Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/oQUx3CaetTGOoOfH7R_GIuQC9ZM.roa
File: oQUx3CaetTGOoOfH7R_GIuQC9ZM.roa (raw, json)
Hash identifier: QXtVeIAnBIaJbBWzjL0HKxzProdKFi/c2re+3CNcveM=
Subject key identifier: A1:05:31:DC:26:9E:B5:31:8E:A0:E7:C7:ED:1F:C6:22:E4:02:F5:93
Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial: 01942067CD75221A1C948813B3279311F839
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/oQUx3CaetTGOoOfH7R_GIuQC9ZM.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39662
IP address blocks: 87.239.120.0/21 maxlen: 24
87.239.121.0/24 maxlen: 24
93.190.96.0/21 maxlen: 24
93.190.102.0/23 maxlen: 23
2a00:13f0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cd:75:22:1a:1c:94:88:13:b3:27:93:11:f8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a10531dc269eb5318ea0e7c7ed1fc622e402f593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:cd:b8:d4:33:3a:66:d9:6c:9d:38:ec:54:
c8:b7:d8:6a:ec:87:fd:d2:53:1d:10:07:ef:68:01:
f2:91:10:92:c3:02:c1:df:53:99:43:7e:ff:a4:e5:
d9:3f:0b:b0:05:4a:6f:51:24:6b:85:9b:be:f6:6e:
20:36:87:31:0b:5f:51:42:2b:a8:41:5f:6c:de:5f:
20:d8:1f:24:ab:19:b4:c1:70:31:1f:e3:1c:99:2c:
c0:98:50:21:5c:f9:9d:19:fc:85:a6:55:26:b2:f9:
54:7b:24:83:4f:81:1a:b9:dc:b7:57:cd:2a:3b:b1:
19:c2:26:66:7f:c6:99:49:c9:0d:20:1b:dd:3e:39:
51:95:03:ca:90:49:02:8e:ae:37:66:7a:06:10:71:
81:92:8a:d9:7d:cf:6e:ed:b3:57:25:32:d4:48:b7:
69:37:0c:dc:03:a0:f2:98:af:27:45:5c:2c:70:04:
cb:5b:47:41:cd:83:85:01:e6:ed:d1:79:2a:79:cd:
4c:8a:cc:7a:42:23:4a:fa:e2:28:ee:94:16:54:16:
24:d4:26:a9:25:51:8b:24:fb:35:6b:ef:7f:85:f1:
2d:bb:6b:d1:ad:06:22:32:a0:11:0a:a0:85:1e:fe:
26:cb:55:f7:82:98:03:1f:74:33:f8:5d:d0:3c:98:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:31:DC:26:9E:B5:31:8E:A0:E7:C7:ED:1F:C6:22:E4:02:F5:93
X509v3 Authority Key Identifier:
keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/oQUx3CaetTGOoOfH7R_GIuQC9ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.120.0/21
93.190.96.0/21
IPv6:
2a00:13f0::/32
Signature Algorithm: sha256WithRSAEncryption
68:f4:ff:5d:13:80:df:75:5e:39:c6:24:43:4a:4a:73:d7:9f:
76:a6:15:dd:de:b6:f1:35:96:84:df:f5:0a:b9:af:23:85:0d:
67:23:e4:ff:f3:63:bf:65:f3:b7:6e:52:aa:f6:66:f6:b2:c8:
1d:07:10:26:e5:0c:a7:61:0a:f4:2a:3e:da:6b:40:cd:16:13:
e2:81:24:5b:11:49:6a:ca:78:c5:71:f8:36:f0:19:0e:53:ea:
1d:4b:2d:26:7b:67:e6:6c:9f:b3:e7:9b:04:97:07:35:df:c5:
5b:c6:0a:0f:93:3d:45:a7:07:7a:ac:c4:82:dc:5f:12:b8:27:
28:48:c0:fc:b7:a0:68:34:d6:5c:32:93:65:10:3e:ae:e5:4a:
9c:cb:1a:4e:d8:e9:7f:e3:57:24:33:cb:e8:65:34:7e:f0:e3:
d7:43:03:23:6b:c6:84:e0:69:53:82:2d:62:92:e5:80:40:91:
db:3b:7b:11:9c:52:e1:3a:c4:c0:72:aa:41:3f:65:77:56:32:
01:37:db:2b:44:94:2c:44:1c:a0:71:d9:d9:03:82:56:71:30:
2e:d0:53:3d:18:ba:f7:8c:af:aa:40:e5:7a:15:e2:93:68:53:
8f:1c:b4:13:d4:6f:72:75:e5:33:a7:4d:77:ec:0a:fc:d5:65:
fb:0e:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:18 2025 by rpki-client