Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1OrdQO0u9Yfa7qSYQpQHO8hvPts.roa
File: 1OrdQO0u9Yfa7qSYQpQHO8hvPts.roa (raw, json)
Hash identifier: dIsB2h/jCEFpFyQqFKFEmPF0s1yaVYiHIZ/9nE/8MB0=
Subject key identifier: D4:EA:DD:40:ED:2E:F5:87:DA:EE:A4:98:42:94:07:3B:C8:6F:3E:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824ABDA6ACCE733538705D7276C59D4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1OrdQO0u9Yfa7qSYQpQHO8hvPts.roa
Signing time: Thu 02 Jan 2025 17:51:19 +0000
ROA not before: Thu 02 Jan 2025 17:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202160
IP address blocks: 87.120.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ab:da:6a:cc:e7:33:53:87:05:d7:27:6c:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4eadd40ed2ef587daeea4984294073bc86f3edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:9e:21:bb:c8:d9:25:d2:b1:74:9a:f4:a7:
4f:1d:c3:e6:d9:78:30:e5:8a:65:f2:32:15:94:c5:
e1:2a:b2:60:e1:be:24:d2:7d:bf:51:7b:2a:58:76:
d0:42:4e:c8:e4:f9:26:28:02:59:30:bd:b7:95:66:
c1:77:4b:72:18:6f:49:ab:92:40:82:e6:ea:f6:b4:
3e:e9:59:87:d6:6c:02:d2:2a:6c:bc:b4:7c:9e:c8:
0d:ee:1f:12:b8:c8:d1:70:33:2d:bd:48:24:20:5b:
2d:76:d0:24:55:e2:49:8c:c1:fc:19:31:02:07:94:
be:e4:89:cd:34:25:bf:54:92:69:f5:dd:bb:33:32:
11:45:8e:67:29:ca:c6:8e:0e:36:31:8a:84:ba:e4:
f0:40:f0:51:46:f1:20:13:4f:81:2d:8e:cd:c9:45:
93:71:11:5e:f2:d7:89:d4:33:d1:59:6f:a4:39:bd:
cd:0a:5f:d0:43:6d:e7:08:9a:5a:ac:0c:9d:f5:0d:
2d:95:b2:41:ba:e5:d2:82:5d:1f:35:43:0b:fc:9d:
8a:1b:db:65:c0:96:22:d0:c7:2c:eb:2d:1f:14:b5:
bb:c3:f0:26:10:59:87:5f:3a:21:e6:85:49:41:9d:
76:bd:53:de:76:5b:83:aa:ad:fc:67:be:da:fc:6e:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:DD:40:ED:2E:F5:87:DA:EE:A4:98:42:94:07:3B:C8:6F:3E:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1OrdQO0u9Yfa7qSYQpQHO8hvPts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9c:dd:c4:ee:13:8e:b1:f5:f9:48:98:33:52:7b:fd:db:85:
6d:d7:18:d2:d6:c1:f2:14:7c:e5:04:81:4d:2d:2d:b0:1f:46:
8d:fc:80:9f:03:3f:7e:f3:7b:16:a4:08:a6:90:51:cf:a7:33:
51:9a:05:39:ef:e4:7c:57:fa:9a:34:e8:94:ea:c7:8b:62:7f:
4a:b1:5a:0e:73:8f:d7:d8:ec:c7:b1:6c:1a:ab:df:80:a9:47:
ac:56:41:5b:66:c7:47:4e:d9:e0:28:d2:17:b8:47:33:8f:99:
02:47:78:a2:fb:38:a6:87:80:63:71:f7:54:d1:ae:f9:5f:50:
95:b3:2b:05:56:2e:a5:26:ba:bb:f2:48:ba:2a:34:34:81:03:
38:17:d6:33:37:0f:e0:06:66:cf:9e:07:84:5a:9e:11:ca:1a:
fa:89:1e:25:f6:e3:d7:94:8c:50:35:b1:08:ee:3b:75:57:41:
56:44:46:2f:db:f4:97:51:c5:33:48:0a:ca:d6:10:29:0a:ae:
bc:7a:29:df:b8:57:09:61:f3:c1:ba:88:e9:43:38:3c:7f:21:
f6:75:69:5c:0b:4a:cb:8a:9a:e6:b1:51:7b:69:e3:05:98:3a:
61:2c:76:33:53:b8:b0:03:f6:06:00:8f:96:d0:1d:bb:e0:f3:
c7:d7:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:56 2025 by rpki-client