Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Zx1Yp4pwZKE1VeZR8u0Am6oPceo.roa
File: Zx1Yp4pwZKE1VeZR8u0Am6oPceo.roa (raw, json)
Hash identifier: mCxWD9Bxhhc1ZwOT8mWj2j1Bczmc+QeLoPeDGcnrGO4=
Subject key identifier: 67:1D:58:A7:8A:70:64:A1:35:55:E6:51:F2:ED:00:9B:AA:0F:71:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246A0EC7D4C4BA786F788F473E058B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Zx1Yp4pwZKE1VeZR8u0Am6oPceo.roa
Signing time: Thu 02 Jan 2025 17:51:02 +0000
ROA not before: Thu 02 Jan 2025 17:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25374
IP address blocks: 87.120.244.0/23 maxlen: 23
87.120.244.0/24 maxlen: 24
87.120.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:6a:0e:c7:d4:c4:ba:78:6f:78:8f:47:3e:05:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=671d58a78a7064a13555e651f2ed009baa0f71ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:d5:be:79:8b:cc:79:c9:bb:09:84:00:a9:
eb:14:a5:db:d8:50:f1:6d:fc:57:77:c8:ae:69:d2:
36:b0:24:06:2c:e1:bd:67:d9:97:cc:62:e4:b3:ac:
9f:8e:68:33:50:0a:4a:cd:54:82:3b:90:4b:27:9e:
be:cc:ff:50:b9:e5:ac:f0:7b:32:a9:0b:36:c6:c2:
86:fd:3b:a5:4f:1f:cf:ce:95:27:da:0b:68:f9:51:
67:72:92:a6:60:f0:e7:72:48:4d:c5:a3:ea:ea:42:
8f:db:c4:4e:79:17:1e:0f:26:72:00:03:3b:fa:bf:
38:c2:a9:b7:36:65:8e:a2:f4:5b:3f:ee:cc:37:3d:
4a:77:f1:ce:9a:39:da:2a:19:41:c9:2f:6d:97:c4:
e1:63:2d:3e:11:77:0c:01:0b:2f:fc:5c:ea:07:5e:
95:a9:e3:a3:6c:93:68:b7:9f:18:f2:20:c0:32:2b:
e4:39:7b:d9:83:4e:9a:2f:88:ae:4b:ac:dd:b4:2e:
c6:c1:4e:aa:0a:e3:7a:c5:49:6b:d7:a3:ea:39:b8:
a8:e5:05:89:1f:5e:44:2a:a6:c9:fc:d4:2e:fd:9d:
97:e2:d7:25:48:db:12:04:f5:c4:6e:68:6f:37:35:
d7:fe:a8:a0:a4:21:e7:19:0f:21:4b:75:55:2b:3c:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1D:58:A7:8A:70:64:A1:35:55:E6:51:F2:ED:00:9B:AA:0F:71:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Zx1Yp4pwZKE1VeZR8u0Am6oPceo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.244.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:55:0d:b8:03:1a:6b:03:e4:b9:03:ac:89:4b:35:8c:9c:e1:
62:f0:77:de:51:f4:0b:df:ea:a5:2a:80:d0:3a:10:41:62:4d:
b8:80:f6:6e:a3:7a:9e:35:39:21:31:a0:03:35:ad:32:67:64:
47:d7:5a:5e:65:e8:97:22:54:71:60:d7:1e:06:6c:10:6a:c0:
06:2b:4e:d6:a5:28:79:fd:60:0e:70:14:93:55:c7:1e:17:8e:
1f:8a:dc:fc:a8:5c:e5:a2:08:c9:02:97:4c:c6:67:5f:b7:8d:
3a:04:38:31:30:36:46:a5:de:f5:70:e9:f6:1b:eb:58:af:c7:
78:10:05:3d:60:e8:05:7a:59:07:c3:00:94:ca:c8:98:89:66:
a5:11:c8:9a:bf:06:8b:e1:48:5f:60:25:24:84:1c:ad:25:c2:
fe:2e:ed:91:8a:82:ab:a4:23:9a:49:79:b3:b5:0b:24:a2:c4:
a2:63:3a:a2:89:6d:2b:25:4b:40:2d:ea:9b:17:ab:8b:00:46:
7c:f9:b2:aa:01:a0:90:b4:da:cf:d5:c9:65:ed:39:bd:ec:79:
ce:6f:6c:54:88:96:c0:70:2e:a1:bc:e5:87:94:01:43:f7:ca:
4b:f1:36:44:4d:3a:ac:04:88:da:86:53:0c:96:62:16:59:24:
7b:ab:18:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:08 2025 by rpki-client