Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0u93_GeWcDxLSpoJA3CiIOdpz3g.roa
File: 0u93_GeWcDxLSpoJA3CiIOdpz3g.roa (raw, json)
Hash identifier: uxBqrzEyzCQw/S8MDr/4+XvZ0uZGQV1l25vNd8vX/3s=
Subject key identifier: D2:EF:77:FC:67:96:70:3C:4B:4A:9A:09:03:70:A2:20:E7:69:CF:78
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246FBB9C7DFD368A2C3752D2DE452F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0u93_GeWcDxLSpoJA3CiIOdpz3g.roa
Signing time: Thu 02 Jan 2025 17:51:04 +0000
ROA not before: Thu 02 Jan 2025 17:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33802
IP address blocks: 87.120.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:6f:bb:9c:7d:fd:36:8a:2c:37:52:d2:de:45:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2ef77fc6796703c4b4a9a090370a220e769cf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:af:c4:97:8a:3c:8d:4c:c1:ac:eb:7b:cf:
25:f1:3e:cf:48:9b:af:7c:d7:b4:eb:d2:cd:9d:98:
61:e5:48:c6:f4:a7:f9:59:8f:2f:b1:a7:f5:02:35:
9a:d6:88:c6:ef:b8:81:7e:29:56:d6:fd:11:b8:23:
a5:e4:da:ee:7d:ba:93:1e:79:2a:a5:f0:33:ed:b9:
fc:05:d1:45:67:3b:bd:9c:3a:d3:d1:ab:7f:6f:08:
67:06:30:e6:56:67:c1:29:ae:8d:b5:c7:be:cd:71:
9f:5c:21:54:27:d7:69:cc:c5:df:17:37:69:e2:b5:
4f:1e:1d:b3:b2:c7:3e:5d:fd:e8:22:dc:80:f0:a1:
e5:c1:37:1a:30:eb:9b:b7:93:ee:6d:3e:2a:53:4f:
5f:ad:e4:7c:8a:1f:41:1a:b7:a6:64:e3:fa:10:14:
ab:9f:8f:21:0d:b9:af:a0:a5:18:f3:21:99:10:a3:
de:b1:42:84:5e:a1:ce:63:4e:d4:25:1e:cb:56:96:
ab:aa:ae:83:27:8b:39:c4:db:73:fe:58:1d:55:be:
10:1f:84:e0:b7:db:11:58:98:9c:9d:75:8b:2b:da:
11:b3:c3:eb:69:95:15:cd:2c:22:a5:e4:31:91:8c:
fb:6b:01:6b:fd:01:23:86:79:a8:7e:49:60:d3:53:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:77:FC:67:96:70:3C:4B:4A:9A:09:03:70:A2:20:E7:69:CF:78
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0u93_GeWcDxLSpoJA3CiIOdpz3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.10.0/24
Signature Algorithm: sha256WithRSAEncryption
92:47:e9:11:5f:32:8d:7c:4b:80:93:88:b0:dc:28:7b:3c:c7:
40:90:b0:bc:b5:49:76:64:6d:77:6f:4d:b7:7a:05:88:8f:9f:
d9:04:66:80:05:70:a1:5c:6e:22:df:33:27:20:f3:50:31:74:
c8:0c:59:aa:fa:89:68:48:cf:05:52:bc:97:5e:bb:2c:c2:e9:
87:b2:61:58:b9:83:e8:51:55:ab:ec:3c:5d:3f:07:8b:a1:63:
d7:52:1d:a0:69:09:80:ca:00:69:44:69:e0:44:5a:ed:e7:02:
01:a8:34:0d:92:42:5c:c4:d7:87:1c:aa:fd:40:c3:b0:ac:a4:
1c:6a:f4:7d:54:57:a0:97:82:94:03:66:6c:29:59:65:16:d3:
71:51:f3:fd:39:58:59:4a:9c:3b:99:10:f2:7e:0b:15:35:01:
f2:19:a8:43:75:a7:d6:e4:d1:4e:14:0f:c7:e4:d7:d5:ab:08:
66:fc:5e:76:9f:3c:87:f8:95:a3:65:73:60:19:bb:e2:f7:66:
f6:21:05:95:81:cf:9d:55:d8:60:4c:3a:c7:75:21:2f:d6:db:
c8:ac:6b:c7:3f:da:97:b7:2e:b9:4f:70:ce:57:89:5f:8e:8f:
58:32:dc:61:85:4e:3d:d3:7d:03:be:27:24:9d:58:54:27:94:
23:78:3f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:28 2025 by rpki-client