Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/if3KaihHpbg1Z08V6cXxVYQmFhk.roa
File: if3KaihHpbg1Z08V6cXxVYQmFhk.roa (raw, json)
Hash identifier: 4GJMU1mopT3EhZuM0ayjHedY3bbBO8iZn11kZBRbuts=
Subject key identifier: 89:FD:CA:6A:28:47:A5:B8:35:67:4F:15:E9:C5:F1:55:84:26:16:19
Certificate issuer: /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial: 01941F8C45B6390B84EE7C2B9B67B36E37F2
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/if3KaihHpbg1Z08V6cXxVYQmFhk.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35729
IP address blocks: 87.252.96.0/21 maxlen: 24
87.252.104.0/23 maxlen: 24
87.252.126.0/23 maxlen: 24
2a01:4600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:45:b6:39:0b:84:ee:7c:2b:9b:67:b3:6e:37:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89fdca6a2847a5b835674f15e9c5f15584261619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:73:7e:96:a8:88:8e:b5:6b:52:19:ee:7c:
73:f6:05:71:51:6d:78:09:94:26:0e:80:05:1d:f8:
2b:25:a0:0e:fd:57:01:c7:3b:15:a9:7e:41:92:fb:
d8:1a:09:17:60:05:59:1b:b7:22:ae:68:79:2b:a4:
bf:4d:36:23:8a:3e:bd:49:97:ee:82:04:be:98:ff:
ee:a4:2f:7d:57:03:b1:58:28:84:64:13:d1:69:12:
06:75:0b:f2:d5:e7:f5:d8:45:27:02:3d:bd:60:af:
0a:82:43:77:43:fa:a3:68:c8:45:56:28:b0:73:cc:
34:40:10:18:12:d7:4d:0e:c2:78:5a:27:89:ef:d6:
05:f0:6c:aa:4b:14:8f:56:ec:85:6e:a2:21:06:95:
42:e4:60:6d:76:5d:28:48:a7:1b:5e:8c:50:9c:53:
59:0f:6e:6e:bb:9b:bf:9d:dd:34:ea:13:65:43:21:
c2:35:a1:fd:af:c5:c1:30:46:61:5b:8a:83:3f:ce:
58:71:65:4e:a6:fc:a0:dc:fc:4e:f6:1a:da:c4:c6:
7e:43:cd:a9:86:9f:b5:79:4a:f0:13:3b:ce:3e:e8:
fb:83:c8:47:94:2c:58:28:66:86:77:c1:68:90:65:
9f:90:81:b1:54:2c:1e:35:11:23:bc:54:d0:1a:38:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FD:CA:6A:28:47:A5:B8:35:67:4F:15:E9:C5:F1:55:84:26:16:19
X509v3 Authority Key Identifier:
keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/if3KaihHpbg1Z08V6cXxVYQmFhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.96.0-87.252.105.255
87.252.126.0/23
IPv6:
2a01:4600::/32
Signature Algorithm: sha256WithRSAEncryption
de:12:53:c7:8a:ea:9b:31:be:14:19:28:31:ce:8a:dd:20:ed:
06:54:df:0e:15:2e:c8:0f:c0:36:72:2e:19:26:56:26:a7:65:
5a:bd:e7:e1:7b:b2:0c:8c:9a:7f:f4:67:97:31:90:3a:90:ef:
80:fe:c1:43:45:96:31:ee:d0:3a:30:3f:52:37:9c:9b:ec:b7:
99:73:cb:06:37:21:8c:d3:11:17:58:4d:4b:e0:49:c7:ee:84:
10:13:48:b9:f9:e6:2e:b0:90:53:87:56:0c:be:d0:88:bb:7c:
0b:bc:7a:51:df:fc:62:2b:d5:31:3f:35:8c:48:17:4a:e4:2f:
2d:bb:f5:50:c9:f2:ec:7a:67:f4:2c:4c:14:f7:36:ae:3d:49:
8d:67:f7:ce:63:69:b9:3b:fb:1e:46:19:90:bd:de:58:e6:62:
0a:a4:2d:2f:7f:e0:ea:ab:bd:7e:a2:ea:08:6f:09:ef:22:c2:
6e:ff:29:19:10:9f:2c:46:c3:7f:7f:c7:83:ca:8d:75:b3:02:
1b:1b:44:0b:9a:ea:1f:f9:ac:2c:30:33:05:89:85:da:06:d3:
20:2f:58:f9:fe:6c:bb:b0:e7:51:6e:e0:bf:a6:3d:b4:1c:65:
58:dd:e4:9a:0c:16:2f:7d:84:5f:75:f2:9e:81:dd:fa:53:60:
45:cd:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:46 2025 by rpki-client