Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EuAlnMm9X5CqmJIjSfw-Nvfifoc.roa
File: EuAlnMm9X5CqmJIjSfw-Nvfifoc.roa (raw, json)
Hash identifier: 1Jngn/JriJasXudm6yemse3QApWPN2dcXyLgKtmKxJs=
Subject key identifier: 12:E0:25:9C:C9:BD:5F:90:AA:98:92:23:49:FC:3E:36:F7:E2:7E:87
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0195296B745178E5CCD844AB3F00DDAFCCD2
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EuAlnMm9X5CqmJIjSfw-Nvfifoc.roa
Signing time: Fri 21 Feb 2025 16:51:02 +0000
ROA not before: Fri 21 Feb 2025 16:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56367
IP address blocks: 87.229.80.0/23 maxlen: 24
87.229.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:6b:74:51:78:e5:cc:d8:44:ab:3f:00:dd:af:cc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 21 16:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12e0259cc9bd5f90aa98922349fc3e36f7e27e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:8a:ed:c5:1e:43:ab:cd:e1:3c:10:87:db:
0d:55:8d:02:68:c9:08:92:70:4e:2b:20:b5:00:2e:
79:7d:db:81:b2:ae:fc:47:0d:46:f4:b4:3b:23:df:
dd:28:57:0e:5a:5a:a8:f9:d5:61:ca:c8:dd:e6:88:
1b:f1:e8:33:d3:ca:f9:86:2a:4f:65:eb:6c:d6:8b:
fd:17:61:41:cb:47:f9:51:b0:82:09:9d:f0:d4:49:
86:62:7f:9e:a6:aa:5e:1f:d5:85:20:89:9d:99:f6:
85:9c:e5:16:83:ea:91:25:d7:d5:0f:59:56:05:88:
0e:cf:86:3f:92:b5:b2:ca:d3:d6:ce:2e:bd:71:a3:
b2:29:65:8c:f8:6a:09:78:a4:6e:1a:d4:7e:2c:19:
62:b1:6f:56:d9:dd:ab:da:be:c1:0e:dd:b6:73:d1:
04:62:4d:f3:3c:45:a0:6d:80:db:c5:b8:68:51:ec:
23:a0:d7:88:38:86:f3:3a:63:04:0e:06:28:8c:fe:
c8:c7:65:60:7b:5c:84:3b:6b:f0:06:9c:cd:dc:f1:
38:f3:af:80:ee:71:33:85:ac:32:f4:3c:f0:51:ab:
4d:1c:b7:58:8a:34:d2:45:b2:87:bc:8e:80:3b:18:
f7:0b:aa:58:1a:c3:44:be:62:0c:f3:c8:07:2f:1e:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:25:9C:C9:BD:5F:90:AA:98:92:23:49:FC:3E:36:F7:E2:7E:87
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EuAlnMm9X5CqmJIjSfw-Nvfifoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.80.0/23
87.229.110.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4f:ac:a5:54:b9:79:40:66:d7:19:a7:bc:9f:13:53:20:1f:
ed:c6:9b:de:04:68:f9:3e:20:41:15:c7:26:6a:3c:2a:67:83:
a9:1b:c2:81:41:53:e6:9a:1a:7b:fb:81:05:bd:3b:d1:7d:a9:
29:6f:72:bf:25:8b:c4:4a:ec:99:79:78:10:5b:f7:90:b3:20:
7d:45:71:72:99:80:c1:d2:d8:48:d3:3c:00:22:89:47:a5:82:
c6:b7:00:c0:30:9d:89:ce:ce:30:cc:32:e8:1b:e7:61:56:4d:
5d:29:3a:1e:96:e8:cb:27:6c:5d:a1:cb:cd:8a:f8:67:ac:d5:
b1:7e:4b:4c:b5:e5:d5:17:da:28:bf:b0:28:b4:a6:84:a0:b4:
fe:8f:c9:92:97:28:31:8d:f0:cd:38:e3:25:5d:19:88:02:86:
2b:89:d2:05:4c:f5:02:ae:e4:1c:dd:a9:8a:40:a8:b7:a6:28:
75:93:8d:6f:49:bf:26:5e:4d:68:d3:d3:0f:6f:63:a3:b8:45:
2d:d8:26:28:e6:d9:da:31:84:99:a9:39:a5:ae:17:31:52:69:
71:e8:92:c9:d7:f0:b7:d8:e7:91:65:a4:c2:b7:73:d0:15:c4:
b1:0f:e6:1c:b6:e7:61:21:4e:b8:13:ca:e7:43:fb:12:05:2c:
49:89:a9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:32:59 2025 by rpki-client