Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1--O16O7-MToqahknZcsnJ7Xho9o.roa
File: 1--O16O7-MToqahknZcsnJ7Xho9o.roa (raw, json)
Hash identifier: /LjnsVrbGg2/UZVIG5ufmWAOKkQgZsEK9tSuu34H59U=
Subject key identifier: FB:E3:B5:E8:EE:FE:31:3A:2A:6A:19:27:65:CB:27:27:B5:E1:A3:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D5A4B5500A93964461AB1566F029
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1--O16O7-MToqahknZcsnJ7Xho9o.roa
Signing time: Thu 02 Jan 2025 17:51:30 +0000
ROA not before: Thu 02 Jan 2025 17:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 263065
IP address blocks: 87.120.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d5:a4:b5:50:0a:93:96:44:61:ab:15:66:f0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbe3b5e8eefe313a2a6a192765cb2727b5e1a3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:68:ce:d6:d3:2c:c7:84:ae:f0:ca:29:9c:
85:dd:e5:86:d5:82:aa:f2:ec:f7:f2:d1:68:2c:d8:
89:d6:34:16:d3:ec:c3:bb:1c:6c:4f:42:e6:9d:cd:
c8:fd:7e:3a:c8:92:34:57:a2:c5:a3:5a:ea:6f:ee:
be:10:4d:23:81:ce:18:f6:29:6a:a2:a0:3f:2d:7c:
8c:53:2d:b1:aa:70:3d:45:6b:48:24:4b:6b:f3:5c:
90:88:9a:f9:45:8e:a0:84:3f:6d:20:d7:bc:f2:00:
8d:41:d3:07:bf:27:f9:8d:04:b0:64:e9:0d:af:96:
a1:3b:9a:73:36:27:9d:2e:86:1f:98:f5:74:72:35:
ca:25:9f:0c:0c:e6:7f:be:91:c4:07:8f:9d:25:44:
66:32:3b:b2:8d:31:2b:84:11:88:ac:35:58:fb:40:
d1:6d:e8:30:6c:b1:1c:2d:c7:f4:64:f1:af:03:44:
aa:3e:4a:c3:8c:d6:da:90:b9:61:9d:d0:4c:e1:a7:
13:2d:d5:af:bd:a2:d5:6e:12:bc:48:19:ad:87:73:
45:d7:60:72:c7:e6:bf:22:c4:a3:ce:46:88:fc:85:
fd:b8:65:e0:77:f3:26:6f:ef:a7:fe:f6:65:90:fb:
8f:45:01:e0:2a:ce:4e:f8:d9:66:77:dd:77:f8:9e:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E3:B5:E8:EE:FE:31:3A:2A:6A:19:27:65:CB:27:27:B5:E1:A3:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1--O16O7-MToqahknZcsnJ7Xho9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.130.0/24
Signature Algorithm: sha256WithRSAEncryption
57:54:cc:11:f5:a5:99:9f:a4:04:8b:8e:88:5c:bd:25:04:fb:
6e:66:1e:03:80:f7:f9:21:ce:bc:a4:56:b4:83:aa:73:85:72:
99:e5:4d:7e:96:8d:4a:06:63:da:d6:96:20:6a:78:e6:18:cf:
c2:31:c6:84:07:27:ed:70:ec:75:ee:f9:2b:59:38:7c:d0:9d:
42:92:4f:b7:e9:84:ba:14:fa:fb:85:ea:e3:6e:10:bb:96:f0:
78:c6:6f:08:dd:5d:b6:6c:42:46:5b:9c:dd:da:05:cd:10:88:
8a:50:02:2b:0e:2d:d2:b7:5b:7a:a0:9c:58:53:ed:a4:01:8a:
13:13:46:d7:2d:89:61:32:08:71:b3:62:0d:51:72:d6:7d:1b:
47:ad:cb:20:bb:25:a7:61:3e:0c:bc:d4:23:30:2c:ff:a7:9a:
20:14:c8:fc:d9:11:43:4b:6e:18:33:1b:49:1e:24:f0:54:c5:
f1:2f:b1:cc:6d:b6:ec:13:d0:55:d5:88:44:05:7c:22:03:2c:
d1:eb:4c:07:8c:6b:b0:03:0b:c8:f2:46:fa:12:a2:38:1a:19:
34:c9:d0:3b:85:b6:13:19:cc:43:76:f4:f8:c4:09:bd:e5:a2:
9e:0c:b3:cf:e9:2e:5b:b2:4d:e3:1f:87:74:33:62:30:d1:40:
31:78:ed:d0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQoJNWktVAKk5ZEYasVZvApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmUzYjVlOGVlZmUzMTNhMmE2YTE5Mjc2NWNiMjcyN2I1ZTFhM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI9oztbTLMeErvDKKZyF3eWG1YKq
8uz38tFoLNiJ1jQW0+zDuxxsT0Lmnc3I/X46yJI0V6LFo1rqb+6+EE0jgc4Y9ilq
oqA/LXyMUy2xqnA9RWtIJEtr81yQiJr5RY6ghD9tINe88gCNQdMHvyf5jQSwZOkN
r5ahO5pzNiedLoYfmPV0cjXKJZ8MDOZ/vpHEB4+dJURmMjuyjTErhBGIrDVY+0DR
begwbLEcLcf0ZPGvA0SqPkrDjNbakLlhndBM4acTLdWvvaLVbhK8SBmth3NF12By
x+a/IsSjzkaI/IX9uGXgd/Mmb++n/vZlkPuPRQHgKs5O+Nlmd913+J4YxQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvjteju/jE6KmoZJ2XLJye14aPaMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMS0tTzE2TzctTVRvcWFoa25aY3NuSjdYaG85by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcx
Mi8xL0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFd4gjAN
BgkqhkiG9w0BAQsFAAOCAQEAV1TMEfWlmZ+kBIuOiFy9JQT7bmYeA4D3+SHOvKRW
tIOqc4VymeVNfpaNSgZj2taWIGp45hjPwjHGhAcn7XDsde75K1k4fNCdQpJPt+mE
uhT6+4Xq424Qu5bweMZvCN1dtmxCRluc3doFzRCIilACKw4t0rdbeqCcWFPtpAGK
ExNG1y2JYTIIcbNiDVFy1n0bR63LILslp2E+DLzUIzAs/6eaIBTI/NkRQ0tuGDMb
SR4k8FTF8S+xzG227BPQVdWIRAV8IgMs0etMB4xrsAMLyPJG+hKiOBoZNMnQO4W2
ExnMQ3b0+MQJveWingyzz+kuW7JN4x+HdDNiMNFAMXjt0A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:16 2025 by rpki-client