Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ksJUh4hG5S_P4p1TTcqh_SUbIjY.roa
File: ksJUh4hG5S_P4p1TTcqh_SUbIjY.roa (raw, json)
Hash identifier: mTM6a+O+0K+OAJZ6HZM/A5EVh+VOa0DKYpPbMPy3aoU=
Subject key identifier: 92:C2:54:87:88:46:E5:2F:CF:E2:9D:53:4D:CA:A1:FD:25:1B:22:36
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B1F68A9529EE2E4C474A88549BB5
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ksJUh4hG5S_P4p1TTcqh_SUbIjY.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35473
IP address blocks: 213.87.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b1:f6:8a:95:29:ee:2e:4c:47:4a:88:54:9b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c254878846e52fcfe29d534dcaa1fd251b2236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:5b:2e:6f:7a:90:ca:cc:9b:3c:70:d3:91:
31:c7:80:e0:be:ea:2f:ea:bd:57:ac:92:d2:f9:e1:
cb:ed:11:30:6a:cf:d9:75:81:67:d1:68:07:07:1c:
d5:0a:f0:80:33:65:28:85:46:23:44:2a:8e:b3:f4:
58:3a:90:c3:11:52:f7:2d:8d:c3:3d:c7:7c:99:ef:
6c:70:dc:1c:da:01:17:e0:c1:d0:42:05:61:54:e7:
5a:c7:6d:d7:a3:b9:cc:f4:7c:7d:00:f5:5f:ba:c4:
61:72:66:cf:c0:7c:51:af:1e:63:32:b4:e5:56:d1:
74:36:83:1b:5f:0c:91:bb:fc:a2:4f:f8:07:d7:73:
c8:d7:9f:c1:25:06:d7:0f:53:e0:e2:11:82:4a:4d:
3c:c5:35:4c:46:04:30:c8:7a:27:87:09:52:ed:7d:
a8:13:8c:30:04:e4:69:b5:97:ea:ab:48:0d:96:0e:
6d:7c:79:64:f4:cc:3f:6b:d8:2b:fc:8a:ff:47:b7:
3c:89:35:4b:0c:41:c0:90:de:ad:0a:ce:f1:43:d8:
2a:d8:79:27:07:f5:fd:cb:2e:c0:a2:1e:6c:fc:ca:
1e:9c:32:8a:7a:94:2f:74:c2:de:90:12:6a:ea:36:
39:5a:05:96:9a:c6:b8:3d:6c:29:1d:ba:5c:f5:f2:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:54:87:88:46:E5:2F:CF:E2:9D:53:4D:CA:A1:FD:25:1B:22:36
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ksJUh4hG5S_P4p1TTcqh_SUbIjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:c8:90:48:93:67:b8:74:0f:48:7f:ac:d8:84:51:03:0c:3a:
8e:26:1a:7d:1a:8c:48:65:f5:a1:26:e5:18:a7:03:fb:c8:4d:
74:9e:83:a6:a0:24:6b:e2:83:83:96:59:cb:b7:50:18:04:be:
7d:f0:82:b2:86:1b:30:e7:44:ca:d7:36:50:3f:6a:9a:4a:75:
4c:11:4f:20:e3:c3:9e:7a:3a:21:d4:9a:6a:78:10:44:a4:1f:
69:63:c6:e9:ca:a0:45:53:91:f1:63:a9:7c:df:85:b7:c5:76:
3a:4e:e0:33:30:99:b3:e3:28:c5:9a:45:33:f1:da:94:4b:cb:
75:ee:55:a3:29:49:49:2f:a9:9b:b0:6d:4b:11:c3:a8:52:01:
d3:13:52:e9:bd:be:ff:a6:1e:dc:b8:7a:2f:ac:fd:d4:f6:ce:
98:16:59:58:9d:35:bf:2d:49:32:99:67:51:b8:00:f4:f0:5e:
9f:b6:9a:e9:5d:e8:a0:2a:2f:17:4c:06:82:93:6b:76:3a:ff:
20:13:e0:43:30:8a:53:2b:b6:84:e8:ff:c0:3a:52:dc:fb:6a:
89:fa:ab:69:18:1e:3b:6f:f9:61:3b:19:92:84:d2:c9:46:97:
0f:b1:ba:9b:05:5a:35:d8:96:a0:26:69:4b:f3:ff:73:72:34:
55:e2:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:24 2025 by rpki-client