Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KOvZ3yzZltZZowhSxx-fCkPwE0Q.roa
File: KOvZ3yzZltZZowhSxx-fCkPwE0Q.roa (raw, json)
Hash identifier: MzAd2Z7tz0qS3U5SYFYFeZOr+pbKxOuBMY35o5CAYuQ=
Subject key identifier: 28:EB:D9:DF:2C:D9:96:D6:59:A3:08:52:C7:1F:9F:0A:43:F0:13:44
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824DABCA520F65A63ED8AEABC22840B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KOvZ3yzZltZZowhSxx-fCkPwE0Q.roa
Signing time: Thu 02 Jan 2025 17:51:31 +0000
ROA not before: Thu 02 Jan 2025 17:51:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401115
IP address blocks: 87.120.112.0/22 maxlen: 24
87.120.116.0/23 maxlen: 24
87.120.125.0/24 maxlen: 24
87.120.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:da:bc:a5:20:f6:5a:63:ed:8a:ea:bc:22:84:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28ebd9df2cd996d659a30852c71f9f0a43f01344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:c8:e1:66:ff:18:5d:e2:5c:43:3a:64:2e:
39:b3:18:a4:dc:73:a8:00:b1:b7:50:17:e5:50:be:
55:26:32:55:8e:e8:ab:16:13:bc:3c:d7:fd:53:da:
4a:a6:7e:27:e1:98:df:19:fa:6c:ee:42:22:c4:12:
92:d3:ed:40:05:8b:8e:b6:a4:58:17:f8:c2:1f:6a:
13:81:5f:59:f5:01:99:69:1c:4d:24:63:54:de:f7:
04:3e:c2:3c:10:e3:4e:d9:74:dd:08:fd:e2:a7:8e:
06:b6:76:8d:ce:ab:e6:88:b4:ac:49:5d:da:8d:ed:
f6:81:f0:78:94:d0:70:10:2e:66:90:aa:9c:41:16:
c5:94:b1:69:15:d6:ae:ff:dc:8c:fd:86:8a:a0:12:
0d:a3:3a:a5:c9:a5:99:7a:ab:d4:f2:6c:54:95:d8:
77:98:1e:82:c7:6f:5c:a6:20:ec:1c:83:d3:04:6c:
69:7b:d5:48:de:ec:df:85:57:86:76:e4:0b:0b:cf:
9e:c8:e0:47:d0:6a:4d:4b:59:7e:06:9f:2b:06:0b:
8b:b8:cb:c7:82:1f:07:d7:47:eb:31:bf:83:cf:36:
dc:a7:d3:6b:f6:57:2c:e0:1b:45:64:f2:02:7e:f0:
6b:8f:94:79:db:30:cc:07:b1:3d:67:ea:0f:9a:73:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:D9:DF:2C:D9:96:D6:59:A3:08:52:C7:1F:9F:0A:43:F0:13:44
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KOvZ3yzZltZZowhSxx-fCkPwE0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.112.0-87.120.117.255
87.120.125.0-87.120.127.255
Signature Algorithm: sha256WithRSAEncryption
39:a6:bd:ed:67:0c:1c:29:df:eb:26:0a:9d:14:b9:c9:a5:f4:
f1:65:a0:c1:69:d5:9b:97:9e:30:06:40:9c:a5:d1:5e:49:a9:
c2:56:c3:ba:55:1a:7a:bc:bd:83:7c:fe:fb:c5:62:a0:60:c1:
a0:7c:df:7f:ad:02:93:6c:55:04:c4:50:50:f5:39:0c:1a:5d:
1e:49:2e:4e:97:43:50:6a:e0:8d:51:b4:8f:41:35:e7:32:5e:
a0:5e:12:7b:46:da:da:3e:e4:5d:64:40:c4:28:cd:e9:83:a6:
72:2b:c8:75:0f:08:e8:68:be:e0:32:bc:a6:9d:8c:68:0a:32:
ee:00:1c:eb:8a:fe:3a:da:d1:83:02:04:f7:99:66:07:77:f1:
af:13:ec:3b:7a:00:e3:a6:86:be:80:a2:15:43:93:10:ec:03:
9c:76:f9:de:f7:a7:8f:fc:a0:8c:1c:ec:34:b6:ef:9f:84:ff:
89:28:fe:ac:2a:68:61:53:db:b0:33:fa:fb:c1:c1:35:47:4d:
3e:9a:16:05:a0:4b:34:f4:16:89:ff:c4:c8:77:03:b0:59:01:
ad:03:ee:3d:d5:47:0b:58:b9:b3:37:fa:33:66:e1:b9:b4:42:
24:56:7c:b4:c4:81:95:e5:49:2e:f2:98:03:ac:03:81:17:f1:
12:31:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:30:58 2025 by rpki-client