Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VKsQRF8HbKiGwvd6xCaySKFzfNY.roa
File: VKsQRF8HbKiGwvd6xCaySKFzfNY.roa (raw, json)
Hash identifier: SUrRi7oBo47csMoDe+sA1JxUOwWNgpFiXnGKz5pXWc0=
Subject key identifier: 54:AB:10:44:5F:07:6C:A8:86:C2:F7:7A:C4:26:B2:48:A1:73:7C:D6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282472CB3DF93B07921E8A66FB032FAA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VKsQRF8HbKiGwvd6xCaySKFzfNY.roa
Signing time: Thu 02 Jan 2025 17:51:04 +0000
ROA not before: Thu 02 Jan 2025 17:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35448
IP address blocks: 87.120.225.0/24 maxlen: 24
87.120.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:72:cb:3d:f9:3b:07:92:1e:8a:66:fb:03:2f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54ab10445f076ca886c2f77ac426b248a1737cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:c3:5e:08:ec:cf:21:be:b0:69:02:35:67:
3f:49:d5:db:86:f4:fa:67:52:04:a3:16:7c:f4:74:
69:76:39:0e:0f:88:88:35:5e:2e:40:70:d2:79:4d:
d0:a1:68:54:c2:af:ee:f2:07:05:67:9c:c2:b3:a9:
f9:b0:ee:db:95:fa:28:fc:06:9f:a2:17:42:bb:ff:
d8:0b:55:af:4d:be:1b:b9:a9:81:34:c9:cd:b6:dc:
2e:d8:63:e8:fc:23:20:5a:f3:8d:bb:d0:13:83:58:
1c:20:c1:95:a3:cf:4a:5c:06:67:07:06:ff:15:5e:
61:10:d2:c1:a3:91:7d:a0:1f:5f:10:0e:36:51:c1:
b8:c1:b4:36:43:e2:db:8f:d7:88:53:e4:92:90:35:
2e:80:ae:b3:9e:6c:31:36:32:20:20:81:af:20:86:
40:c1:7c:89:0e:c2:d9:47:62:79:24:35:a8:f5:13:
b5:83:fa:fe:e3:66:0b:e1:41:2b:c3:ef:ac:2a:9d:
d2:8b:12:85:6f:9a:8e:44:e6:ae:38:04:a7:83:be:
c4:40:4c:a6:f4:59:d9:e3:25:bf:8f:9a:13:f6:46:
8b:88:d0:a6:27:10:e5:84:02:94:55:c3:e8:5a:8f:
a4:20:c2:ba:cc:b5:57:aa:0c:79:f9:6e:36:cf:26:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:10:44:5F:07:6C:A8:86:C2:F7:7A:C4:26:B2:48:A1:73:7C:D6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VKsQRF8HbKiGwvd6xCaySKFzfNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.225.0/24
87.120.227.0/24
Signature Algorithm: sha256WithRSAEncryption
11:57:92:12:f5:68:e7:8c:38:25:fb:73:9c:64:54:42:b1:64:
16:e3:55:7a:e8:0c:b4:7f:b1:89:4e:ee:21:11:7d:0e:13:26:
57:2c:3f:4a:99:fe:a9:1c:eb:25:9e:a6:44:e8:06:55:6f:70:
13:4e:21:50:d2:c1:af:0a:fb:a4:21:c1:2e:31:cf:83:2a:04:
1b:1b:94:f8:da:23:31:db:df:78:44:c1:d3:43:87:b1:75:c1:
c3:47:75:cf:f4:c2:bd:53:f6:1f:04:c6:88:7e:c3:66:28:c7:
c9:59:58:29:74:e9:55:ed:7e:6d:06:24:e7:24:6f:3a:6d:1e:
87:36:ec:5a:13:82:e0:2f:07:55:71:b5:f1:8e:42:25:5f:fd:
1a:62:fe:6c:36:7b:06:8b:a2:21:5e:c5:f1:7b:e8:d6:dd:5b:
b0:6a:43:43:d0:38:e4:ca:3a:85:f8:2c:e8:f6:fe:c9:ab:ad:
a0:0a:e4:8c:fb:a7:78:43:64:7f:0f:62:df:1a:65:de:98:aa:
9f:85:de:1f:64:f9:7c:6d:d9:66:98:1f:ff:67:57:bc:1e:21:
d7:7d:1e:a0:2d:90:6a:90:7e:66:21:22:5c:00:8e:9c:0c:41:
24:5d:55:59:0f:b1:93:f9:08:b9:44:54:17:a4:66:a4:ad:74:
54:88:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:39 2025 by rpki-client