Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KW7dT25bcq1N7KHAFN4wJZ4b7t8.roa
File: KW7dT25bcq1N7KHAFN4wJZ4b7t8.roa (raw, json)
Hash identifier: xNPlFVXQvdLOrVa27CBPLZOh/d0qsv4kRXbLLKDrRG8=
Subject key identifier: 29:6E:DD:4F:6E:5B:72:AD:4D:EC:A1:C0:14:DE:30:25:9E:1B:EE:DF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0195D6A4A78091795AE7BC9EEA17C5ED0D27
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KW7dT25bcq1N7KHAFN4wJZ4b7t8.roa
Signing time: Thu 27 Mar 2025 08:07:49 +0000
ROA not before: Thu 27 Mar 2025 08:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.8.0/22 maxlen: 22
87.229.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:a4:a7:80:91:79:5a:e7:bc:9e:ea:17:c5:ed:0d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 27 08:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=296edd4f6e5b72ad4deca1c014de30259e1beedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:88:2a:de:d9:bf:c9:75:7e:74:8b:3b:42:
0e:4b:76:2a:f0:1f:9e:39:73:44:3c:54:f3:b4:72:
df:0c:4c:94:44:c5:23:ea:fa:f3:82:53:36:a1:55:
d3:ce:27:05:c0:c3:28:f3:56:df:df:e4:b9:aa:d5:
6e:40:71:6b:38:10:a7:ab:dd:15:03:39:a9:e5:bb:
98:b6:32:80:2c:e8:b1:b1:77:16:83:ff:74:d1:40:
fe:d2:ab:3a:49:b7:36:66:9f:e2:25:7b:27:55:70:
78:f3:9d:a3:48:69:f9:28:50:9e:c8:ae:85:15:45:
b3:8a:97:a5:44:72:07:cc:42:a1:58:d1:f7:0d:4b:
8d:18:71:fa:a1:a0:6e:42:a0:37:59:da:17:34:6b:
cb:e3:f5:ff:c5:64:14:5f:21:91:09:a1:e0:23:f9:
ae:8a:24:a4:84:08:94:0f:ce:01:8b:b1:bd:8d:7e:
fe:55:96:6d:18:1b:12:e6:79:8c:67:3c:ff:ac:48:
d5:91:39:97:1b:b5:95:9f:dc:85:42:db:37:be:c9:
b0:17:45:fa:a8:d2:bc:a6:11:a0:38:06:c0:f9:e3:
9b:84:c5:44:12:3d:76:f1:be:f3:fa:08:3a:4d:95:
5c:71:a0:6c:47:75:f4:3c:32:9b:0c:ca:a2:58:5e:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6E:DD:4F:6E:5B:72:AD:4D:EC:A1:C0:14:DE:30:25:9E:1B:EE:DF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/KW7dT25bcq1N7KHAFN4wJZ4b7t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0/22
87.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
20:44:5b:ba:e4:4f:65:34:0d:cc:40:54:98:0b:de:77:12:f6:
52:d3:ac:bf:5b:e8:54:f8:2c:dc:78:63:2f:58:43:74:6c:a8:
66:0f:e2:6f:c1:34:7a:c3:c3:69:e9:9b:85:29:75:59:b0:95:
0e:1a:f6:06:7a:44:07:40:3f:5f:7c:4b:3e:c4:e4:ef:d9:38:
69:cb:f6:e2:c8:a7:8d:c8:ab:02:cb:6c:9f:1f:35:2b:81:bd:
fd:c1:c7:b2:1b:ce:16:60:a1:49:3f:85:d9:3b:88:2d:16:dd:
3b:31:10:64:e5:20:a4:78:37:20:e1:09:3a:68:a6:cd:9a:d3:
01:dc:ad:e9:ae:03:32:d8:c0:5d:b1:e4:34:88:92:50:7e:bd:
e6:0a:f8:bb:92:70:96:5e:81:3c:08:bf:c8:3e:f2:fc:9a:1d:
96:3e:1d:41:17:7d:22:0a:a0:15:79:af:d4:3c:9c:45:e5:67:
56:95:ab:07:92:09:74:ab:73:48:55:ad:8b:62:47:a8:bf:44:
6c:c0:0a:e4:2c:33:89:af:e1:38:f6:68:b5:6c:71:27:6e:08:
eb:33:f3:50:6e:53:7a:34:d8:3c:dc:7e:70:ad:1e:7b:3b:f5:
4f:0e:13:4c:77:03:00:6a:3b:4f:70:75:54:89:3f:3a:1b:3d:
8e:6d:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:34:38 2025 by rpki-client