Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oqhZvkGpAiqSxURarGNzf5Bc_Bo.roa
File: oqhZvkGpAiqSxURarGNzf5Bc_Bo.roa (raw, json)
Hash identifier: 9IH49wUAYuXR/mbZktkrcPnfyAPBoINK+xqAunArhzc=
Subject key identifier: A2:A8:59:BE:41:A9:02:2A:92:C5:44:5A:AC:63:73:7F:90:5C:FC:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019519E527DD8F573CB706F4212F0FED21E2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oqhZvkGpAiqSxURarGNzf5Bc_Bo.roa
Signing time: Tue 18 Feb 2025 16:30:03 +0000
ROA not before: Tue 18 Feb 2025 16:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213725
IP address blocks: 87.121.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:e5:27:dd:8f:57:3c:b7:06:f4:21:2f:0f:ed:21:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 18 16:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2a859be41a9022a92c5445aac63737f905cfc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:66:65:00:7f:6c:ce:4a:aa:09:11:9e:65:
c8:5b:3a:c6:0a:b1:43:36:25:26:d9:2a:b6:83:6d:
6b:38:54:c2:18:00:87:64:6d:4f:37:f7:c0:96:d9:
b6:c2:dd:93:b4:d1:0c:17:15:90:4f:d9:98:c3:97:
0c:cf:ee:73:4c:8b:21:38:bb:66:7e:a0:cf:50:d2:
41:f7:a9:c7:cc:2a:2c:15:42:10:6d:51:56:dd:fd:
87:ee:17:0c:f5:83:c3:db:76:92:ed:53:f8:b8:75:
63:a5:02:c4:10:d2:7e:22:41:fa:f3:d3:cb:36:d3:
4c:ec:2e:55:3a:cf:53:0a:10:42:cc:8b:38:80:d6:
5d:69:46:db:a4:d6:09:ac:3d:da:2a:b9:90:be:ff:
df:e5:f7:32:1b:de:84:11:d8:d8:5e:ca:7c:c0:6d:
77:01:42:c1:d3:eb:af:da:05:44:14:2d:3e:bd:de:
27:b9:7d:ae:58:87:a7:d5:cb:7f:59:68:0f:72:3e:
99:19:b5:18:d1:76:cd:02:84:5b:4d:f6:e4:b0:30:
3f:e9:2c:b5:ba:e2:41:32:ab:3d:6f:55:31:08:7c:
a1:64:c0:9f:0e:d3:46:15:9b:eb:c9:24:89:ae:b5:
ad:7d:fc:a9:eb:4e:67:6b:54:10:3f:81:2f:31:3e:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A8:59:BE:41:A9:02:2A:92:C5:44:5A:AC:63:73:7F:90:5C:FC:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oqhZvkGpAiqSxURarGNzf5Bc_Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.79.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:5f:aa:5a:d4:4e:62:51:d4:31:6e:31:87:4a:88:f6:08:da:
ad:39:ff:94:8d:d2:ed:31:ef:21:05:18:ed:31:15:04:7d:47:
eb:a5:cb:d8:7a:20:92:4b:2a:94:81:09:7e:7a:78:66:1d:ef:
3f:0c:40:5d:e6:60:43:02:54:78:4c:fc:c2:6d:0b:93:4d:ac:
25:01:7d:bf:90:ca:3c:71:f9:9f:02:a7:8b:3c:c5:0c:eb:22:
80:3e:d8:58:71:e5:66:d4:f2:c7:00:1b:8c:0f:83:7e:08:6c:
cf:15:ec:48:9f:ce:bf:a1:75:93:9a:6e:5e:88:d8:5e:ec:af:
54:5a:04:fe:5c:d7:1c:25:6e:11:46:1e:82:63:ee:b8:c5:20:
b1:19:89:bf:65:22:3b:5a:84:23:54:51:34:f6:4e:21:05:cb:
23:5d:fd:ac:27:f1:ee:64:fb:7f:f1:5c:f6:74:95:33:44:0d:
e8:71:e8:f1:32:65:a3:29:ad:00:88:f9:60:c0:48:68:85:2e:
49:fc:0f:46:0a:00:7f:41:f4:6c:d2:a0:0b:4b:0f:65:4f:34:
d0:fb:9f:12:7f:2c:48:1f:82:54:67:ac:eb:36:f2:07:5a:a0:
26:f7:5d:6c:aa:f1:6e:2d:6b:b9:f3:0a:4e:c9:85:ae:c7:5b:
11:20:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:00 2025 by rpki-client