Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Qkjxb3hWJRT-WANzYbLe3Uxw8HM.roa
File: Qkjxb3hWJRT-WANzYbLe3Uxw8HM.roa (raw, json)
Hash identifier: SLEbVm5gRSr4+Q7pv175B6L8iIXLQDOXW22wbEG/+ug=
Subject key identifier: 42:48:F1:6F:78:56:25:14:FE:58:03:73:61:B2:DE:DD:4C:70:F0:73
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019537DF1AEFDB7903CB04D4FFA8DA78EAA5
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Qkjxb3hWJRT-WANzYbLe3Uxw8HM.roa
Signing time: Mon 24 Feb 2025 12:12:03 +0000
ROA not before: Mon 24 Feb 2025 12:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 87.229.22.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:df:1a:ef:db:79:03:cb:04:d4:ff:a8:da:78:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 24 12:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4248f16f78562514fe58037361b2dedd4c70f073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:3f:37:2f:19:7e:8f:a9:98:4e:08:25:60:
5f:f2:30:91:2e:35:47:e0:0c:cc:07:2e:e9:be:d1:
ed:e2:8e:dc:42:f1:04:0a:24:0d:3c:3c:10:2a:cf:
40:50:6c:91:69:9e:ac:4e:4e:55:72:41:4f:21:c3:
ec:55:de:3f:50:f8:d2:f1:71:ba:a2:16:84:b6:62:
14:4b:c7:a3:9f:e5:87:51:ab:ca:a7:d7:cb:dc:87:
9d:2f:72:d9:20:2b:73:76:4e:88:d6:b8:47:ba:fa:
73:e5:e0:e7:d6:ed:69:ca:ab:27:9d:03:6d:72:31:
1f:ca:81:9e:b8:8b:7d:a3:75:5a:50:f1:70:1c:8e:
2b:c0:64:13:a5:a3:ca:9b:9f:c2:26:3f:ae:fa:e3:
35:2f:4c:ec:74:27:e3:0d:b8:9f:2f:00:e7:5a:ac:
b7:5c:b2:05:af:4f:8f:2d:55:93:3e:39:65:91:67:
1d:6b:fc:51:84:c7:c2:9a:72:e2:b3:7d:7c:ae:a4:
d0:e2:87:01:33:9f:64:c6:c0:ae:3b:f8:7b:9c:e5:
42:7d:fa:4a:76:f2:b2:e6:23:10:b2:41:d9:9e:0b:
08:df:59:d4:d0:46:17:80:87:de:5e:54:39:9f:d2:
97:ec:28:ac:27:82:fc:a7:eb:78:0e:8f:86:24:f7:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:48:F1:6F:78:56:25:14:FE:58:03:73:61:B2:DE:DD:4C:70:F0:73
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Qkjxb3hWJRT-WANzYbLe3Uxw8HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.22.0/24
87.229.79.0/24
87.229.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:dc:eb:42:ee:ab:f1:94:cc:34:c1:49:eb:74:bc:7f:26:56:
64:28:fa:4c:0f:ae:8e:2b:56:82:81:cf:54:58:cf:2e:07:c2:
aa:6f:5d:66:ac:d2:69:e0:a7:fb:19:c3:91:22:58:27:52:3f:
c3:ce:58:bd:d9:18:28:c1:ee:c0:bc:92:db:e5:da:f9:a0:fe:
cf:36:74:4f:fe:37:44:82:8e:24:b9:b4:a8:05:8a:1d:54:82:
cf:6e:ea:02:b3:11:95:64:f8:95:6e:ac:c5:a8:ee:b5:82:17:
5a:21:4d:41:b7:f7:5c:03:2e:72:da:f9:b8:07:24:89:03:32:
2c:56:e0:26:ef:29:54:3f:06:21:aa:62:67:1b:67:4c:8a:a9:
6d:c7:2e:ea:10:d3:5c:e6:7c:a0:a7:63:62:2a:65:98:4f:a3:
b9:33:bc:e7:62:b5:85:af:81:cf:8c:82:34:33:bc:e4:ae:08:
e2:61:ef:c4:19:b1:a2:f4:12:37:a4:3f:cf:6b:8b:59:96:67:
2b:72:7a:75:47:84:d9:99:01:bc:89:86:fb:53:e3:d9:2f:39:
86:d3:ca:d0:7a:7f:25:b7:3a:78:99:4c:b8:f5:e8:16:71:b9:
62:b3:5b:90:b0:96:fc:fa:3d:96:31:39:d9:6d:27:d0:da:9c:
80:f6:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:37:32 2025 by rpki-client