Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SmM67yz0SHZVz8y5dZBtTz-5GLI.roa
File: SmM67yz0SHZVz8y5dZBtTz-5GLI.roa (raw, json)
Hash identifier: YaczWYSgQTOOVykQ+6Fa9s8rNNfI06588tnf706lnDI=
Subject key identifier: 4A:63:3A:EF:2C:F4:48:76:55:CF:CC:B9:75:90:6D:4F:3F:B9:18:B2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824894C3D71EFADB8B3792D45E0B0B8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SmM67yz0SHZVz8y5dZBtTz-5GLI.roa
Signing time: Thu 02 Jan 2025 17:51:10 +0000
ROA not before: Thu 02 Jan 2025 17:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51801
IP address blocks: 87.121.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:89:4c:3d:71:ef:ad:b8:b3:79:2d:45:e0:b0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a633aef2cf4487655cfccb975906d4f3fb918b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:f2:e1:57:07:9d:5f:fe:c0:1d:6e:b8:c6:
e1:c3:7e:4c:26:3a:36:55:0f:90:da:94:56:59:4b:
9d:a6:5f:30:89:d3:20:2c:aa:b1:a4:40:fd:55:5b:
14:48:27:bf:a9:57:63:a5:03:f0:ce:81:ec:55:55:
62:f9:e8:75:1f:00:f6:f3:3a:15:52:81:e4:03:e6:
6b:61:a1:fe:22:ab:a8:08:dc:af:89:73:16:00:3e:
b6:e9:ff:a6:53:d2:4a:db:63:70:46:04:a7:51:0f:
e6:d7:2c:7f:1a:a0:b1:06:ad:5d:c0:a7:35:46:07:
0b:a3:0b:09:2a:7e:79:c1:5a:34:f8:7e:a6:74:00:
ca:c4:fd:9a:47:56:50:eb:fc:71:26:6f:4b:22:cb:
b0:e9:82:ed:0b:e4:a8:a6:f2:1b:9c:7f:c2:09:ab:
d5:84:a9:9f:22:1e:58:fb:2c:8a:32:fa:b2:b2:64:
25:e6:0c:b4:02:ca:19:e0:30:94:bd:8c:b8:67:94:
df:a7:f3:33:24:06:2f:88:ec:71:e4:aa:9a:ee:85:
2e:dc:88:c9:8f:25:4e:eb:1b:a4:23:92:66:c7:cb:
2c:6f:89:f9:a0:95:c7:3d:bd:bf:2e:c6:7c:b0:4f:
6a:82:ef:2a:50:7d:86:98:f9:96:35:7d:59:b2:15:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:3A:EF:2C:F4:48:76:55:CF:CC:B9:75:90:6D:4F:3F:B9:18:B2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SmM67yz0SHZVz8y5dZBtTz-5GLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:71:d2:d4:24:8f:0b:20:c1:05:98:28:52:ca:55:e9:c3:9c:
8d:a4:70:54:44:18:13:9d:cf:23:47:f3:73:0b:c9:fb:51:11:
86:6a:ad:97:f6:d6:00:f3:f1:20:ae:19:bb:69:34:a3:19:2c:
37:bb:72:b8:ae:b5:47:b9:ab:8c:5f:ed:1d:69:2f:9d:9b:ae:
c2:de:c3:5f:34:c2:84:6a:7f:b6:c1:4d:5a:a4:01:06:ac:9d:
09:bc:ba:25:bc:6c:c0:ec:ba:d5:af:5d:ff:f7:ec:51:9b:94:
7e:9a:1e:63:4f:0a:61:f2:96:82:38:b9:79:5f:02:ce:2d:f6:
0c:b4:b2:4a:00:33:dd:0d:87:d2:2c:61:8f:81:bd:8e:0b:67:
82:3e:b8:cb:b7:72:90:6d:91:57:cf:a2:50:71:b9:10:dd:be:
73:aa:4e:71:98:81:87:6c:48:f3:fc:76:c1:44:04:3a:f1:e3:
97:92:80:6d:c5:03:57:96:25:4c:4b:ba:4e:12:68:1c:5b:52:
c1:ad:2c:e3:81:0f:e3:0f:6a:0e:da:5f:46:e5:28:ff:b0:66:
5e:28:e4:66:a3:b2:0c:7d:02:59:fa:20:de:64:a6:da:1a:7b:
92:2d:07:5f:e7:ca:18:96:a2:dd:6e:3c:05:86:23:5f:be:40:
da:94:5f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:30 2025 by rpki-client