Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/o1JVWuEuZPta2YEvpJ2jdJYR8K8.roa
File: o1JVWuEuZPta2YEvpJ2jdJYR8K8.roa (raw, json)
Hash identifier: qNV/P5sCJuhJ/7lvmy6L/P1vDN6QSvQRrwuS+5DqKkg=
Subject key identifier: A3:52:55:5A:E1:2E:64:FB:5A:D9:81:2F:A4:9D:A3:74:96:11:F0:AF
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0194266C1BB1B196CC26178647C592D4B442
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/o1JVWuEuZPta2YEvpJ2jdJYR8K8.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60337
IP address blocks: 87.252.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1b:b1:b1:96:cc:26:17:86:47:c5:92:d4:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a352555ae12e64fb5ad9812fa49da3749611f0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b4:f7:2e:b3:34:fd:88:2c:37:ee:b5:be:bf:
8d:66:1b:d5:f9:95:a0:14:84:e6:71:15:d3:43:ab:
ff:b4:48:5d:77:0d:4b:7c:c3:96:47:91:d6:30:6d:
84:3a:40:06:20:20:af:99:7e:70:58:d4:9a:bb:fa:
93:e4:a5:f1:ed:8d:71:36:be:97:ca:94:e3:d6:c3:
28:8e:1b:47:a0:77:4e:ed:3b:ea:be:58:49:00:b9:
db:d8:1b:e6:39:2a:eb:f8:49:86:b5:83:07:46:af:
a5:29:a6:da:d0:25:1b:2e:f3:e8:cc:29:b9:3e:1b:
65:ae:27:ac:35:a5:a5:2c:1c:09:89:49:9a:31:ad:
1c:c0:32:8b:c5:58:df:9d:2e:13:9e:75:53:f2:c2:
7a:84:35:4a:5a:30:81:a4:a2:83:1d:94:5c:37:e1:
0c:99:00:1c:c7:31:53:cd:05:9f:ad:32:b9:96:53:
10:ed:f8:60:ee:5d:fe:81:91:64:ae:3b:08:5b:de:
8a:d0:08:bd:72:ba:66:36:ef:8b:1c:58:7d:cf:81:
4c:4d:33:ee:ef:d3:86:0a:cf:23:a9:0e:df:f6:be:
28:c7:e4:e1:a0:c5:3d:ee:ef:0b:20:ae:d3:8e:c4:
05:5b:ae:a8:76:dc:6c:e7:32:11:f2:1b:a5:1e:5e:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:52:55:5A:E1:2E:64:FB:5A:D9:81:2F:A4:9D:A3:74:96:11:F0:AF
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/o1JVWuEuZPta2YEvpJ2jdJYR8K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.240.0/24
Signature Algorithm: sha256WithRSAEncryption
71:74:eb:b6:dc:d7:0a:c7:94:5b:5b:23:85:f2:ed:e3:79:61:
e2:e1:03:85:6e:fc:dc:17:00:94:4e:1b:23:99:23:fc:9b:d4:
a2:ab:e8:a2:09:62:61:5d:e3:82:2f:2e:79:da:bf:20:1c:7a:
42:04:31:56:3a:28:a5:b8:9d:fe:20:b9:f7:63:7d:a0:d2:cd:
f0:84:aa:a5:f8:c6:18:ed:34:56:15:f7:1b:01:fb:ee:97:6e:
7b:5b:42:0d:57:79:c7:70:78:13:f9:c2:b4:48:30:7b:09:a7:
94:76:7f:b8:4d:77:5b:77:75:d7:bb:78:d3:71:14:9a:16:d6:
3b:54:2c:21:0e:51:f3:ef:ce:b9:c0:94:4d:96:17:cd:9c:3b:
6d:63:92:62:52:b2:d7:29:30:3e:75:7b:fe:43:17:98:2e:9c:
41:6a:87:cf:85:cf:71:4a:1c:12:44:db:8a:d5:10:7a:83:34:
86:56:fa:bb:8f:64:a0:d3:e1:0e:3b:c2:bd:1a:33:1c:8c:38:
c5:9a:3f:05:19:9d:bb:ac:e9:0e:ae:ec:02:14:b3:d6:99:24:
2b:19:1a:28:f7:6d:a7:f9:69:93:ff:69:d7:5d:54:ba:47:c7:
1c:fe:ab:00:0d:b3:cf:85:df:6e:5e:50:de:32:81:bd:8c:cf:
40:0a:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:31:26 2025 by rpki-client