Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qES7XNpKfwrX2dgRTWE4JMjPKUI.roa
File: qES7XNpKfwrX2dgRTWE4JMjPKUI.roa (raw, json)
Hash identifier: 4mJr7h/yuqY5m40q2d8i9QROxD8rkCiDuHh3oYcE3Sk=
Subject key identifier: A8:44:BB:5C:DA:4A:7F:0A:D7:D9:D8:11:4D:61:38:24:C8:CF:29:42
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245E7CA3AB713865E85D2E5AEA7CDC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qES7XNpKfwrX2dgRTWE4JMjPKUI.roa
Signing time: Thu 02 Jan 2025 17:50:59 +0000
ROA not before: Thu 02 Jan 2025 17:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15504
IP address blocks: 87.121.106.0/24 maxlen: 24
87.121.107.0/24 maxlen: 24
93.123.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:5e:7c:a3:ab:71:38:65:e8:5d:2e:5a:ea:7c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a844bb5cda4a7f0ad7d9d8114d613824c8cf2942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:94:ff:1a:29:1f:3e:b0:43:02:56:f4:b8:
9d:42:70:7d:22:fc:ae:4b:ca:83:4b:a9:21:18:ab:
0c:b3:ff:11:5e:fc:5f:04:10:5e:25:10:7e:b0:e5:
58:76:49:a1:3c:f4:df:b6:1e:6f:8c:83:83:1a:97:
2c:48:fb:e4:2d:8b:da:e4:0e:81:04:67:ed:aa:5c:
ac:1e:97:11:6e:cd:64:90:ab:e4:04:4f:02:8c:ed:
43:c1:fc:23:47:64:93:70:84:ce:1c:2b:5d:be:25:
2e:8e:29:bc:ff:5f:62:11:35:1d:9e:e0:41:d6:56:
8a:29:cb:c8:bb:ec:32:c8:82:99:c0:78:0b:0b:ff:
04:70:9b:38:4b:f5:cf:07:af:20:07:9b:9c:a9:ee:
37:f5:35:b4:f3:9d:07:a8:ee:c4:1a:bc:f5:f3:61:
2b:23:06:7d:75:11:24:98:da:c4:dc:28:6e:72:a4:
13:bd:57:a5:d4:d9:a9:e4:1b:41:4d:c7:5f:61:35:
be:e1:d3:8e:4c:0d:3a:84:af:e8:55:ff:f3:a0:2e:
89:58:a1:9c:b9:2d:a9:79:b6:6e:1f:61:03:72:3e:
48:0e:b9:af:cb:55:e6:9e:94:a9:77:8e:86:1e:8b:
05:60:a2:9a:a8:cf:01:c1:dc:79:a5:84:05:1d:d6:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:44:BB:5C:DA:4A:7F:0A:D7:D9:D8:11:4D:61:38:24:C8:CF:29:42
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qES7XNpKfwrX2dgRTWE4JMjPKUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.106.0/23
93.123.19.0/24
Signature Algorithm: sha256WithRSAEncryption
93:7a:26:7c:62:5d:3f:19:d6:3d:8f:89:37:b5:ac:a6:a0:b6:
48:07:6b:bc:22:c9:94:c1:e6:f4:4a:dc:e6:45:ac:4d:ba:3e:
42:e6:7f:a5:4c:42:9a:87:20:1e:4f:9b:bf:d8:3a:4c:ee:34:
f9:f2:af:99:6f:6d:b6:15:ee:7d:f0:3f:cc:63:4b:6a:9c:73:
13:83:96:1c:04:ed:f8:32:23:e8:dc:62:55:b1:26:ca:f3:c5:
e9:c2:4c:23:d0:9e:b4:ad:ff:96:76:7e:bf:a5:dc:a8:b5:65:
b8:74:a8:32:67:f2:45:72:f8:ef:91:fa:77:a8:d4:4a:57:73:
e1:b7:7b:4e:89:ed:fd:1d:c3:51:9b:36:91:de:93:5a:e6:6c:
46:8b:3d:62:9d:23:40:b4:d1:27:71:34:03:1a:21:11:5a:49:
ca:93:ef:0c:44:e7:ce:05:e6:3a:29:00:2d:72:72:3b:55:8b:
db:cd:e1:c2:b4:6e:f4:99:b6:32:3c:ed:91:cd:4b:a7:7d:6e:
37:9f:a6:84:de:60:ec:91:5c:bd:be:c5:f6:59:68:12:32:c3:
bc:c5:d0:26:96:98:3f:0e:43:d9:2d:c1:e9:fd:20:5e:53:17:
44:eb:6f:b0:10:03:d1:8f:97:17:29:d3:da:f7:17:84:db:25:
8b:22:3d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:32 2025 by rpki-client