Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-H2HK2pSI6lRBsDDkckN-9BXj9c.roa
File: 1-H2HK2pSI6lRBsDDkckN-9BXj9c.roa (raw, json)
Hash identifier: Zdk2UJ2Pnj21N3GH9rovc2sWi34yMoRQZHNm21j8mWM=
Subject key identifier: F8:7D:87:2B:6A:52:23:A9:51:06:C0:C3:91:C9:0D:FB:D0:57:8F:D7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D353F572FF30CFBD36BBCE4494D4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-H2HK2pSI6lRBsDDkckN-9BXj9c.roa
Signing time: Thu 02 Jan 2025 17:51:29 +0000
ROA not before: Thu 02 Jan 2025 17:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216078
IP address blocks: 87.121.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d3:53:f5:72:ff:30:cf:bd:36:bb:ce:44:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f87d872b6a5223a95106c0c391c90dfbd0578fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:74:e1:b9:da:4f:66:28:68:9a:03:bb:16:
30:bf:59:77:f9:66:e8:46:73:2f:2e:75:3b:e3:9b:
20:36:f5:0d:d5:03:fd:1b:26:59:4b:45:fb:3b:fb:
bd:9a:93:95:da:8b:09:3d:76:be:fd:d3:07:57:38:
4f:14:35:78:9d:d2:73:e0:11:39:f4:de:0a:5d:ef:
19:9a:90:8f:5f:c1:0f:43:ab:59:7c:f7:47:0e:bb:
5c:7c:89:89:83:fc:b7:e0:0a:60:0f:25:01:a4:86:
d8:13:79:3f:5a:6b:79:b8:34:37:62:7c:f5:ed:a2:
ab:2f:70:49:15:fe:b8:b1:93:4e:b5:c9:91:23:68:
b8:76:84:17:e6:91:bc:38:1b:e1:7e:c8:e2:29:bb:
f6:31:0c:66:f7:fc:4f:ea:58:a1:0d:3b:5b:22:c9:
7a:6f:15:98:45:7f:f6:55:ce:4b:06:dd:67:b2:54:
3b:fe:89:54:f5:8e:39:0b:29:6d:de:d5:8a:0d:85:
e4:b2:aa:57:2e:ba:90:bb:a7:d1:99:9a:8a:c3:ca:
08:e6:fc:a6:0c:d3:64:80:ee:07:c5:8d:ec:55:b1:
84:cf:46:5e:e1:f1:c7:4b:25:fd:64:8e:59:f2:c3:
b0:69:d6:91:cd:bc:f1:39:e2:8c:a2:a2:34:c1:6c:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7D:87:2B:6A:52:23:A9:51:06:C0:C3:91:C9:0D:FB:D0:57:8F:D7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-H2HK2pSI6lRBsDDkckN-9BXj9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:30:c8:59:94:a1:b9:cc:ea:9d:dc:ac:59:e6:b2:3b:77:18:
b4:1e:cc:bd:72:05:13:33:22:67:07:46:72:32:c7:e8:b7:f3:
0f:77:8a:39:5d:5a:93:3a:12:dd:ba:91:cc:58:d3:ef:6a:af:
3f:28:5e:cf:e8:c4:ca:64:a1:13:1d:d4:f6:d1:d7:9b:71:f0:
c9:46:cc:85:a7:d1:66:23:e5:32:68:59:a1:e0:1a:ef:f0:2a:
3d:ed:0b:06:9b:a3:24:15:3f:51:77:70:a5:ba:6c:da:e1:dc:
08:29:d2:13:dd:21:e2:53:6d:9b:58:ca:d7:1a:f1:8b:5e:18:
56:08:65:85:2b:59:30:cc:29:da:cb:65:73:da:23:8e:61:27:
73:f7:1e:b7:ae:ce:ec:b4:6e:6d:3f:9c:ed:fa:b0:d5:51:69:
43:45:87:fe:34:cd:65:98:05:81:8f:03:0a:2d:93:c5:64:c1:
52:9e:2c:0c:cb:e8:f8:11:77:76:13:cf:df:c9:ec:40:64:17:
63:4b:6d:8b:c0:e9:bf:96:0f:cf:eb:0b:ff:f0:87:60:6c:5b:
3c:e2:94:79:42:36:07:32:12:2b:a7:d0:65:86:2e:c6:aa:a7:
11:d1:c3:21:40:38:1e:dd:fa:70:14:46:be:bf:59:c6:7d:85:
b2:87:ff:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:34 2025 by rpki-client