Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LRfNns8kVC9PEHC8S6kwv81-UVM.roa
File: LRfNns8kVC9PEHC8S6kwv81-UVM.roa (raw, json)
Hash identifier: mLKy2CQxOgqxAQCgGEN6guf3Y8ksVqRA2vj8uxZtf8o=
Subject key identifier: 2D:17:CD:9E:CF:24:54:2F:4F:10:70:BC:4B:A9:30:BF:CD:7E:51:53
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282488B27A03BD03E4C0A34F61D50E20
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LRfNns8kVC9PEHC8S6kwv81-UVM.roa
Signing time: Thu 02 Jan 2025 17:51:10 +0000
ROA not before: Thu 02 Jan 2025 17:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50368
IP address blocks: 87.121.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:88:b2:7a:03:bd:03:e4:c0:a3:4f:61:d5:0e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d17cd9ecf24542f4f1070bc4ba930bfcd7e5153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:51:0a:ab:dd:80:5c:8b:be:4a:4d:e5:65:
13:05:e9:02:bd:3b:3d:43:50:5c:8f:02:d8:d3:a9:
60:de:05:2c:b3:3f:b7:3c:c1:9f:e0:56:9c:2a:f5:
aa:df:4a:98:87:74:7f:57:21:26:92:94:29:b1:d0:
a2:44:9e:63:02:de:1a:ab:e0:f8:35:c5:af:fe:83:
2e:e0:de:28:a4:7c:80:44:19:ea:78:46:1b:41:89:
c0:ed:5e:fd:df:b3:b5:9b:3d:db:e7:e7:cb:88:d5:
bc:b1:4c:d4:a8:5d:16:8a:36:36:b5:fe:41:59:4a:
33:c1:e7:fc:58:32:3c:cd:dc:7d:fa:5b:a6:f0:23:
d4:32:4d:2d:9a:9c:b7:7d:11:d0:01:64:42:04:36:
d5:9c:61:b6:83:ca:9d:c8:03:7b:a4:f8:36:b1:66:
0f:ac:1b:bb:c0:cc:0f:9a:08:9e:2a:f0:12:ec:50:
3b:bf:5f:23:19:bf:0c:b4:f8:8a:69:c1:a1:a5:ee:
04:42:f0:67:aa:1f:22:cc:d0:3d:58:76:ee:19:01:
1a:e8:7c:fb:54:f7:26:b8:2c:53:6b:c5:97:63:38:
6b:93:e4:96:2a:78:c5:09:9e:9d:71:3d:c6:f2:7c:
eb:55:14:e2:51:8c:0b:03:07:a8:50:a3:79:35:f7:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:CD:9E:CF:24:54:2F:4F:10:70:BC:4B:A9:30:BF:CD:7E:51:53
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LRfNns8kVC9PEHC8S6kwv81-UVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.128.0/21
Signature Algorithm: sha256WithRSAEncryption
01:c2:63:3d:d0:cd:3f:a9:5b:c3:dd:17:6c:d2:1f:30:f6:89:
56:b4:69:0b:a9:6a:5f:eb:4f:83:be:07:49:ca:dd:19:59:ae:
c5:3d:37:79:a7:53:46:a3:d9:cd:6c:53:03:bb:13:08:b7:6b:
04:3d:e5:8c:07:c6:24:b4:e9:a8:3d:3b:87:e6:90:52:a8:e5:
d6:95:53:f3:0d:da:cd:47:1c:9e:a7:d6:3d:b5:32:59:96:78:
44:8c:1f:45:ef:52:9e:1d:6e:e5:cd:a6:13:dd:70:6a:73:b1:
69:83:29:f3:66:21:96:22:2d:47:74:7e:2c:e6:aa:36:a2:e9:
70:4a:ae:82:5c:5b:35:04:9b:6c:1b:4d:f3:c7:b4:5e:40:ae:
b0:70:18:22:9f:d5:51:6a:84:77:0d:eb:ba:fa:72:54:6c:77:
90:86:9c:f6:af:fc:ac:a3:97:94:83:b5:54:6d:e4:72:3c:db:
68:ca:89:a9:6d:13:77:34:42:8a:42:8c:84:21:84:91:8a:b9:
36:ae:7f:45:d9:f5:ee:6a:ac:63:8b:0b:d6:bf:ac:0c:90:66:
87:12:81:40:20:d3:e1:f6:59:7b:c0:81:74:d3:c0:b3:42:e6:
ac:68:82:e9:7e:19:df:04:cc:01:e2:bb:7f:02:2d:a0:82:9e:
b9:3d:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:57 2025 by rpki-client