Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0DF0N6re6QyjGkcELrZ2PayQLRE.roa
File: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (raw, json)
Hash identifier: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=
Subject key identifier: D0:31:74:37:AA:DE:E9:0C:A3:1A:47:04:2E:B6:76:3D:AC:90:2D:11
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D6548FE9DEE379470EE675A34BDAE6
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0DF0N6re6QyjGkcELrZ2PayQLRE.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59851
IP address blocks: 87.118.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:54:8f:e9:de:e3:79:47:0e:e6:75:a3:4b:da:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0317437aadee90ca31a47042eb6763dac902d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:fc:cd:dc:d8:9f:12:40:80:0c:0c:76:88:
45:e9:33:fc:b4:a2:bc:99:ab:ae:d5:1e:ef:9e:11:
9f:78:fe:97:43:41:04:7e:e5:af:76:02:0c:b1:c8:
22:0d:ec:f9:c0:d8:12:87:27:b8:e9:88:92:82:b5:
ec:9f:62:7f:9e:5a:94:aa:46:f5:71:2a:ee:ca:4e:
d3:6d:8a:a6:35:0a:65:03:58:94:cb:9d:d0:7b:de:
54:91:23:34:32:5f:5a:5a:7f:c1:08:d0:04:38:fe:
82:fa:dd:9f:a2:29:36:99:cc:9d:af:26:19:0a:3f:
c4:c1:0e:c5:a3:65:07:34:4e:df:c4:5c:e4:80:c1:
67:dd:81:9e:9c:8d:55:58:21:1c:eb:aa:db:02:07:
23:36:8e:75:eb:7b:91:81:44:c8:f8:10:82:c1:27:
90:e9:39:40:47:df:d1:96:9a:43:05:79:67:cb:5b:
14:6d:fe:e2:07:c7:80:4c:05:74:16:0d:61:52:74:
39:f5:ae:3e:42:fa:11:d8:30:ad:2e:d7:03:ff:cc:
25:86:23:f3:39:6e:af:2c:11:cf:c0:2e:8e:cf:7a:
87:43:67:bb:36:85:11:58:2d:b0:f1:8c:86:1e:8a:
03:94:a4:fd:69:ab:a3:02:21:be:93:ac:12:20:bf:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:74:37:AA:DE:E9:0C:A3:1A:47:04:2E:B6:76:3D:AC:90:2D:11
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0DF0N6re6QyjGkcELrZ2PayQLRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.135.0/24
Signature Algorithm: sha256WithRSAEncryption
16:96:d6:2c:ef:a8:b9:38:d2:91:4f:f0:20:63:26:0c:94:bf:
6c:a4:87:63:f5:ba:fe:c3:2f:0b:31:03:ef:ef:7c:b0:f9:41:
cf:3d:28:90:1f:9a:96:b2:f5:91:9e:de:ab:63:d3:a8:5f:99:
2b:e2:32:71:8d:19:71:dc:1a:74:85:23:36:ae:94:c8:95:54:
20:8e:06:19:88:97:e1:76:ed:24:79:9f:b0:b3:e2:08:f5:9b:
ae:88:c5:f9:8f:ad:f8:a6:76:fd:ad:1d:69:ea:9c:0c:e1:c0:
72:3a:b1:5c:97:a8:2e:f4:a2:bb:57:07:94:56:9d:13:2f:7b:
e0:c2:3d:95:e2:a0:1c:3a:0a:d1:d0:12:4e:15:5c:92:cd:80:
e8:53:fe:7f:82:c8:1b:e0:cd:ed:da:53:55:bb:c7:69:ae:94:
9b:a3:f7:a1:c3:aa:10:0d:47:11:b9:fb:7e:79:96:d8:59:ab:
69:95:9f:2b:1e:43:55:bf:a6:dd:02:d5:01:d9:81:ca:09:a7:
f3:a8:51:81:ac:96:c6:72:b7:c8:76:ff:7b:09:c5:86:7a:a6:
dc:66:49:02:20:50:54:9b:16:04:17:a0:ca:b9:60:a1:83:8c:
8e:63:32:c2:15:48:95:70:72:2b:3b:0d:84:42:c5:41:95:34:
77:fa:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:26 2025 by rpki-client