Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/3wR1X7qeiV3Us_sYJwiLPsDNiag.roa
File: 3wR1X7qeiV3Us_sYJwiLPsDNiag.roa (raw, json)
Hash identifier: sVmRoOG1wqqDxd7JOMuBur0va/KN44y5/hVue29WGbc=
Subject key identifier: DF:04:75:5F:BA:9E:89:5D:D4:B3:FB:18:27:08:8B:3E:C0:CD:89:A8
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 019427B5143FCDBB316EE0CE7D8690F2F11E
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/3wR1X7qeiV3Us_sYJwiLPsDNiag.roa
Signing time: Thu 02 Jan 2025 15:49:26 +0000
ROA not before: Thu 02 Jan 2025 15:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50716
IP address blocks: 87.76.0.0/20 maxlen: 22
91.239.16.0/22 maxlen: 22
109.197.192.0/21 maxlen: 22
176.116.136.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:14:3f:cd:bb:31:6e:e0:ce:7d:86:90:f2:f1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Jan 2 15:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df04755fba9e895dd4b3fb1827088b3ec0cd89a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:ae:0f:bd:f2:f3:45:31:5a:7d:15:36:70:
ff:e9:8b:d5:38:a2:6c:0f:df:02:91:22:0f:94:19:
d0:f7:41:43:66:15:e9:7f:19:75:78:8e:77:23:38:
ed:a9:d6:71:00:a0:3d:c8:9c:4e:36:f8:2e:fb:dd:
7f:99:9e:91:05:63:98:2d:74:68:0e:4f:20:83:80:
83:00:fb:c8:37:69:ae:e3:67:f6:20:4f:4b:38:01:
41:cd:ab:b2:8f:d3:ef:03:53:5f:1a:05:4d:d7:cd:
be:42:4a:1f:e9:6c:6c:74:40:e1:08:7f:1d:69:18:
88:43:c9:73:95:d7:bd:34:74:e8:33:59:57:e6:39:
cb:76:4f:c0:15:da:b6:66:72:72:5e:18:93:00:52:
7f:43:62:fb:2c:7b:41:80:39:3f:04:3a:a0:b6:49:
10:27:7b:7f:03:1c:92:ce:bc:f7:52:9e:c5:db:33:
21:6d:85:8c:d7:4b:7b:bf:78:53:dd:8b:d1:c8:41:
21:0a:0d:d1:66:00:5f:4e:40:84:c9:23:ae:84:ae:
3b:ed:dc:e9:d2:5b:34:67:5b:a2:a0:19:9f:4a:6b:
0f:5c:9f:cc:a5:3b:20:8d:26:d3:de:84:18:e0:95:
e3:07:43:a9:81:37:7f:cf:f1:4a:45:76:95:fd:c5:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:04:75:5F:BA:9E:89:5D:D4:B3:FB:18:27:08:8B:3E:C0:CD:89:A8
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/3wR1X7qeiV3Us_sYJwiLPsDNiag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.0.0/20
91.239.16.0/22
109.197.192.0/21
176.116.136.0/21
Signature Algorithm: sha256WithRSAEncryption
30:a1:7e:e3:e7:e8:69:b0:23:29:a6:ab:0d:85:c2:af:0d:f0:
3f:72:94:bd:33:e9:a3:ca:34:2d:8b:7e:12:fc:9b:ad:ab:50:
7b:87:06:3c:8a:a4:8b:b9:f4:c1:33:cc:89:4d:dd:cd:fa:c5:
b5:34:30:de:ba:fe:03:c9:2b:22:57:00:fd:34:0f:84:ad:f0:
4b:09:50:ee:16:e0:78:67:c9:7b:f3:32:14:a9:e9:12:3a:db:
b8:52:35:a1:ad:9e:3e:b5:af:b1:bb:53:65:e4:c0:24:c1:db:
98:fb:11:6f:37:9d:96:9c:8a:02:36:c5:c0:16:3f:a8:98:2b:
1a:29:ff:ee:bd:4f:38:42:83:15:2e:e2:17:65:46:f3:dc:27:
b8:d5:96:3c:08:c9:fc:a4:8b:b7:d8:4c:6a:92:cb:26:f1:2d:
94:93:75:29:e4:05:0b:7a:62:16:14:eb:2c:f4:fd:fd:dd:e9:
8e:dc:04:dd:c3:cb:ae:8a:63:b1:30:ad:19:41:66:14:32:25:
ab:7c:9a:c2:1e:a7:79:53:c6:54:46:2c:0e:c6:8b:7b:67:82:
15:54:31:20:8e:06:30:91:d4:df:be:26:fb:30:d5:33:42:c4:
33:e9:bc:ec:1e:c9:22:73:78:3b:db:38:b4:8f:b1:1d:9e:61:
b2:4d:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:26 2025 by rpki-client