Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/4l2SdYqRsWw1Dk6UbRmpiphQbzs.roa
File: 4l2SdYqRsWw1Dk6UbRmpiphQbzs.roa (raw, json)
Hash identifier: 7zhBmWshcVx2YPgcfMNIybRxMDlVE/wBUohnRkB+ivQ=
Subject key identifier: E2:5D:92:75:8A:91:B1:6C:35:0E:4E:94:6D:19:A9:8A:98:50:6F:3B
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 01941F8C289DB277B79FAA0356BB85524F51
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/4l2SdYqRsWw1Dk6UbRmpiphQbzs.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43588
IP address blocks: 87.255.76.0/24 maxlen: 24
87.255.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:28:9d:b2:77:b7:9f:aa:03:56:bb:85:52:4f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e25d92758a91b16c350e4e946d19a98a98506f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:1f:b0:49:24:07:3c:85:91:1d:bd:98:84:
f2:2e:e3:f0:b9:a1:3e:33:12:af:24:0c:b8:30:02:
30:0e:41:4e:1e:6b:18:53:b4:cd:50:7a:cf:f0:7f:
8d:6e:bf:53:c2:67:f1:d3:06:0a:6e:e8:c7:76:f0:
01:60:64:94:4c:de:a8:be:75:eb:ff:90:80:f5:21:
f5:f4:17:32:31:b8:16:a9:d6:2e:50:b2:17:46:2d:
3e:bd:b7:3f:05:10:ea:2b:5f:13:54:8e:21:5c:6c:
05:df:55:04:06:be:b3:d5:f7:80:87:ec:6b:f4:4e:
58:22:b0:a9:f1:f5:99:98:2a:5a:ae:a6:30:a3:00:
a9:09:25:40:ef:44:ee:a0:b3:2c:a4:23:75:fd:0f:
3c:08:10:7d:ac:17:52:d3:99:ff:32:03:6c:61:94:
7a:3a:ee:73:50:7a:50:12:f6:00:7d:19:09:20:f5:
b3:82:07:a2:5c:3e:27:41:d6:0e:85:87:14:b9:ac:
cc:df:f4:ef:3d:19:21:5e:cc:87:08:c3:8b:e3:cb:
86:25:de:98:ce:9f:d0:63:88:4e:6e:3a:88:52:73:
4e:55:b8:7e:e9:d1:94:f7:08:6d:45:ef:c3:77:75:
51:b1:ad:4f:b3:dd:5a:c9:a5:a4:04:27:b8:f4:b4:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5D:92:75:8A:91:B1:6C:35:0E:4E:94:6D:19:A9:8A:98:50:6F:3B
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/4l2SdYqRsWw1Dk6UbRmpiphQbzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.76.0/24
87.255.82.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:60:24:ca:29:a6:b3:d0:ea:db:4e:ee:29:13:30:44:de:20:
9f:07:fc:97:93:ec:c0:eb:c4:61:7e:73:71:38:77:b8:01:20:
b5:86:a4:ce:ca:1f:75:35:1f:e5:06:bb:d1:bc:1c:19:9a:7a:
9d:53:a7:cc:75:0e:a4:32:1f:1d:2a:18:03:43:3c:f0:22:93:
db:05:75:74:ef:d2:19:e4:30:54:b5:a6:22:fd:39:04:5a:76:
c0:ba:08:d0:fa:8c:32:49:36:1b:4a:8d:ac:c5:c9:a6:ef:cf:
72:50:36:de:5c:50:84:56:d0:b9:04:36:51:19:b6:2e:3d:2d:
19:27:4e:ad:87:d1:e2:29:4c:7f:31:07:5f:13:e8:31:fa:44:
36:e8:95:d0:52:52:c6:42:5c:35:3f:64:f2:86:ac:92:54:0b:
dc:6b:c4:54:e2:c8:55:d3:60:48:8a:91:30:e9:e5:73:ab:d0:
a6:cc:10:8b:dc:6a:f0:65:c4:4b:84:85:8b:7a:38:be:d6:d6:
22:62:ef:7a:92:71:04:74:9f:4d:75:15:87:a1:1d:7e:d2:da:
f8:a7:6f:86:86:0b:30:03:80:c4:ce:4a:a7:0e:bd:91:0c:bf:
9a:ab:76:2a:28:1f:13:17:49:7e:f8:f8:21:6a:cf:17:3b:14:
31:eb:a0:0d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjCidsne3n6oDVruFUk9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzQyNzI1ODYyYjkwYmRhNDUxMGEwMmU4MDRmZWYzYWQx
MTQyZGMwHhcNMjUwMTAxMDE0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjVkOTI3NThhOTFiMTZjMzUwZTRlOTQ2ZDE5YTk4YTk4NTA2ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKcfsEkkBzyFkR29mITyLuPwuaE+
MxKvJAy4MAIwDkFOHmsYU7TNUHrP8H+Nbr9Twmfx0wYKbujHdvABYGSUTN6ovnXr
/5CA9SH19BcyMbgWqdYuULIXRi0+vbc/BRDqK18TVI4hXGwF31UEBr6z1feAh+xr
9E5YIrCp8fWZmCparqYwowCpCSVA70TuoLMspCN1/Q88CBB9rBdS05n/MgNsYZR6
Ou5zUHpQEvYAfRkJIPWzggeiXD4nQdYOhYcUuazM3/TvPRkhXsyHCMOL48uGJd6Y
zp/QY4hObjqIUnNOVbh+6dGU9whtRe/Dd3VRsa1Ps91ayaWkBCe49LS1AwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOJdknWKkbFsNQ5OlG0ZqYqYUG87MB8GA1UdIwQY
MBaAFPd0JyWGK5C9pFEKAugE/vOtEULcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUt
N2I4ZTlkMzM1Y2E4LzEvNGwyU2RZcVJzV3cxRGs2VWJSbXBpcGhRYnpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUtN2I4ZTlkMzM1Y2E4
LzEvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/9MAwQA
V/9SMA0GCSqGSIb3DQEBCwUAA4IBAQDRYCTKKaaz0OrbTu4pEzBE3iCfB/yXk+zA
68RhfnNxOHe4ASC1hqTOyh91NR/lBrvRvBwZmnqdU6fMdQ6kMh8dKhgDQzzwIpPb
BXV079IZ5DBUtaYi/TkEWnbAugjQ+owySTYbSo2sxcmm789yUDbeXFCEVtC5BDZR
GbYuPS0ZJ06th9HiKUx/MQdfE+gx+kQ26JXQUlLGQlw1P2TyhqySVAvca8RU4shV
02BIipEw6eVzq9CmzBCL3GrwZcRLhIWLeji+1tYiYu96knEEdJ9NdRWHoR1+0tr4
p2+GhgswA4DEzkqnDr2RDL+aq3YqKB8TF0l++Pghas8XOxQx66AN
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net