Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uqkCSnrZxTjgp7fg-LHNA5D7qwg.roa
File: uqkCSnrZxTjgp7fg-LHNA5D7qwg.roa (raw, json)
Hash identifier: PkTPuImrDluTc1j8bfbJSWQOY/s9EE1RABZPF43f+zc=
Subject key identifier: BA:A9:02:4A:7A:D9:C5:38:E0:A7:B7:E0:F8:B1:CD:03:90:FB:AB:08
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282477CE6DC53A3766459AAF45B125F5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uqkCSnrZxTjgp7fg-LHNA5D7qwg.roa
Signing time: Thu 02 Jan 2025 17:51:06 +0000
ROA not before: Thu 02 Jan 2025 17:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42446
IP address blocks: 87.120.197.0/24 maxlen: 24
91.92.232.0/24 maxlen: 24
2a00:1728:30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:77:ce:6d:c5:3a:37:66:45:9a:af:45:b1:25:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baa9024a7ad9c538e0a7b7e0f8b1cd0390fbab08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:29:84:bf:5a:a7:82:78:b0:44:a6:ff:6e:
67:35:c3:bf:31:a1:4d:24:da:7d:46:fd:7c:02:ce:
d9:6d:24:76:29:db:8c:c9:05:00:b5:ca:14:01:be:
13:11:57:0d:2b:17:17:c4:e1:b6:a6:be:46:86:26:
3c:b8:de:d8:56:ad:9d:03:a7:a6:77:39:0a:4c:d3:
87:12:ac:a1:26:24:c2:e6:d1:dd:dc:c1:ed:af:39:
ea:22:3c:42:94:5c:a7:d4:0e:9c:61:5a:fe:3c:10:
46:fe:07:9f:eb:16:75:ea:e1:cb:b4:32:65:f9:17:
cb:c8:8e:e6:b5:6f:52:b9:95:3f:5f:8c:77:86:ae:
ee:ab:e8:62:d8:c4:0a:a0:f3:99:8b:1e:af:9a:7e:
50:4e:3a:d6:96:d4:0a:f3:c9:45:53:9d:0a:66:a7:
bc:f2:56:a9:a9:c3:39:58:5f:61:f6:17:35:39:59:
7d:01:73:9a:59:d7:79:af:0e:7c:77:6b:13:88:e4:
65:68:56:6e:0c:1d:fe:77:32:26:67:ac:93:66:78:
36:cb:ae:5d:10:3a:1f:ad:05:ca:96:2d:76:ea:54:
a5:73:2b:ce:ad:69:2e:23:e1:ed:91:7e:b9:06:55:
c0:66:65:d3:1b:7b:4d:3d:c7:7f:37:4c:cd:02:19:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A9:02:4A:7A:D9:C5:38:E0:A7:B7:E0:F8:B1:CD:03:90:FB:AB:08
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uqkCSnrZxTjgp7fg-LHNA5D7qwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.197.0/24
91.92.232.0/24
IPv6:
2a00:1728:30::/48
Signature Algorithm: sha256WithRSAEncryption
1b:cf:2f:f0:be:b8:39:62:4f:47:9e:c0:be:ca:63:81:fd:f2:
46:80:61:eb:1c:cf:28:6d:93:23:96:0e:fa:11:42:22:d7:20:
6e:85:fc:32:18:c8:ce:6e:5a:de:89:64:6a:79:82:f2:0e:8b:
d8:16:cf:e9:07:68:c8:55:96:d4:03:d0:65:52:9f:70:90:aa:
cc:5d:83:cf:c0:2e:68:0e:0e:c8:ed:a9:3d:95:d7:97:66:d6:
5d:3b:91:0c:8e:a8:4d:51:0c:c4:3f:f5:70:7c:90:cf:ae:ec:
fa:bd:3f:c5:07:66:0a:5f:15:a2:93:f7:34:14:8a:2d:5e:b7:
d2:22:8e:83:85:37:2b:70:5d:0d:aa:dc:65:43:bc:ff:3c:d2:
4c:39:92:c5:80:83:3f:e3:a4:36:31:99:6d:bd:81:97:45:1d:
1b:1a:e8:a8:ea:2d:1a:2b:25:bc:d1:30:1d:ad:c6:73:c0:03:
a4:71:d7:45:39:b5:35:0b:9a:4b:5e:4e:f3:d4:3c:74:c6:87:
78:5e:49:1e:3a:c5:e5:4a:0c:8c:69:19:01:34:c1:a5:17:29:
b8:44:b9:de:03:26:2d:eb:22:a0:0d:ed:b2:67:29:27:9a:d7:
a4:2c:bf:84:fd:ec:7e:11:7d:e9:fc:a6:0b:21:72:9e:d0:52:
09:8d:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:07 2025 by rpki-client