Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/V80Jvy0KLZQjqpeQNIx-dc-Ahgc.roa
File: V80Jvy0KLZQjqpeQNIx-dc-Ahgc.roa (raw, json)
Hash identifier: 0JhsZS/w87YjLNxBWJNFG7eEJHrJWihhV/iC23LdiYQ=
Subject key identifier: 57:CD:09:BF:2D:0A:2D:94:23:AA:97:90:34:8C:7E:75:CF:80:86:07
Certificate issuer: /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial: 019425FC0AAAEA7D968C2EE92B072BF9F9C8
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/V80Jvy0KLZQjqpeQNIx-dc-Ahgc.roa
Signing time: Thu 02 Jan 2025 07:47:42 +0000
ROA not before: Thu 02 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29596
IP address blocks: 87.239.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0a:aa:ea:7d:96:8c:2e:e9:2b:07:2b:f9:f9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Validity
Not Before: Jan 2 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57cd09bf2d0a2d9423aa9790348c7e75cf808607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:aa:17:f7:2f:8c:0e:8b:55:71:a1:9d:23:
fd:1e:81:2d:16:c1:e3:0d:bb:36:c4:bb:51:39:05:
1b:64:af:fe:3f:9b:97:b0:41:b4:14:11:87:9f:6f:
d5:99:af:6a:8b:eb:d7:2d:92:08:bb:fd:9d:f5:43:
a9:09:59:05:22:d8:22:61:d5:92:33:ac:e4:4c:2c:
89:35:90:b0:0a:da:61:89:75:75:21:db:5a:52:50:
ec:75:da:5b:47:32:0b:ea:be:40:94:7f:39:13:6f:
67:78:d2:54:81:a5:21:e4:cc:48:03:7e:15:70:c2:
24:d0:f2:f3:62:94:51:72:2e:f4:63:82:7e:d4:c8:
6a:6b:3e:df:66:9b:6d:95:76:00:ef:6d:1d:1b:01:
62:0e:75:1f:57:d6:39:04:80:dc:13:cc:bd:4d:71:
03:4f:02:c8:ef:f4:27:aa:76:f3:77:89:ec:70:d5:
77:ac:48:83:78:23:b0:84:c5:35:74:ce:8e:17:44:
98:a7:fc:9b:f4:ee:71:cd:77:07:d1:b6:2a:6b:d2:
f7:bd:87:e3:6e:c7:83:a6:be:4f:e2:ff:ef:84:9c:
c5:eb:bd:6d:c6:d0:68:14:fb:cf:22:70:f8:c0:01:
bc:a8:12:42:89:a2:7d:88:6a:2d:22:7d:35:a5:71:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CD:09:BF:2D:0A:2D:94:23:AA:97:90:34:8C:7E:75:CF:80:86:07
X509v3 Authority Key Identifier:
keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/V80Jvy0KLZQjqpeQNIx-dc-Ahgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.88.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:92:a8:59:9f:9b:17:e1:27:42:8f:9e:83:f9:d2:fe:46:c9:
52:d2:a7:3c:7f:e5:95:13:64:27:05:29:b8:8a:a5:48:bd:e6:
61:9b:5d:42:df:d0:40:ec:8d:c4:9d:a2:7c:8c:ab:e1:b3:d5:
d2:3b:ac:6c:5c:fb:a5:47:14:83:6c:16:0d:46:42:93:05:0b:
b2:e5:91:52:5d:e0:a5:33:9b:2f:22:20:03:1a:ae:51:03:66:
66:d0:95:28:89:b8:f4:63:79:b4:23:3f:24:d3:f7:15:f1:a1:
4e:ce:dd:f2:fa:ab:f0:66:b6:e7:3b:64:e9:dd:86:b4:a7:96:
25:5b:17:43:43:8f:6d:97:c6:42:d6:56:47:93:ef:a4:4a:34:
61:cc:b6:51:96:94:8a:c6:e6:bd:99:3a:c4:3f:aa:8b:5d:fa:
01:0b:4d:01:88:97:89:ab:ff:1d:1d:e3:1f:89:a9:e0:02:b4:
70:44:4c:95:ce:20:35:76:b5:3a:b3:59:72:ab:6e:02:6b:d8:
9c:8d:d0:0a:99:7e:ad:dd:66:0f:10:d4:1f:6b:53:fd:66:02:
05:a5:3b:2d:16:22:81:9b:c8:30:23:2b:96:69:09:b7:f0:fc:
51:df:89:14:af:c5:6b:2e:96:c5:cb:6f:9e:0d:ee:5e:6b:69:
06:3a:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net