Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa
File: wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa (raw, json)
Hash identifier: G7Rk/RipLXF/QPRugyDtoGfESmr50WO1Zig00oPYW14=
Subject key identifier: C0:EE:2D:29:15:81:C0:90:05:FD:38:BD:5C:FF:BC:CA:34:59:B9:45
Certificate issuer: /CN=90218e801a532595e9b71c643684ea05f96bf5f3
Certificate serial: 019426D91FCC507A7CDCD1936B99F1F2BAF8
Authority key identifier: 90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa
Signing time: Thu 02 Jan 2025 11:49:11 +0000
ROA not before: Thu 02 Jan 2025 11:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9205
IP address blocks: 87.76.128.0/17 maxlen: 17
87.76.254.0/23 maxlen: 23
193.110.112.0/22 maxlen: 22
193.110.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1f:cc:50:7a:7c:dc:d1:93:6b:99:f1:f2:ba:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90218e801a532595e9b71c643684ea05f96bf5f3
Validity
Not Before: Jan 2 11:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0ee2d291581c09005fd38bd5cffbcca3459b945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:10:9c:59:4d:b6:f3:93:f6:6f:b2:a5:e4:
d7:c5:31:23:cc:b5:ea:19:cc:35:1d:e8:fc:87:ee:
41:3d:d8:dd:3a:a8:da:e4:ed:6a:57:01:80:e5:05:
88:b6:53:50:f2:68:0b:65:76:08:5c:4d:74:0e:c2:
be:e0:f9:ce:c1:5a:84:6f:b5:68:9c:db:7d:25:9d:
23:70:06:00:a3:82:6b:ce:21:06:23:1c:35:aa:7a:
6f:e5:3f:00:54:dc:fb:9c:70:04:5a:c9:86:f1:b3:
0f:b7:2b:cd:68:32:82:8c:a3:7e:0e:4d:f0:4a:f4:
63:41:27:d1:11:ea:4e:91:19:46:47:11:36:4a:2a:
35:85:6a:93:db:70:63:a0:67:d1:f6:b9:7b:5a:8f:
e5:0a:6b:ec:b9:13:d1:6d:e4:75:cb:9f:16:91:44:
ef:f1:e0:20:ee:52:f0:96:49:24:90:3e:3f:da:48:
77:44:9d:68:be:ab:ab:a8:5e:df:4c:01:53:b2:fe:
9a:ee:73:26:a1:ce:02:03:42:a9:1e:54:fd:50:32:
d3:93:2e:ba:ed:0e:85:c5:6e:21:14:b8:58:6e:b8:
53:20:86:b3:29:29:17:67:aa:59:c7:4d:d6:c7:26:
81:2a:5b:43:f5:4a:6b:26:74:4d:31:34:ec:90:11:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EE:2D:29:15:81:C0:90:05:FD:38:BD:5C:FF:BC:CA:34:59:B9:45
X509v3 Authority Key Identifier:
keyid:90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.128.0/17
193.110.112.0/22
Signature Algorithm: sha256WithRSAEncryption
22:ba:ff:84:61:54:99:6d:51:1e:ee:40:ad:40:18:dd:bc:3e:
11:3b:7b:ae:cc:47:7b:9e:9e:e0:45:be:93:35:32:2f:4b:e6:
4f:90:0d:a0:5d:ad:40:d7:b5:40:fe:a2:59:73:a8:68:09:1f:
d2:60:2e:cd:f5:88:54:ca:66:bf:da:05:b5:07:85:46:7a:a1:
3e:72:72:c2:1a:72:bb:46:d3:20:91:3e:ec:3e:7c:ad:47:d5:
90:1a:09:b7:c4:8c:59:56:f9:1f:66:85:a9:7f:34:56:27:d5:
2a:1f:e0:0a:39:43:e2:9c:86:cc:a1:cc:cd:b7:b5:3a:f2:7a:
b3:47:4d:7f:b5:9a:f6:4b:48:ac:68:e4:83:15:ea:2a:4c:8c:
00:5d:cc:97:72:ec:4c:80:4e:1d:30:02:46:a2:b7:45:8b:a1:
62:33:a2:11:bc:c6:be:aa:71:35:ff:bc:7d:40:7c:fd:22:9d:
88:6f:95:ba:14:b4:89:c7:c6:e2:ef:95:d8:41:6e:79:d4:76:
2a:fb:7f:fc:ad:b4:ba:df:4e:09:fe:af:ef:35:cf:09:57:8a:
96:cc:a7:57:13:89:e9:43:91:d5:aa:25:09:c2:57:e2:62:3b:
32:82:5d:77:b6:f6:85:50:9c:24:47:f5:08:d8:e9:c5:c1:1d:
b3:af:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:44 2025 by rpki-client