Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zR8-uNdvcNvZDWtMdL4FcBXgZ4A.roa
File: zR8-uNdvcNvZDWtMdL4FcBXgZ4A.roa (raw, json)
Hash identifier: rYN38ylxI7sCMkF+0lrL92elhgg7XPc+L2sG1d/TUXg=
Subject key identifier: CD:1F:3E:B8:D7:6F:70:DB:D9:0D:6B:4C:74:BE:05:70:15:E0:67:80
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824920A1C85E851F67920FF96D45B2A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zR8-uNdvcNvZDWtMdL4FcBXgZ4A.roa
Signing time: Thu 02 Jan 2025 17:51:12 +0000
ROA not before: Thu 02 Jan 2025 17:51:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60539
IP address blocks: 87.121.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:92:0a:1c:85:e8:51:f6:79:20:ff:96:d4:5b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd1f3eb8d76f70dbd90d6b4c74be057015e06780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:34:57:fc:86:03:f2:90:31:62:73:a6:18:
73:a6:fa:f5:7d:63:e0:66:af:58:9c:cc:48:05:5d:
81:20:48:fc:3e:df:16:1c:75:8d:1f:99:01:86:fc:
f1:73:a6:29:b4:ce:8f:3f:a3:59:1c:0c:d6:ca:0e:
fd:73:66:d4:7b:b2:05:ba:c8:ad:e3:78:62:a3:a4:
eb:42:e8:b7:5d:13:54:5e:1d:43:f0:ca:ab:9f:75:
e6:a1:fc:da:05:8b:28:c3:5a:00:08:5f:39:8e:2c:
63:f2:a1:9a:61:3f:93:65:c6:ae:72:c8:67:c4:67:
77:8d:01:33:f6:58:de:aa:bf:bc:15:0a:d4:42:31:
83:24:68:64:46:5c:d4:64:29:44:e3:f4:fe:d1:a7:
0d:01:d1:b4:31:66:3a:5e:05:bc:a8:33:32:fc:e1:
ec:8f:90:1f:63:a2:a7:e0:95:e5:93:ed:88:70:70:
1c:0b:a1:ec:3d:43:bd:50:7d:cf:02:29:ca:dd:59:
df:20:a3:67:40:6a:8e:79:5b:35:05:2a:9d:d6:3f:
fa:c9:6d:7b:2e:f0:21:d1:fa:e4:98:a9:ff:36:d8:
4a:32:4f:8a:91:12:b8:b2:e3:5d:18:4e:8e:f4:7f:
64:37:5d:0a:5f:19:51:0c:f7:a8:c9:df:78:ad:f4:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:3E:B8:D7:6F:70:DB:D9:0D:6B:4C:74:BE:05:70:15:E0:67:80
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zR8-uNdvcNvZDWtMdL4FcBXgZ4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.125.0/24
Signature Algorithm: sha256WithRSAEncryption
69:09:2c:9d:a9:32:80:9a:f4:9b:c7:e2:e8:55:62:b9:61:f9:
59:34:58:e5:e8:bc:10:63:cf:72:bf:d2:21:4f:a0:d6:7f:63:
f5:4a:db:43:94:ee:dd:ca:54:58:e0:09:6c:88:52:3e:76:f0:
fd:b4:66:a4:be:c0:e4:2c:87:75:81:b5:3f:19:14:fd:5e:14:
7b:46:ab:14:1d:8f:5e:4f:e5:e7:11:b8:5a:84:63:68:3c:6d:
55:f5:1c:3e:e4:3f:b9:55:dd:05:1d:f3:82:91:ee:45:68:c1:
e4:ae:81:f6:87:d1:e7:8e:0a:66:2f:9f:e6:77:ad:49:8a:cd:
c3:e3:44:2b:74:bc:24:8b:d1:5b:e3:99:af:ac:cd:ec:01:bd:
88:54:4d:0b:2a:ca:30:1d:60:bb:ec:30:8a:c0:87:d6:43:c1:
86:fe:bf:37:d7:bb:50:54:f2:8e:8e:45:ff:a9:3c:54:84:6e:
f4:9a:0a:e7:a3:cf:5e:ab:e5:2a:06:97:c7:7d:39:83:29:de:
ad:96:8d:a6:d8:81:83:7a:79:0b:fd:e3:c4:3e:1b:d6:b9:a5:
94:9f:ad:57:18:5d:e8:7f:03:aa:6d:23:ad:ca:12:49:29:e3:
7e:51:f7:6e:19:4b:6d:17:05:f3:f0:ed:68:48:e1:53:74:5b:
2e:45:53:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:37 2025 by rpki-client