Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/9MuueRmthntuKlKTwnVM9LicLuc.roa
File: 9MuueRmthntuKlKTwnVM9LicLuc.roa (raw, json)
Hash identifier: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=
Subject key identifier: F4:CB:AE:79:19:AD:86:7B:6E:2A:52:93:C2:75:4C:F4:B8:9C:2E:E7
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D64DDFA7AD210B79E663F8B495E507
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/9MuueRmthntuKlKTwnVM9LicLuc.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31083
IP address blocks: 87.118.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4d:df:a7:ad:21:0b:79:e6:63:f8:b4:95:e5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4cbae7919ad867b6e2a5293c2754cf4b89c2ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7a:70:6e:50:9d:ce:07:97:39:c1:5b:66:9e:
0e:8d:b6:e9:04:cf:0e:2f:df:5f:54:44:7c:6e:7c:
56:4c:cf:01:eb:6a:29:c2:ce:7e:d5:f7:97:69:f3:
10:3f:6a:83:b9:ad:f4:b6:41:cd:dd:44:93:04:68:
33:f9:f2:52:02:c4:b3:c6:19:5d:51:af:b6:27:ad:
b3:2c:9d:d9:6e:27:c4:71:be:ab:da:5c:df:ec:49:
50:39:e6:66:a8:a5:70:ab:e9:ba:b6:db:ae:b3:d9:
d4:55:be:ad:d7:0c:12:bd:28:dd:75:e3:45:7a:31:
cf:23:4f:47:bc:e2:e2:8b:10:c2:88:6e:e5:e4:c5:
eb:94:9f:98:6e:34:ac:5e:f2:ba:b6:4c:ee:d4:8d:
72:bd:8e:88:e0:82:55:0a:87:bc:f9:7c:d7:6b:17:
08:fa:81:b9:20:22:f1:2e:e5:48:de:ad:b7:23:ac:
3b:58:c3:3f:85:16:55:b5:9b:d8:ff:e9:c6:c4:72:
c9:d7:70:64:a5:bc:92:7e:8a:9d:cf:2b:7c:0e:de:
5f:fd:2b:a8:88:03:f3:28:8e:2d:2c:4e:20:9c:71:
bf:73:96:ba:35:3b:16:30:90:b9:f5:e8:1c:e4:eb:
f5:8a:58:6a:5f:9e:13:bf:a0:6b:16:9e:15:d9:1a:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:AE:79:19:AD:86:7B:6E:2A:52:93:C2:75:4C:F4:B8:9C:2E:E7
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/9MuueRmthntuKlKTwnVM9LicLuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6e:91:77:c4:36:47:e6:9d:cb:3a:40:9e:2d:ab:c4:69:13:
d2:34:aa:5c:4c:0f:15:9a:52:b3:72:62:ee:d2:06:ba:1f:95:
4a:43:9d:4f:10:8e:dd:32:8d:bf:5d:5e:bb:ae:1f:1a:54:91:
96:f1:37:a7:41:3f:8e:92:06:2c:d0:ee:8c:1e:c8:d2:45:81:
56:3b:ad:39:b7:1d:da:44:55:5e:dc:5c:56:d3:47:52:a2:a2:
97:c9:09:75:c5:85:55:9a:ec:a8:bf:54:58:8f:fd:c0:9e:90:
3e:62:2d:4c:34:2c:a1:0b:a1:7e:65:0b:dc:76:6e:92:be:da:
8f:bc:55:6a:24:f7:dc:1d:c6:60:dd:29:6f:5a:ec:5f:46:31:
40:af:9d:8a:21:06:cb:9a:96:53:12:d6:98:51:7f:a3:46:4b:
d5:3b:b4:09:52:18:af:d3:34:d2:88:39:4b:15:c9:1c:33:20:
a6:d5:3e:35:48:49:b9:36:5a:15:d6:00:ce:71:da:3e:d0:23:
fb:87:63:6c:d0:6f:e7:56:54:1b:47:07:50:8a:1e:97:a0:17:
4c:75:da:8e:ad:e5:3f:d7:93:cf:88:cf:b5:da:32:25:19:cd:
5f:dc:45:b4:01:3e:95:f4:56:2f:59:3c:08:d4:fe:40:a9:70:
62:9a:3e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:50 2025 by rpki-client