Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ynyNX8jCqtWvIpvAnF0JERz1siA.roa
File: ynyNX8jCqtWvIpvAnF0JERz1siA.roa (raw, json)
Hash identifier: M++sOStaSzpGvfHp5ecIBx/dN5fSv0IG/huGiY5pHkk=
Subject key identifier: CA:7C:8D:5F:C8:C2:AA:D5:AF:22:9B:C0:9C:5D:09:11:1C:F5:B2:20
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B96716119C6ED9AA27B968524B1B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ynyNX8jCqtWvIpvAnF0JERz1siA.roa
Signing time: Thu 02 Jan 2025 17:51:22 +0000
ROA not before: Thu 02 Jan 2025 17:51:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209628
IP address blocks: 87.121.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b9:67:16:11:9c:6e:d9:aa:27:b9:68:52:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca7c8d5fc8c2aad5af229bc09c5d09111cf5b220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:f1:aa:93:2b:12:8a:dd:5b:02:7f:b1:03:
f1:ce:1a:e1:59:5e:a3:90:ef:7a:11:06:e3:f6:a4:
f9:e4:44:d3:83:40:aa:5f:93:be:a8:ad:04:ff:f2:
94:6c:42:a4:53:97:3d:c6:83:4a:e2:c3:67:a3:19:
8c:8f:f3:0c:22:92:a9:de:74:6f:87:c0:db:15:5c:
9a:d7:88:03:f8:b8:01:a3:fd:1b:14:22:bf:92:46:
88:60:a7:4c:b9:cd:ab:23:6b:77:94:ae:8d:1d:38:
25:6a:8a:c0:7d:cc:18:96:e0:24:f9:f6:c2:b9:e3:
51:4b:56:60:5f:98:0c:6d:32:0f:c6:af:96:c8:0b:
63:7a:54:ae:0e:1e:b4:1d:9b:e1:31:f7:11:f7:a2:
02:93:17:a0:e7:06:cb:fd:7f:7d:a8:c5:6a:d3:0e:
c0:6e:89:8a:2b:d0:e5:82:fa:61:16:6a:47:4e:d1:
14:c4:a5:75:90:60:b8:61:c6:34:3e:c2:fc:e0:28:
26:15:b4:79:06:04:4b:78:e0:37:02:3b:f2:f8:79:
db:2d:3e:3a:f3:0e:45:0e:12:94:d4:5a:e1:79:2b:
79:2e:37:67:48:2e:52:50:fe:b8:9a:14:ac:42:c9:
e7:e6:ce:06:3d:c7:8b:70:2f:a0:6a:6f:d5:f9:88:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:8D:5F:C8:C2:AA:D5:AF:22:9B:C0:9C:5D:09:11:1C:F5:B2:20
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ynyNX8jCqtWvIpvAnF0JERz1siA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.54.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:5d:ca:0e:c5:7d:57:9c:df:79:b2:f1:54:b8:66:ac:08:7b:
3b:9c:82:c8:8f:3b:87:c9:17:4a:6c:a1:74:8c:76:9b:7f:72:
0b:0a:8b:91:8a:96:47:cd:9f:f3:e2:10:4a:83:5e:ff:66:32:
99:b5:fb:12:3e:3b:aa:c4:e5:e7:9d:83:ab:6f:36:04:b0:b4:
c9:49:c7:e5:a9:8a:d9:33:f2:03:6a:f4:7e:aa:18:82:94:3b:
93:ad:9d:23:95:4b:2d:14:e9:e5:dd:76:c4:bc:a7:73:60:ea:
3f:77:17:55:df:ae:b3:ff:d4:44:d6:56:ec:ba:dc:ea:4b:9e:
57:be:4d:9d:33:40:0f:49:11:f0:a3:6a:60:63:39:14:1d:16:
91:0a:ae:13:4b:cc:14:cd:93:87:fd:8a:3f:d1:d5:2d:a7:82:
d9:6a:ee:fc:ee:85:21:8b:84:39:f6:33:5e:98:df:2e:f6:c8:
16:d1:49:7a:9d:a7:5f:14:c1:d9:2d:3c:f1:4b:1c:9e:a6:89:
6f:bc:65:53:47:ff:75:12:7e:37:5c:ff:2b:e8:e7:13:c7:6d:
18:cc:ee:82:96:5e:7a:cf:b1:c6:39:3e:ff:9c:4c:20:86:2b:
58:4c:e4:f7:fa:a3:c2:bc:45:04:4d:fc:8c:c7:55:43:10:05:
b3:41:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:02:15 2025 by rpki-client