Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa
File: eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa (raw, json)
Hash identifier: o8SV6r5/m90uv9RNHtmHfhH9wPKwfjIhitnoqSV/JH0=
Subject key identifier: 78:20:6E:BC:74:FB:20:C6:81:5C:F8:AF:BD:0D:E5:F9:87:4A:B1:FE
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 01942368E843F4DA5F424715F33E60BD471E
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa
Signing time: Wed 01 Jan 2025 19:47:45 +0000
ROA not before: Wed 01 Jan 2025 19:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209653
IP address blocks: 87.120.160.0/23 maxlen: 24
87.121.16.0/23 maxlen: 24
91.220.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e8:43:f4:da:5f:42:47:15:f3:3e:60:bd:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Jan 1 19:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78206ebc74fb20c6815cf8afbd0de5f9874ab1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:a1:7b:d4:ac:99:7b:4d:58:43:e0:df:04:
f7:5c:bd:28:8d:82:83:04:cd:21:31:cf:12:76:44:
d5:dd:01:27:8d:5c:fc:7a:ae:79:2e:96:fd:19:f3:
9c:06:e1:11:48:62:6d:60:fe:f2:e6:92:21:64:66:
38:0f:f3:86:12:35:4c:5e:db:91:5c:b5:a1:76:72:
76:42:67:84:c6:3a:1b:de:e0:f5:b1:4c:51:5a:c8:
5b:0d:7d:5d:09:2c:e8:e2:59:04:cc:c5:49:ad:f7:
29:c2:fb:e2:b5:03:10:24:1e:9a:04:ce:c3:a7:8c:
2b:fa:a0:29:a2:ed:1b:21:f4:e2:88:ae:50:e3:72:
72:b0:72:38:03:0c:ec:6d:aa:e8:d8:df:f8:23:a0:
be:3e:22:9e:d3:df:80:01:d0:59:89:f9:d1:45:69:
32:f7:c5:f3:be:2f:17:69:85:ee:c5:2b:59:e8:d0:
4a:5b:24:32:2f:90:8a:7b:dd:35:58:a7:79:8b:36:
b1:ce:cf:cb:aa:06:7e:52:6b:19:de:19:90:f8:09:
3f:7b:0a:4a:3d:56:85:02:02:19:49:14:20:b6:27:
59:ad:db:52:e1:26:c1:a6:e8:4d:9f:e2:05:92:5d:
54:95:20:17:24:5d:22:69:cf:e4:9e:04:d6:da:a9:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:20:6E:BC:74:FB:20:C6:81:5C:F8:AF:BD:0D:E5:F9:87:4A:B1:FE
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.160.0/23
87.121.16.0/23
91.220.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:aa:51:c5:cc:20:55:51:10:0a:bb:74:fa:98:dc:8c:c7:a0:
c0:f5:db:ea:4f:26:e2:ed:88:db:90:6e:ed:e9:7e:16:88:49:
7e:39:ca:36:ac:68:75:c4:35:28:79:ab:70:af:f0:a0:36:6e:
c1:aa:27:5a:5c:c5:54:34:eb:f5:ea:f1:47:4c:9e:71:1a:e8:
fb:d1:11:d4:28:7d:dd:b4:80:50:db:8f:00:fd:f0:4a:2b:b5:
5a:f3:b5:1a:d5:a1:af:a7:2c:7f:7f:36:c6:84:b9:08:27:d1:
c6:f8:8f:2b:48:d8:62:c8:80:23:81:1a:a3:b9:fd:5a:ae:b2:
86:ed:97:2c:27:5f:4a:15:83:d4:50:08:39:94:b1:a2:b4:26:
27:82:30:88:07:0a:90:8e:5c:38:c7:5b:27:b0:2f:0f:56:4c:
d2:41:3f:a8:0c:92:9f:4c:50:82:88:a3:8b:85:b2:a1:0d:8d:
9e:82:c6:99:8d:63:8a:90:2f:04:31:e9:85:91:14:09:fa:85:
d8:2c:6f:c5:cd:de:43:b4:3e:f4:45:9e:c9:3a:2c:d3:e2:45:
4b:69:ac:00:48:a8:31:83:06:31:ab:8f:4c:de:31:a5:78:39:
0d:bc:06:c2:d4:54:57:ac:0c:a5:a6:a4:39:25:0f:4b:03:a2:
e3:9c:9c:90
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQjaOhD9NpfQkcV8z5gvUceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMGY3OGE1NWE1YmU1YzAxZGI4MDNmNDM4Y2E2MTFiN2Yx
NTAzMDcwHhcNMjUwMTAxMTk0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODIwNmViYzc0ZmIyMGM2ODE1Y2Y4YWZiZDBkZTVmOTg3NGFiMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYihe9SsmXtNWEPg3wT3XL0ojYKD
BM0hMc8SdkTV3QEnjVz8eq55Lpb9GfOcBuERSGJtYP7y5pIhZGY4D/OGEjVMXtuR
XLWhdnJ2QmeExjob3uD1sUxRWshbDX1dCSzo4lkEzMVJrfcpwvvitQMQJB6aBM7D
p4wr+qApou0bIfTiiK5Q43JysHI4Awzsbaro2N/4I6C+PiKe09+AAdBZifnRRWky
98Xzvi8XaYXuxStZ6NBKWyQyL5CKe901WKd5izaxzs/LqgZ+UmsZ3hmQ+Ak/ewpK
PVaFAgIZSRQgtidZrdtS4SbBpuhNn+IFkl1UlSAXJF0iac/kngTW2qkLfQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHggbrx0+yDGgVz4r70N5fmHSrH+MB8GA1UdIwQY
MBaAFB8PeKVaW+XAHbgD9DjKYRt/FQMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDct
NzlmMTA1YWVmOGQ2LzEvZUNCdXZIVDdJTWFCWFBpdnZRM2wtWWRLc2Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDctNzlmMTA1YWVmOGQ2
LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBV3igAwQB
V3kQAwQAW9weMA0GCSqGSIb3DQEBCwUAA4IBAQCMqlHFzCBVURAKu3T6mNyMx6DA
9dvqTybi7YjbkG7t6X4WiEl+Oco2rGh1xDUoeatwr/CgNm7BqidaXMVUNOv16vFH
TJ5xGuj70RHUKH3dtIBQ248A/fBKK7Va87Ua1aGvpyx/fzbGhLkIJ9HG+I8rSNhi
yIAjgRqjuf1arrKG7ZcsJ19KFYPUUAg5lLGitCYngjCIBwqQjlw4x1snsC8PVkzS
QT+oDJKfTFCCiKOLhbKhDY2egsaZjWOKkC8EMemFkRQJ+oXYLG/Fzd5DtD70RZ7J
OizT4kVLaawASKgxgwYxq49M3jGleDkNvAbC1FRXrAylpqQ5JQ9LA6LjnJyQ
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:53 2025 by rpki-client