Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LY4ei1RCd1uLwTxXAYYzlRDBWRE.roa
File: LY4ei1RCd1uLwTxXAYYzlRDBWRE.roa (raw, json)
Hash identifier: TEvd5adwMjrL/No/623Yg0rehpd+OVvR1x/ubzAQKb0=
Subject key identifier: 2D:8E:1E:8B:54:42:77:5B:8B:C1:3C:57:01:86:33:95:10:C1:59:11
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428248A0190B9EB44590E9D5ADE5FF154
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LY4ei1RCd1uLwTxXAYYzlRDBWRE.roa
Signing time: Thu 02 Jan 2025 17:51:10 +0000
ROA not before: Thu 02 Jan 2025 17:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51925
IP address blocks: 87.120.11.0/24 maxlen: 24
87.121.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:8a:01:90:b9:eb:44:59:0e:9d:5a:de:5f:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d8e1e8b5442775b8bc13c570186339510c15911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:5b:56:6a:24:de:d8:0a:05:02:72:ee:4f:
b1:59:7d:f6:10:40:c9:64:5e:ad:65:6e:45:d9:49:
a7:84:ee:91:b8:cd:3e:7d:21:be:e6:cb:8b:7d:6a:
b7:ce:c2:f7:5c:c0:3d:9b:82:1f:fd:52:55:a3:ab:
3f:1f:b9:94:10:18:0b:35:b0:b8:25:18:14:4e:0f:
8d:11:ae:84:b6:f5:aa:63:e8:4f:ed:0d:75:a5:5e:
21:df:a6:03:3a:96:84:81:12:c3:7a:5a:b3:90:c3:
8a:d6:93:88:02:e9:7c:33:db:c6:54:65:bd:34:ca:
bd:3b:3c:75:0a:47:a8:60:90:51:63:c6:df:59:ee:
11:7a:5c:2e:bf:75:e4:86:90:f4:d6:59:e7:8b:4e:
f9:67:d4:57:fd:fb:b6:f9:5a:3f:19:4a:18:8f:82:
24:4d:3d:94:9e:26:9f:32:c0:1a:55:7b:6c:5e:90:
64:c2:04:17:69:7e:8d:d3:53:96:a9:f3:da:34:43:
a2:76:35:c1:54:eb:a6:36:ce:0a:69:53:a1:5a:cb:
e7:5d:14:51:28:37:71:75:08:07:88:1e:d0:b3:a7:
12:cc:e0:99:3a:e0:1d:9c:25:62:49:03:68:c9:71:
2e:2b:e6:9c:08:fa:6f:1f:58:85:50:5f:03:33:a6:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8E:1E:8B:54:42:77:5B:8B:C1:3C:57:01:86:33:95:10:C1:59:11
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LY4ei1RCd1uLwTxXAYYzlRDBWRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.11.0/24
87.121.126.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e4:1f:99:b0:75:30:b9:b3:02:14:4b:68:b3:33:db:fa:70:
5d:99:0a:26:d7:9a:c6:b9:24:71:75:62:db:47:ec:ec:2a:0e:
ba:5a:0e:72:c9:a8:63:a7:d4:c4:d7:24:3a:33:54:2c:a9:b5:
da:05:84:43:60:0f:c9:51:8d:7a:e6:2f:30:14:80:85:1c:cd:
f6:d9:5c:e0:61:b3:3f:92:f8:7f:39:37:e7:be:e0:ce:a3:4a:
47:95:c4:b0:4b:e5:51:b2:9f:42:23:95:39:92:25:ba:9f:88:
98:a7:56:4b:40:f0:f4:b0:20:7c:55:4e:87:47:66:fb:bd:0e:
7c:fd:f9:a8:a2:4c:bb:25:44:67:be:90:85:a6:6d:3b:77:d2:
60:1a:33:a9:af:0d:de:ad:e5:ba:54:b8:85:f8:88:62:43:a9:
7c:06:67:a4:2f:e6:48:91:cc:0e:91:cb:6c:59:89:67:e8:63:
00:af:4c:8a:7e:a3:98:33:69:80:6d:2c:35:1a:c5:3d:2d:66:
17:81:c0:e0:9d:e1:67:41:f3:c6:21:fc:c4:41:62:57:e6:cc:
50:a5:80:2b:e9:c6:d9:95:a1:b5:42:05:a1:81:17:96:d2:a9:
61:71:84:4b:2f:49:27:ca:fb:05:40:fe:c1:c9:09:96:80:cb:
19:90:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:04 2025 by rpki-client