Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/E3EYsQ-uUitSTGopdX5VHSSWgY0.roa
File: E3EYsQ-uUitSTGopdX5VHSSWgY0.roa (raw, json)
Hash identifier: MrQu9yALxWquFa2hJbLK2jaSXi/09qL7GXR3Xm7JLUo=
Subject key identifier: 13:71:18:B1:0F:AE:52:2B:52:4C:6A:29:75:7E:55:1D:24:96:81:8D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01955B82977AF78D213B334B42596A525072
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/E3EYsQ-uUitSTGopdX5VHSSWgY0.roa
Signing time: Mon 03 Mar 2025 10:17:19 +0000
ROA not before: Mon 03 Mar 2025 10:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:82:97:7a:f7:8d:21:3b:33:4b:42:59:6a:52:50:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 3 10:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=137118b10fae522b524c6a29757e551d2496818d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:be:1f:09:61:0a:3f:7e:71:1f:66:cd:ea:
f1:95:b0:f1:76:53:65:0d:a2:ae:4c:8d:bb:47:75:
fe:64:e7:f8:34:17:39:1b:91:31:0c:ff:a4:2a:92:
8a:bc:d6:de:40:8e:96:60:88:bb:12:d9:c0:3a:d6:
d1:49:59:00:cf:78:48:62:04:2a:93:cf:77:d7:e5:
38:86:04:5d:c4:9d:c8:67:2c:9d:5e:ef:a0:2d:9c:
21:06:ed:c0:ad:e6:d0:28:0a:30:83:ee:b1:7c:9c:
64:c1:b0:90:d3:78:46:31:91:b7:fb:9b:16:6f:53:
91:ad:0b:75:20:a8:e2:78:7e:54:be:68:b0:8e:90:
2d:43:80:7d:8e:c7:05:35:73:b4:57:20:13:82:65:
09:d2:40:e6:90:b0:83:1d:8c:3a:41:af:6d:3e:51:
ec:b7:ae:35:2d:39:ca:7e:3c:c8:94:69:02:60:34:
53:4b:3d:fa:4d:fc:0c:4d:0a:e1:59:81:b0:68:48:
eb:55:be:4e:34:b2:82:03:0f:07:57:5a:2b:53:a9:
fd:99:ee:4c:6e:db:8a:2d:ca:a3:f8:bf:9e:71:41:
27:97:0b:f9:b5:e6:d1:44:4e:8a:af:84:9d:e9:b3:
de:a2:ef:c9:99:be:7e:ff:0f:8f:4a:39:3f:7c:5b:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:71:18:B1:0F:AE:52:2B:52:4C:6A:29:75:7E:55:1D:24:96:81:8D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/E3EYsQ-uUitSTGopdX5VHSSWgY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bf:7e:69:0e:af:ef:f2:ce:e7:75:a8:83:c0:07:aa:64:5c:
25:6c:74:ab:a8:c8:3f:d7:2f:17:69:08:1d:ac:42:cf:61:95:
b0:08:24:ec:90:36:a0:63:e3:80:11:40:f7:23:07:65:0e:4d:
c2:9e:a5:fa:1a:f0:d9:4e:98:a1:a1:2f:06:a9:47:01:0a:f2:
91:ba:9a:68:ad:a5:95:37:a6:d9:d3:20:d1:29:fb:8d:49:9f:
a0:7b:ba:c4:b2:bf:70:07:08:38:b6:ef:e8:3a:e6:af:3d:31:
a7:13:b4:bf:a7:27:e2:d6:39:ac:b4:79:d1:1d:b8:a0:aa:de:
c7:f0:aa:6e:0b:0f:d8:ee:4a:6f:45:23:ff:87:99:71:2b:4c:
4b:09:ed:75:83:0e:94:ca:62:4a:91:76:c7:84:ca:32:0e:8b:
2d:a8:3a:e7:b8:b1:2e:10:cf:80:84:5c:04:10:f2:59:7e:a8:
e6:50:8d:f3:20:d3:53:17:ae:cf:1c:5d:b4:00:f6:33:4a:5f:
b1:b3:2f:71:3e:bb:c4:ef:74:15:a1:82:24:54:35:5f:5a:82:
99:e1:01:c3:e9:a2:be:93:f9:06:13:a2:6f:b9:06:7d:53:df:
e1:d8:5a:d9:63:ae:2b:ca:bc:df:9e:76:e3:2a:1d:83:53:cc:
6b:f7:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:33 2025 by rpki-client