Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/53KqbajJkABxQADjbHVlPygTcKc.roa
File: 53KqbajJkABxQADjbHVlPygTcKc.roa (raw, json)
Hash identifier: kwajHsXo697+03N+LHzWo8d+aEKRsJl5vDuyUDMyntE=
Subject key identifier: E7:72:AA:6D:A8:C9:90:00:71:40:00:E3:6C:75:65:3F:28:13:70:A7
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 0194206823122AF2608ED6E4E5D293F92C1A
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/53KqbajJkABxQADjbHVlPygTcKc.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39311
IP address blocks: 87.237.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:23:12:2a:f2:60:8e:d6:e4:e5:d2:93:f9:2c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e772aa6da8c99000714000e36c75653f281370a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:0b:92:74:1e:b9:2f:67:da:23:ae:23:fd:
1e:c2:a5:d8:b9:a7:db:c8:64:09:9b:8a:69:51:47:
14:45:8d:2a:32:31:6c:61:e3:8c:9b:fe:f9:64:18:
04:bb:ac:af:eb:96:79:66:7c:b5:be:42:f4:f8:e5:
a9:f0:5d:3c:ef:6a:26:f4:42:d2:32:ce:b6:48:0d:
00:5f:cf:3e:24:8a:ec:37:ca:3b:33:0c:22:e1:03:
9c:2b:91:88:6d:81:ec:41:42:e9:42:4b:43:c8:d2:
2f:37:3b:61:47:c2:57:46:71:a0:0a:ae:8b:b4:1c:
be:2d:6c:81:11:a2:59:68:b9:ba:d4:f1:fb:88:42:
9d:3f:53:ec:94:95:9a:00:19:a2:c9:c6:3d:82:17:
4f:ed:b0:1b:80:68:4c:3e:33:3c:26:58:99:80:ca:
30:1f:89:60:fe:74:31:24:8b:12:79:25:ed:b5:07:
12:42:1a:bf:10:cc:e0:a7:6e:d2:2c:f1:9b:1e:7a:
54:e4:78:d5:02:a6:77:5e:41:6d:72:9d:b4:f6:2a:
9c:a2:ea:50:a2:d1:c7:c0:d3:8c:dd:f2:55:d4:06:
76:97:86:5a:98:d7:f3:ae:40:b5:5b:62:06:13:1d:
03:0a:5b:fa:15:af:d3:7e:5d:12:7f:6c:02:5f:a5:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:72:AA:6D:A8:C9:90:00:71:40:00:E3:6C:75:65:3F:28:13:70:A7
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/53KqbajJkABxQADjbHVlPygTcKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.200.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4c:19:58:2c:45:8c:6d:9b:5f:c3:7c:ba:f2:82:9b:75:01:
08:45:0d:36:f2:9e:11:f5:c2:f6:d3:d6:d4:45:7c:6b:76:08:
47:46:b5:a3:69:1c:c5:11:cc:e2:8c:17:f6:aa:4b:d9:44:cf:
37:68:13:63:70:2c:37:55:40:29:81:80:de:f2:7c:c6:e1:82:
71:e7:1d:b0:9f:a0:e6:9b:a6:35:6f:2a:cf:14:c8:4f:33:76:
a0:52:e9:17:92:df:34:96:6f:a4:f1:97:63:f7:20:d8:b2:aa:
6d:cb:c5:0d:7c:0f:95:90:2b:e8:c9:8f:ae:8b:8a:08:d8:a9:
ad:c4:7f:91:7e:d3:4f:e1:33:07:9d:a3:8d:e3:e3:18:15:8e:
b6:de:30:6e:b4:6a:cc:4a:41:da:75:22:bc:a3:25:18:41:c4:
49:e3:77:c6:6f:42:ee:c8:1d:08:4c:cb:d1:fa:1a:8e:9a:25:
34:1d:25:48:b6:91:c6:90:26:ac:a5:91:86:33:4b:8c:97:d2:
78:55:0a:20:e8:bf:3b:bb:e9:2e:57:05:9c:41:c9:5a:e3:1f:
df:06:0d:dc:17:e5:b7:bd:4a:93:41:1f:39:b7:27:44:d9:d4:
95:e2:1f:55:17:d7:ec:17:0f:60:09:59:d8:fd:02:43:8f:5c:
03:5a:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:10 2025 by rpki-client