Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/D60LCQbecHPyrctnihMwX9Ok1A0.roa
File: D60LCQbecHPyrctnihMwX9Ok1A0.roa (raw, json)
Hash identifier: iFskfzv9zkoHuBNwW6pggGltzR1oEux8tOK/PEGNCtA=
Subject key identifier: 0F:AD:0B:09:06:DE:70:73:F2:AD:CB:67:8A:13:30:5F:D3:A4:D4:0D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019543119D6F715D6CE1DCC6CC5E33E64986
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/D60LCQbecHPyrctnihMwX9Ok1A0.roa
Signing time: Wed 26 Feb 2025 16:23:02 +0000
ROA not before: Wed 26 Feb 2025 16:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 87.229.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:11:9d:6f:71:5d:6c:e1:dc:c6:cc:5e:33:e6:49:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 26 16:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fad0b0906de7073f2adcb678a13305fd3a4d40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b3:29:0c:eb:9c:25:dc:a9:14:90:45:e2:d8:
37:90:c4:ec:e3:d0:c2:60:9a:2e:b6:5a:c8:c7:73:
79:41:65:41:42:96:a4:cf:5a:83:48:75:2e:b1:5b:
05:0e:b1:88:c3:27:b7:af:6f:7b:e3:91:ed:15:d0:
f7:dc:ef:85:84:d7:08:e7:bd:7e:71:6c:22:94:f8:
db:06:86:5d:2a:cb:fd:87:be:4b:94:6a:b2:83:bb:
cc:39:6c:b9:c1:35:8d:ef:ec:c4:0c:e3:45:22:26:
0b:bd:9e:a1:b0:c2:18:49:c0:a2:dc:7f:2a:c2:b7:
08:61:41:42:7c:bc:e0:6e:7d:70:4f:bc:73:c2:e9:
a5:b6:9e:1a:e6:b2:af:51:f4:4f:c0:c0:b6:f6:d8:
bd:e1:25:96:1f:4c:de:02:cb:ea:4a:7c:2b:31:06:
b5:80:d9:b6:1d:af:f3:ba:f6:78:6f:97:9e:45:60:
5d:bb:c7:64:16:30:d1:34:f9:99:7a:32:8e:d2:89:
73:25:b8:59:fb:ae:bf:7b:7e:e6:d2:5b:59:82:d7:
d7:d1:c1:0b:76:0a:d2:52:94:2d:e8:89:31:3b:5f:
a6:76:66:87:5f:a5:2c:7a:a5:f2:7a:ab:5a:46:68:
ea:f4:bb:11:a5:c1:e8:f6:87:c1:cc:da:8f:f6:16:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AD:0B:09:06:DE:70:73:F2:AD:CB:67:8A:13:30:5F:D3:A4:D4:0D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/D60LCQbecHPyrctnihMwX9Ok1A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:dd:03:4b:ea:88:fb:02:47:88:d4:d2:4e:1d:c9:17:aa:3a:
12:d6:ce:66:bc:7e:b5:01:c6:ec:91:dd:ae:d2:64:1b:ef:77:
6d:b0:f8:40:f9:e3:9f:e0:a1:97:f2:e8:30:11:1d:63:70:84:
56:c8:81:60:b2:f6:64:db:d7:05:f2:35:b4:e3:94:8c:eb:4c:
b7:09:c4:b8:21:2c:cb:4e:59:3f:10:43:de:6e:92:56:aa:af:
95:d0:14:89:b7:8b:04:64:3f:9e:d9:0b:3f:05:1f:ce:05:7d:
f9:f5:94:38:8f:4f:86:bf:73:fe:a2:60:c9:71:d8:26:3c:0e:
8c:7d:cf:44:74:a9:8e:2d:55:93:81:c3:28:bb:f6:4c:a2:e6:
71:b8:a5:0a:f6:05:e5:9d:9e:c2:19:f0:0a:7e:87:07:69:96:
40:fa:b9:97:a2:f0:10:3f:fe:63:7c:de:91:4a:34:f5:85:f5:
2a:67:6c:bb:37:41:b9:05:b2:11:2a:5e:b5:b1:78:5a:96:be:
3f:ae:54:82:ea:0d:50:25:45:2c:63:ff:cc:f8:a0:e0:d4:6b:
9b:e8:3a:2b:e7:9c:fd:90:88:58:dd:21:26:d1:9c:48:1b:9a:
2c:a1:a2:a9:22:4c:a4:20:a3:62:8a:a3:45:c6:86:c0:a9:c6:
7c:91:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:34 2025 by rpki-client