Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9oT_r9TwfA94UmqVWPuzHlOK7co.roa
File: 9oT_r9TwfA94UmqVWPuzHlOK7co.roa (raw, json)
Hash identifier: OIpeonrRECNkc9t6K3PfMCfHFDgf005+9SvHZWYGxl4=
Subject key identifier: F6:84:FF:AF:D4:F0:7C:0F:78:52:6A:95:58:FB:B3:1E:53:8A:ED:CA
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428280707CEC6BC8F74491D05826DA9DB
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9oT_r9TwfA94UmqVWPuzHlOK7co.roa
Signing time: Thu 02 Jan 2025 17:54:59 +0000
ROA not before: Thu 02 Jan 2025 17:54:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 87.227.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:07:07:ce:c6:bc:8f:74:49:1d:05:82:6d:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:54:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f684ffafd4f07c0f78526a9558fbb31e538aedca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:8a:4b:eb:8a:e3:b4:ee:28:03:3d:8d:58:
b2:70:f1:29:8a:74:8b:fd:7f:5e:b2:8d:ef:32:b9:
56:af:49:1f:1a:e3:71:3c:89:31:8b:b5:c9:37:25:
1b:71:65:e8:72:ae:04:fe:e9:d7:9e:4b:e1:92:fe:
47:c0:23:a8:03:ef:31:48:29:c5:6a:8d:f8:f1:4d:
66:3f:d1:c6:c7:72:df:7d:17:54:2d:34:26:ee:19:
2b:4e:05:cc:db:ca:a9:04:5b:0d:b5:92:0f:47:b4:
11:09:e9:80:e9:f8:ca:0e:d2:b8:50:6f:45:ed:46:
e3:dd:ae:23:2d:5e:31:0b:f2:70:02:1a:64:ff:fe:
53:a3:b1:14:f7:eb:5d:16:c4:c0:db:0b:f8:d7:fe:
e8:b8:d9:67:db:0f:e0:03:65:05:ad:7a:c4:7a:89:
5f:88:7b:c1:f6:cb:0a:3c:e7:50:d5:e4:fa:9d:09:
07:6f:a6:cc:9c:45:d9:f6:99:95:fc:1a:1e:2d:73:
22:73:18:63:21:52:c6:15:dc:2f:3a:27:a1:b8:a5:
1f:e7:be:63:1c:36:59:c5:7b:fd:91:f0:54:1c:5c:
30:52:93:45:22:85:0f:61:de:26:6d:8a:79:f0:c6:
87:e9:af:d7:a2:27:a9:de:49:37:e7:b5:63:20:0d:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:FF:AF:D4:F0:7C:0F:78:52:6A:95:58:FB:B3:1E:53:8A:ED:CA
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9oT_r9TwfA94UmqVWPuzHlOK7co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.206.0/24
Signature Algorithm: sha256WithRSAEncryption
51:32:a8:2c:25:8a:de:46:f3:68:f3:71:11:3e:0b:b5:5f:0e:
e0:a5:d8:89:e4:7c:56:16:b8:a9:29:81:0e:b4:3d:92:9c:98:
f3:89:28:8e:9f:22:2e:16:4e:4b:cf:64:8f:51:12:a9:a4:5d:
4f:78:49:33:2d:13:09:16:bd:65:52:33:b1:91:89:e9:d6:de:
41:11:29:18:87:fd:2e:f5:86:da:02:0c:df:b1:dc:70:14:12:
e3:ae:17:b5:77:c5:7a:b8:33:49:05:9a:3c:c9:31:c9:4d:ac:
21:e6:63:ff:f3:88:df:f3:86:bf:b1:c4:0a:62:4d:d7:fe:20:
9e:75:32:52:f3:6d:83:f6:0f:60:b2:6d:cc:0c:b9:79:35:a8:
70:ba:9f:08:b3:98:ec:d4:c5:05:0c:d4:2c:78:45:43:ec:79:
f3:f4:fa:2e:cc:2b:7a:3c:cf:ac:bb:c0:88:08:a2:42:4b:18:
5b:4c:2a:85:14:8b:9f:73:e5:c9:9b:dd:88:0e:dd:a7:db:3a:
de:e7:f5:da:44:6a:15:bc:aa:f9:bc:27:01:73:58:0b:90:af:
8a:b9:47:25:25:41:68:64:4c:e1:c0:4a:34:ee:06:9a:fc:9b:
e4:63:43:03:8c:c8:46:34:87:1e:1e:ab:62:7a:e2:59:d1:bc:
fe:47:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:51 2025 by rpki-client