Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6MQYtB41SN6S-sjkUUSrfxgIGrk.roa
File: 6MQYtB41SN6S-sjkUUSrfxgIGrk.roa (raw, json)
Hash identifier: HnDRXte9YASvRLYAVWWCiTXrTnJIrp+Imt4BVU4nlCg=
Subject key identifier: E8:C4:18:B4:1E:35:48:DE:92:FA:C8:E4:51:44:AB:7F:18:08:1A:B9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824571130489E44929635E9050AC126
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6MQYtB41SN6S-sjkUUSrfxgIGrk.roa
Signing time: Thu 02 Jan 2025 17:50:57 +0000
ROA not before: Thu 02 Jan 2025 17:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4760
IP address blocks: 87.121.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:57:11:30:48:9e:44:92:96:35:e9:05:0a:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c418b41e3548de92fac8e45144ab7f18081ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:ba:94:05:b3:d5:87:08:67:b8:e8:46:a3:
1e:f8:6b:a5:ff:b0:2c:61:81:27:97:fc:b9:99:42:
70:9e:cc:25:b1:cf:79:dc:f5:67:23:82:ef:11:2c:
29:6a:2c:d6:d6:40:89:43:e0:f2:88:c0:33:da:a5:
8d:46:d3:58:97:91:b4:29:7b:e4:e1:e2:51:05:33:
59:62:e9:d2:c5:dd:7e:50:4d:cc:ee:7e:0f:fe:e0:
5a:d7:73:e4:e9:0f:a5:98:1f:20:97:33:fe:f7:ce:
7a:7b:16:c1:f9:4c:f1:1c:9b:03:de:60:d3:ae:2c:
18:0d:35:79:62:fe:b7:48:f4:38:82:85:a0:b3:95:
01:0a:67:05:06:17:f9:32:ff:b6:4d:68:4a:6f:98:
9d:85:7c:a2:45:6b:0d:83:84:13:39:7e:32:0f:c9:
76:ff:2a:68:77:9a:4f:6c:99:aa:c2:05:c7:60:f0:
4f:5d:4b:32:5b:56:23:d2:a4:b0:ef:ce:5d:bc:24:
42:6f:5e:0a:61:ac:b6:b5:ef:10:f6:b3:c5:23:ed:
fa:2f:40:2c:2d:36:cb:f8:ee:42:40:b1:c8:81:7a:
2f:4c:cf:52:c2:75:fa:f5:f6:49:56:77:4a:6b:c2:
7f:2c:7d:54:b8:44:f0:80:7b:02:69:b5:75:2e:53:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:18:B4:1E:35:48:DE:92:FA:C8:E4:51:44:AB:7F:18:08:1A:B9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6MQYtB41SN6S-sjkUUSrfxgIGrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.125.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d9:49:cd:6d:48:61:8c:78:ac:84:5e:28:40:b0:9c:2d:e1:
c8:09:d9:52:1a:8f:4f:a9:91:9d:e5:c1:12:25:c7:55:02:58:
58:e8:38:e8:27:84:8e:14:89:98:c9:6e:37:51:57:39:d5:56:
95:87:06:54:7d:bf:df:4e:9e:9b:6f:9a:8e:15:1f:b7:25:9b:
3d:44:c0:42:d4:03:ce:76:8e:71:7d:73:94:5d:b5:a0:33:4d:
7c:be:5a:1c:a7:3f:12:6b:c1:5a:6e:06:95:80:06:9a:25:ad:
ad:e1:1a:66:40:67:5e:d3:1e:dd:c0:56:e1:ad:11:7e:da:f5:
17:f5:ad:69:40:eb:25:4f:8b:f4:6d:12:db:f6:06:e3:0d:74:
32:53:03:22:a3:eb:0e:2e:04:76:83:bf:18:d0:d6:69:e6:39:
b5:d0:47:ad:cb:c1:be:7f:8c:44:74:15:a5:8c:c5:ee:f3:e0:
cb:9f:61:93:76:81:ca:16:8c:cd:e3:cb:d7:59:8d:8f:20:2b:
4b:bd:c8:98:02:fb:a4:84:e9:d8:29:58:ed:ed:4a:14:35:3a:
89:9a:61:85:ac:82:e5:f2:3f:5c:15:96:5f:4a:c1:22:4d:55:
72:02:a1:ed:d5:e1:84:2b:4c:0e:74:68:66:3c:6e:f8:13:4a:
9b:74:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:08 2025 by rpki-client