Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QjNWakgFwPFLd7AhDnYs0FpZIGw.roa
File: QjNWakgFwPFLd7AhDnYs0FpZIGw.roa (raw, json)
Hash identifier: PjW653OBjwRpRYz6lADxqwxiGjHM3WTfrwUvpbwCRPE=
Subject key identifier: 42:33:56:6A:48:05:C0:F1:4B:77:B0:21:0E:76:2C:D0:5A:59:20:6C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0194C7328E57F589214DFBBF172474670178
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QjNWakgFwPFLd7AhDnYs0FpZIGw.roa
Signing time: Sun 02 Feb 2025 15:06:06 +0000
ROA not before: Sun 02 Feb 2025 15:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.31.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c7:32:8e:57:f5:89:21:4d:fb:bf:17:24:74:67:01:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 2 15:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4233566a4805c0f14b77b0210e762cd05a59206c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:96:f9:66:00:b2:93:c8:18:55:ff:7b:42:18:
ca:42:ea:72:90:ba:cf:40:d1:c7:d3:f1:ad:9a:b2:
80:83:f1:a1:10:6f:b2:13:bc:bc:b9:7c:7c:6f:76:
1c:4a:12:ce:bf:9e:8c:55:cf:4a:a6:46:09:df:76:
82:0e:b4:57:92:ae:e8:7c:58:5f:03:4c:51:c6:3f:
98:d5:ff:55:b0:2b:18:6b:95:dd:6e:f0:46:02:4a:
a3:ae:f7:b5:9d:1d:87:08:9b:94:28:fb:ba:3a:10:
0d:3f:e5:ec:32:b8:65:60:dd:31:9f:03:30:fd:c1:
7a:83:ac:9c:01:3c:c5:96:72:44:4b:d2:90:99:b1:
7e:ef:40:e1:fd:f8:32:38:65:ce:15:b2:0c:4a:bb:
b8:5a:7d:92:f0:ef:b1:14:f8:15:92:4e:d3:15:8f:
4b:62:70:b4:8f:9e:05:11:5e:1e:f2:8b:28:4d:7b:
fa:20:62:fe:0c:fd:1f:14:6b:cd:45:0b:69:f5:a5:
57:2d:9d:42:a6:f5:81:f3:6e:eb:97:2c:e6:9e:3f:
38:e9:8b:74:72:ab:a8:ae:56:79:36:a1:05:53:9c:
f9:9d:66:76:3c:2a:d7:93:2a:a7:fe:e4:25:c4:54:
d5:ce:5d:88:33:ce:ae:4a:e2:31:05:93:c0:ae:e5:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:56:6A:48:05:C0:F1:4B:77:B0:21:0E:76:2C:D0:5A:59:20:6C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QjNWakgFwPFLd7AhDnYs0FpZIGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.31.0/24
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:92:ae:cf:fb:bf:c5:2f:75:62:61:de:00:4d:34:86:b1:5b:
41:1c:d4:0c:1d:b8:77:3b:e3:4f:20:00:96:e4:c4:c5:fb:91:
17:79:6d:6a:7e:16:2a:5e:ac:12:4f:c5:78:5f:41:d1:f4:93:
23:aa:30:be:bb:aa:a2:02:9a:4b:31:a5:a3:a1:bc:dc:20:80:
7e:14:75:9f:2c:15:87:2d:dd:4c:b3:9b:2f:48:20:32:c2:75:
2c:40:2a:2f:ce:04:e2:f8:2d:cf:13:a5:d0:f4:92:9c:ef:b9:
db:f9:38:52:cd:6f:78:62:3f:de:0b:68:fe:ed:96:6e:dc:f7:
15:86:6e:51:df:86:e8:75:c8:8f:02:a5:dc:16:e2:47:33:6b:
c2:c7:b5:1a:74:a4:be:ca:e9:40:1c:ff:f5:b4:04:66:04:f5:
5e:ee:a9:0f:cd:f4:db:ec:ce:f8:de:20:da:1d:0c:86:ee:9e:
31:da:d8:be:26:aa:88:45:89:e8:82:26:02:74:ad:10:93:9c:
d4:8b:c7:09:a3:7f:5e:15:91:19:3b:1a:83:93:6a:ed:04:93:
f8:ef:9d:09:47:ca:15:57:e7:bf:6e:fc:6c:ad:79:22:20:db:
d8:50:e2:d5:e4:6c:0a:1e:e5:e7:ce:5b:1d:86:3c:dd:87:4f:
6a:b3:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:13 2025 by rpki-client