Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U0ed8bQPBGCIO2HKVj_5rHA0DDw.roa
File: U0ed8bQPBGCIO2HKVj_5rHA0DDw.roa (raw, json)
Hash identifier: T+JUBMpRrRQ48/DMVyIJU1KgjkW0qUPqMOGp0AY4Gc0=
Subject key identifier: 53:47:9D:F1:B4:0F:04:60:88:3B:61:CA:56:3F:F9:AC:70:34:0C:3C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245785B539FA2321080E18F563D13C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U0ed8bQPBGCIO2HKVj_5rHA0DDw.roa
Signing time: Thu 02 Jan 2025 17:50:57 +0000
ROA not before: Thu 02 Jan 2025 17:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 87.121.3.0/24 maxlen: 24
93.123.112.0/24 maxlen: 24
93.123.115.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
194.31.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:57:85:b5:39:fa:23:21:08:0e:18:f5:63:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53479df1b40f0460883b61ca563ff9ac70340c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:eb:36:ba:8a:7f:8f:ce:37:90:b8:cb:7b:
7b:16:f4:60:23:17:a0:e3:2e:9e:14:ac:da:dd:7f:
22:17:e5:05:93:7c:68:53:39:14:7a:4a:db:0a:1f:
43:fb:20:d3:e5:33:51:c4:48:bb:e5:8b:e0:cb:61:
3f:b2:92:d2:3f:e6:90:95:d8:c0:6f:a2:57:65:92:
47:e2:fd:5a:7f:06:6a:23:af:6c:a1:2a:41:d4:2c:
21:08:0f:35:5f:32:1e:de:10:bd:1c:99:a0:fc:98:
d4:72:2c:44:a5:69:63:e4:bd:a2:5a:a1:4b:a6:a7:
a8:4d:2a:b5:50:07:53:9f:51:ee:83:d5:63:bd:f2:
e5:c0:b4:ee:af:01:f5:b0:7e:9d:78:a0:47:f6:72:
c4:fa:33:33:5e:f9:b4:23:fe:7e:22:8f:ae:d4:5d:
1b:36:b8:f2:42:1f:de:12:4d:d7:ed:2e:90:03:54:
0c:ed:fa:41:1d:d1:4a:31:b1:72:07:1e:5a:40:81:
b4:7e:83:cc:43:ba:95:66:c1:01:26:67:e9:a7:fd:
24:cc:dc:86:19:11:06:48:99:ba:6c:3e:62:56:fa:
1d:27:6e:68:26:06:e6:f9:8c:be:bc:04:28:67:a5:
d0:07:c4:99:45:94:b4:06:77:1d:01:18:be:ce:89:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:47:9D:F1:B4:0F:04:60:88:3B:61:CA:56:3F:F9:AC:70:34:0C:3C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U0ed8bQPBGCIO2HKVj_5rHA0DDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.3.0/24
93.123.112.0/24
93.123.115.0/24
141.98.5.0/24
194.31.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4d:44:d9:b0:b1:bf:8c:ab:2a:18:2c:fd:c6:15:3f:39:5f:
61:b6:08:90:cb:21:ed:2f:6e:f7:70:6a:42:ab:5e:5b:55:87:
45:44:44:dd:0e:94:d7:ee:fa:e4:7f:5a:c7:f0:95:94:1d:62:
ba:59:1c:41:a7:fa:40:ef:fa:2f:39:70:98:c3:5f:35:a7:21:
0d:46:07:b4:c0:ed:0a:94:07:07:29:10:f8:3a:c8:9c:b7:d5:
37:05:32:88:23:fd:53:2d:b7:83:11:6f:16:99:b8:eb:51:92:
00:86:2c:20:6c:0d:33:ca:c0:2c:87:34:49:7d:6b:47:cd:19:
f8:90:92:e3:8b:75:45:57:16:96:94:e1:eb:fe:0e:cd:93:16:
b6:0e:9a:7c:96:94:71:f1:9c:c7:3b:60:73:29:f0:bf:4c:7b:
23:61:b2:26:36:7b:0a:f5:c1:44:9d:a9:10:5e:eb:4c:ee:25:
ce:cb:16:de:5b:19:1c:67:1e:02:d4:c1:a5:d1:f9:dd:4a:f1:
e9:43:49:87:8e:99:ac:22:14:85:0e:ab:05:6d:8f:9b:be:14:
1e:af:fd:32:f7:d0:a1:41:06:cc:1a:46:be:28:96:d5:8a:b7:
8c:ed:97:c5:fd:06:8c:ed:f9:9a:f6:cf:1a:64:b3:90:04:0f:
0a:4b:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:47 2025 by rpki-client