Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2K8K5EJ55ByQy9OLdrIQdSbVYYs.roa
File: 2K8K5EJ55ByQy9OLdrIQdSbVYYs.roa (raw, json)
Hash identifier: 93+CUHmnCpDsSwIaEE6l4eWqf+DselRyWgBhVBWhBtU=
Subject key identifier: D8:AF:0A:E4:42:79:E4:1C:90:CB:D3:8B:76:B2:10:75:26:D5:61:8B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195AD12CDAF903987315FA68FEBC3D1170A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2K8K5EJ55ByQy9OLdrIQdSbVYYs.roa
Signing time: Wed 19 Mar 2025 06:24:05 +0000
ROA not before: Wed 19 Mar 2025 06:24:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215428
IP address blocks: 87.120.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:12:cd:af:90:39:87:31:5f:a6:8f:eb:c3:d1:17:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 19 06:24:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8af0ae44279e41c90cbd38b76b2107526d5618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:af:53:97:f3:9b:37:f4:a5:35:bf:78:92:
3b:1c:8c:91:e1:10:e5:bc:fb:b2:fd:58:b6:af:e3:
cf:99:61:8c:93:e2:a9:f4:d2:d3:60:59:85:09:86:
5c:0c:99:46:07:16:61:ee:08:71:bd:9a:ce:1c:30:
d4:dd:5f:21:9d:fa:65:fa:70:3b:71:fc:82:7e:64:
72:ff:ab:bb:b2:e9:78:58:96:99:87:e4:49:90:5a:
af:5f:d3:2a:75:2e:c0:f2:35:2c:0e:01:13:50:18:
9a:4c:a7:a1:1b:71:aa:bb:bb:bd:b7:f6:7f:91:9a:
e2:91:f9:4a:00:70:4b:b1:72:f8:2f:ae:72:99:58:
f8:14:7a:5c:9e:fa:fe:09:2f:09:ae:72:31:8c:0a:
a4:d0:3f:9d:b7:40:8c:71:83:f6:41:1f:90:ca:48:
bb:dc:8d:4b:b4:07:e0:9c:24:33:b6:14:cd:16:f5:
e6:0e:e8:2e:7a:56:2a:82:f7:f0:c3:91:ef:67:3d:
a7:5a:1b:2f:59:c4:cf:e4:09:6c:49:3e:09:f4:42:
ae:51:e5:c3:38:e5:c5:14:7e:cc:04:7f:47:36:73:
af:bf:7e:ee:1e:a1:63:51:81:2f:6b:0c:df:c4:b6:
0f:7f:12:e6:bc:35:d3:c7:bd:c9:eb:ac:93:a1:91:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AF:0A:E4:42:79:E4:1C:90:CB:D3:8B:76:B2:10:75:26:D5:61:8B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2K8K5EJ55ByQy9OLdrIQdSbVYYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.107.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9d:eb:09:7d:0e:88:d2:04:76:c6:43:e3:27:c8:d5:eb:0b:
e3:a9:6e:24:e5:f4:f0:95:1c:5a:9b:bc:bb:bb:d4:0f:a5:53:
a3:bd:37:d8:90:26:8c:af:b9:9a:80:07:02:07:1c:12:86:9b:
16:e1:81:8d:fe:d9:89:9b:86:e1:ac:ce:71:c1:a8:63:2c:9d:
ac:4c:3a:20:5d:41:92:be:2f:e4:63:a2:cd:09:9e:81:dc:7c:
d7:ce:74:ec:4c:75:b2:2c:bc:86:c3:dc:8b:8a:e6:18:14:c6:
86:11:cb:e9:5f:08:88:36:90:b7:46:6e:0d:61:f5:64:20:fa:
8e:6a:27:04:8f:b7:1d:d4:8a:1c:a0:c6:c8:4b:93:ca:be:5e:
27:82:41:c7:9b:dd:ec:9a:ee:87:32:a4:2e:6e:09:f6:48:2d:
e8:9c:13:1d:18:0a:0e:7e:7e:db:c3:78:1d:7f:7b:18:e7:92:
3d:0f:94:85:52:7e:ad:ea:93:45:c9:e4:21:32:f4:d3:6e:ea:
7c:d1:f3:37:9a:b0:7a:70:f4:17:27:ea:89:e7:30:2e:f4:ea:
8b:1e:71:c8:e6:46:42:62:05:ed:f1:5e:f0:34:33:51:04:cf:
1b:9c:22:c6:56:ad:5a:d5:60:1a:8e:9d:15:9d:4b:7e:ff:fc:
7d:94:61:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:19:24 2025 by rpki-client