:
2d:c5:1d:c4:5e:d4:14:61:69:ce:93:7e:f0:50:a1:
c0:7d:66:e0:05:a0:d8:ef:12:f9:3f:1d:c6:b6:fd:
05:52:ae:51:f0:c5:8d:e1:7c:20:15:ed:f2:18:06:
1a:1e:60:33:f6:fe:df:19:f8:0a:23:78:b4:c3:47:
51:92:2b:31:f8:84:69:91:70:52:c4:13:e4:63:df:
8d:1e:52:85:3d:22:10:6b:57:79:1b:a2:ef:c6:ab:
63:a9:fb:6c:85:d3:e0:71:f9:9e:01:4f:91:a3:a8:
8f:f1:ea:be:d9:be:91:b4:47:ab:33:a1:7f:f7:ce:
da:57:63:ca:37:4f:1f:8c:2a:ea:30:5e:48:32:27:
fb:1e:1f:a6:89:6a:5d:ab:08:89:f1:08:00:7c:f8:
c9:4a:c9:79:5f:c8:f1:8e:56:8a:1e:d3:08:f1:28:
51:22:c4:5e:88:28:2f:cc:da:ae:6e:59:9b:16:39:
47:8e:86:ac:e5:7d:93:2c:82:37:c8:99:12:fa:4a:
65:59:3e:b7:8e:6e:41:24:57:3b:eb:71:4c:fe:8a:
28:6d:bf:ac:17:44:0a:31:5f:ae:8b:e9:5b:44:83:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D1:14:8C:0E:C8:4C:BB:C1:93:17:73:99:B9:9E:F7:AE:B5:4E:54
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/xNEUjA7ITLvBkxdzmbme9661TlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.78.0-87.58.83.255
87.58.100.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:59:b5:b3:1e:68:d6:ed:4c:48:38:0e:f5:db:86:ff:5f:11:
5e:e9:8d:e2:c2:8e:8f:96:aa:f7:9b:91:dc:c8:88:d3:50:5d:
a6:f9:2b:cf:39:34:2c:bb:b3:15:95:42:72:35:09:d7:10:e3:
f3:44:dc:ce:50:64:91:82:91:e2:83:e7:6c:87:f0:ec:39:79:
3c:30:71:4e:ac:38:89:16:b5:78:c4:83:4e:f3:3d:ac:24:c5:
a3:7c:e4:da:39:dd:57:b2:90:c8:ab:45:ed:f7:bd:e7:db:c9:
05:31:c5:71:3b:0d:1c:bc:0b:17:3b:63:76:b3:7f:a8:77:c8:
41:a1:31:17:e6:b1:b3:75:5a:65:64:40:96:e2:1e:5d:f2:e5:
53:6b:ea:fa:4b:85:e7:9c:bc:3c:56:5c:11:ff:37:e6:15:19:
1b:2a:0d:0d:56:f5:81:0a:2b:ad:37:6c:37:9e:f1:18:4d:b9:
83:84:1c:da:35:69:db:9f:58:cf:6f:10:e2:07:1b:9e:77:e0:
1e:fd:2e:e0:ba:4c:83:b2:b1:4f:d4:fd:bc:27:84:e3:39:4c:
38:7b:f4:82:1d:a8:57:3c:ce:70:b3:e3:a7:2b:96:70:a0:55:
f6:9f:df:9e:5a:9a:f6:9b:93:97:66:e0:72:6d:01:1c:92:ce:
c0:2e:d5:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net