Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F9PxH-BljsBsPxH7HsStoezyCYA.roa
File: F9PxH-BljsBsPxH7HsStoezyCYA.roa (raw, json)
Hash identifier: AN5Fp77pHxEcdU3E15gMgpQnn2FkMrblLpPaUXMwoq0=
Subject key identifier: 17:D3:F1:1F:E0:65:8E:C0:6C:3F:11:FB:1E:C4:AD:A1:EC:F2:09:80
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827C7814FED6F32E2410D5B39039574
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F9PxH-BljsBsPxH7HsStoezyCYA.roa
Signing time: Thu 02 Jan 2025 17:54:43 +0000
ROA not before: Thu 02 Jan 2025 17:54:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215904
IP address blocks: 87.229.84.0/23 maxlen: 23
178.238.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:c7:81:4f:ed:6f:32:e2:41:0d:5b:39:03:95:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d3f11fe0658ec06c3f11fb1ec4ada1ecf20980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:96:61:7a:e6:67:11:6f:7f:32:09:5b:40:
cf:ab:b6:f5:f6:1e:da:c4:c2:ce:82:dd:9f:c8:29:
f4:3d:07:13:87:74:77:54:bc:87:f9:d2:2a:95:9f:
3a:33:f7:fb:01:e2:cf:fb:6f:26:71:55:bc:35:94:
1c:5a:fc:45:e0:5d:8c:66:d5:a0:ae:aa:95:51:ba:
6d:2d:e1:ae:6d:9b:3d:12:37:ef:75:d7:ce:cb:66:
8a:39:34:a0:54:06:8e:69:08:37:cf:61:53:6d:bc:
06:56:14:43:d7:84:52:ef:f7:d5:d7:71:dc:6e:66:
f1:01:af:94:b5:d8:05:0e:fe:60:28:f4:f3:79:14:
a5:4f:b9:50:85:00:88:fe:f2:8e:8a:27:5e:8e:03:
8a:92:06:a5:94:e1:7c:c3:0e:79:52:64:17:5a:61:
0a:17:5f:cc:26:ef:4f:5f:9c:d5:9a:1e:2c:24:e9:
93:c3:e2:0c:24:6b:20:0d:29:f5:5b:b6:a7:e5:98:
c1:58:c0:a5:f9:10:78:77:5e:44:ad:ab:29:a9:57:
c3:f0:10:29:59:af:ec:84:05:10:84:99:3e:20:a5:
3b:22:0a:8a:79:88:0b:1b:9b:32:ac:b5:99:8a:79:
e2:cc:cc:72:2c:b9:db:29:68:39:0a:26:d1:b5:9a:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:F1:1F:E0:65:8E:C0:6C:3F:11:FB:1E:C4:AD:A1:EC:F2:09:80
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/F9PxH-BljsBsPxH7HsStoezyCYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.84.0/23
178.238.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:dc:93:b9:42:92:c9:3f:c6:4d:8c:68:9c:bd:41:da:16:1f:
7b:63:69:e4:fd:ec:5a:68:bf:95:fd:f9:cd:6e:89:c4:7d:11:
96:97:31:5f:5c:61:49:32:44:7b:21:29:e2:c1:08:26:5b:3c:
6d:df:13:12:9e:2a:08:d5:a2:fc:55:0b:c8:75:d3:e6:a7:5c:
b3:b7:fc:27:45:ba:a0:7e:fb:31:21:38:9b:2c:91:f5:6a:2e:
df:6a:e8:d1:1a:44:3f:ae:77:3f:37:90:12:ee:37:96:7c:20:
47:94:b5:e7:3e:33:9f:fa:38:2e:c3:87:8d:42:49:73:fd:f9:
31:11:7c:33:c7:b5:72:8a:2d:db:fa:f9:6f:0a:45:3e:f5:17:
d9:d7:40:c2:eb:f0:94:aa:73:36:83:61:2f:c7:a3:94:de:cd:
a2:41:62:0d:c7:90:85:09:0c:00:73:81:1b:85:6f:91:41:8f:
44:7c:89:27:36:ad:c5:91:be:bd:61:87:21:12:4d:dc:af:ec:
12:e5:b3:c0:a3:e6:3c:c9:0b:d5:18:cb:5c:bf:11:db:e7:05:
e5:f5:f1:71:ae:d3:b9:77:08:59:dd:41:ea:ff:a0:97:3c:ef:
85:9e:cd:af:6c:3a:4b:8c:87:1d:c0:ae:91:65:33:31:62:a4:
ef:b2:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:44 2025 by rpki-client