Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1cNi7Isg5cJaiDTMUwBAcbP6ogY.roa
File: 1cNi7Isg5cJaiDTMUwBAcbP6ogY.roa (raw, json)
Hash identifier: TOe1ViLMe9cAqZnIdN0M1QA3B05mTU7Xce20qOD3spU=
Subject key identifier: D5:C3:62:EC:8B:20:E5:C2:5A:88:34:CC:53:00:40:71:B3:FA:A2:06
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D7837A748379F3039F1E699E5457EB
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1cNi7Isg5cJaiDTMUwBAcbP6ogY.roa
Signing time: Wed 01 Jan 2025 21:48:33 +0000
ROA not before: Wed 01 Jan 2025 21:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48113
IP address blocks: 87.110.228.0/22 maxlen: 24
87.110.240.0/21 maxlen: 24
195.13.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:83:7a:74:83:79:f3:03:9f:1e:69:9e:54:57:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5c362ec8b20e5c25a8834cc53004071b3faa206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:07:06:53:08:04:47:59:a5:1b:0c:46:fb:
cd:1a:07:46:e0:0c:f5:75:df:09:24:f2:f3:b4:31:
f9:ef:2d:25:56:ed:95:49:8c:37:37:e3:e6:ea:27:
fd:be:75:05:38:0b:40:2f:1e:20:ee:96:a5:00:a1:
a6:3f:31:4b:41:f1:93:ec:6a:9b:8b:69:a0:62:ca:
82:56:e1:4a:ee:cf:2a:0c:96:88:e2:60:d0:38:9b:
90:a2:45:71:a7:5a:10:b1:d3:55:6f:c4:6c:cb:ca:
a4:e8:49:47:64:33:d8:93:c0:eb:07:7b:9a:cc:6d:
fc:99:d9:e0:bc:56:45:19:87:c4:ff:eb:44:98:84:
a2:71:8d:ee:4e:81:ff:e6:29:29:6c:aa:09:93:c1:
40:c9:4a:70:5d:2e:83:33:3e:4e:23:ae:eb:38:e4:
8b:4c:99:9a:08:87:2a:d9:25:ee:8e:cc:fe:5d:36:
81:1f:02:53:83:17:0d:d8:f2:4a:f3:ab:25:c0:ce:
6a:36:2c:04:7c:4f:af:62:9d:04:5e:11:7b:52:b9:
07:cd:cf:33:82:f7:a3:4e:9b:d0:75:e5:a5:6c:a7:
b6:2b:38:33:bf:aa:e3:d8:a0:fd:17:35:e1:04:3e:
6e:36:6e:91:be:b6:45:fe:87:af:dd:7d:42:34:1c:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C3:62:EC:8B:20:E5:C2:5A:88:34:CC:53:00:40:71:B3:FA:A2:06
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1cNi7Isg5cJaiDTMUwBAcbP6ogY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.228.0/22
87.110.240.0/21
195.13.219.0/24
Signature Algorithm: sha256WithRSAEncryption
34:85:a6:42:ac:eb:5c:4e:8a:fc:86:6c:38:05:16:8b:c7:b4:
66:60:4a:fb:3f:11:a9:16:b5:81:af:6f:dd:2d:81:1e:11:70:
f9:01:85:18:31:c8:cc:9f:fd:45:35:b7:b8:bf:fb:92:ea:b3:
c1:0d:11:35:75:8c:22:e0:02:98:e0:31:93:ee:9b:d3:c4:d7:
be:fe:b6:41:04:0c:48:7d:d2:62:1b:76:6d:fc:eb:d4:49:90:
cf:19:f9:3a:06:70:4c:2a:e1:55:15:59:c8:44:03:70:96:2a:
23:9b:e6:9e:62:bd:d6:e6:57:8d:ce:e3:2a:e2:36:00:bb:20:
8c:c1:2f:1e:1b:b3:b0:26:45:41:ea:98:1a:a2:26:42:f4:28:
01:42:61:88:ce:11:8e:4e:5f:57:68:7e:dc:20:5e:f1:d0:90:
33:f2:5a:37:9c:80:d6:a2:4b:40:5d:68:cd:f2:88:2c:36:e1:
c7:b1:d9:62:af:ac:1d:11:e6:68:93:d3:54:b4:25:3d:3c:a5:
9a:91:22:88:f7:43:ec:f6:7a:5d:3d:09:30:85:01:b1:17:4b:
90:12:9b:be:88:46:e8:af:64:d6:ed:74:4e:93:35:ee:34:5a:
a3:68:3f:91:17:76:4d:e1:d0:c8:4f:51:f9:eb:56:df:1e:54:
a9:3c:2e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net