Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/PhAdv-HJnlbg1VJ9bdzkQZ0YfS0.roa
File: PhAdv-HJnlbg1VJ9bdzkQZ0YfS0.roa (raw, json)
Hash identifier: iSIRCMFBMSqE4z8S3JoTtCf3BJrvo4BK0Aotf9oHvEM=
Subject key identifier: 3E:10:1D:BF:E1:C9:9E:56:E0:D5:52:7D:6D:DC:E4:41:9D:18:7D:2D
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019422FBD6D54629E33CE7E64A5CDDAFE059
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/PhAdv-HJnlbg1VJ9bdzkQZ0YfS0.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 87.58.64.0/24 maxlen: 24
87.58.65.0/24 maxlen: 24
194.9.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d6:d5:46:29:e3:3c:e7:e6:4a:5c:dd:af:e0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e101dbfe1c99e56e0d5527d6ddce4419d187d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:9b:f7:73:29:4f:ed:6f:00:ba:0e:03:d3:
bd:79:93:24:d8:4a:af:bd:99:ad:23:cf:19:bc:f5:
26:bf:eb:7d:cc:46:86:7e:3d:fe:37:aa:b2:bb:e6:
c4:0f:dc:06:bf:d5:c3:44:d7:fb:71:ee:20:e9:c2:
19:ae:12:93:bf:8f:e9:24:8b:3f:25:34:8e:b3:ec:
81:b2:2c:f4:e7:32:fd:8e:08:57:fe:18:a1:d0:45:
7e:61:2f:31:8d:b7:b0:6b:84:4b:3e:ee:16:2f:e9:
f8:e5:b0:da:64:41:63:b7:d3:0c:e1:3d:be:6a:dd:
23:a0:40:a8:5d:28:01:ae:fa:ed:68:5d:ed:ac:0b:
3e:48:aa:8d:d9:1e:4d:67:d3:b2:d8:f1:4b:f1:f7:
52:42:1e:a2:7c:f5:ec:7d:37:79:5b:bf:ff:5d:5c:
09:c4:58:87:c3:85:8e:98:fd:67:15:7b:a4:9b:78:
53:cf:2d:8a:19:06:02:00:d0:ad:9c:10:1e:b1:f1:
c6:a3:ce:38:ff:ca:2d:d3:33:0f:4f:4b:ea:7b:9f:
c9:f7:56:39:51:d6:9a:45:d4:31:b1:87:46:e5:03:
54:24:b7:da:0f:ad:eb:17:d5:8d:c4:da:7a:06:33:
c1:4b:66:a9:b3:8a:1a:c7:d8:70:da:53:a7:8c:47:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:1D:BF:E1:C9:9E:56:E0:D5:52:7D:6D:DC:E4:41:9D:18:7D:2D
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/PhAdv-HJnlbg1VJ9bdzkQZ0YfS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/23
194.9.116.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c1:82:a3:98:d9:68:77:f8:f4:4b:d1:39:8e:b6:17:02:e1:
09:00:e1:f0:58:25:8c:7f:49:9d:16:dd:23:f3:6d:94:94:10:
7b:dd:4b:0d:43:69:8c:44:48:88:d6:b2:d2:eb:78:25:54:4d:
83:f2:50:81:fa:94:75:b3:57:fe:26:75:5b:fa:26:10:46:26:
92:7c:e7:17:65:fd:bf:a8:c2:ad:a2:54:95:70:8e:40:dc:ca:
ca:c5:7f:66:bf:68:a4:64:13:2d:e6:af:00:96:cb:8d:52:d1:
76:c4:35:d2:08:21:e0:7e:66:72:f9:e6:0e:8f:5f:77:70:92:
57:de:a0:65:91:7c:2d:65:fc:01:c7:20:be:0d:a4:33:42:44:
56:e0:c8:05:0e:9e:61:c3:c1:47:fd:3f:b1:49:45:a2:b0:86:
c2:d7:04:14:a7:a7:ef:74:a8:92:4a:10:2a:5c:c1:d7:b9:5f:
ac:0b:f7:c0:e3:d3:1c:04:cc:6b:4b:a6:17:40:9b:49:48:f4:
74:48:87:be:98:25:ce:6b:b3:32:48:68:25:e6:39:de:63:06:
89:dc:89:38:91:cc:bf:54:4c:66:9c:62:a6:7c:b6:97:2e:db:
e8:60:21:0c:81:b9:0d:70:3e:30:a3:be:24:23:c6:06:6f:06:
c8:c2:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:07 2025 by rpki-client