Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RvTt8DUgZJ1BUaFgEh3pcT71NHE.roa
File: RvTt8DUgZJ1BUaFgEh3pcT71NHE.roa (raw, json)
Hash identifier: hSdAJzJOMj701MzdWJx/UzOnzBci1Vl8h/hLn3vnxAI=
Subject key identifier: 46:F4:ED:F0:35:20:64:9D:41:51:A1:60:12:1D:E9:71:3E:F5:34:71
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0193AB08FB53E65B76E722E817EE1C8EA31F
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RvTt8DUgZJ1BUaFgEh3pcT71NHE.roa
Signing time: Mon 09 Dec 2024 10:48:32 +0000
ROA not before: Mon 09 Dec 2024 10:48:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60071
IP address blocks: 87.229.72.0/24 maxlen: 24
87.229.103.0/24 maxlen: 24
87.229.104.0/24 maxlen: 24
87.229.120.0/24 maxlen: 24
95.138.196.0/24 maxlen: 24
217.144.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:08:fb:53:e6:5b:76:e7:22:e8:17:ee:1c:8e:a3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Dec 9 10:48:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46f4edf03520649d4151a160121de9713ef53471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6f:42:76:bc:0e:cc:22:75:11:47:f7:20:f3:
8a:10:11:03:75:63:16:8c:a6:bf:c3:68:37:63:81:
3d:be:76:6e:45:f2:41:bd:b0:65:96:16:f3:21:db:
cf:ad:92:3e:48:23:99:a2:35:c6:48:80:56:95:b1:
09:29:4d:81:e1:49:0f:5d:76:11:52:af:3e:e1:6e:
b0:8a:27:47:d6:a5:0b:4f:a4:4c:3b:68:89:40:04:
1f:7d:07:d6:59:3b:be:f8:89:57:e7:6f:70:48:34:
37:01:11:86:56:cd:03:a0:77:5c:93:60:8b:b1:2e:
3e:98:44:01:0a:46:92:82:a7:c9:19:10:5d:7f:17:
0b:6c:1d:2d:19:7c:ac:9b:ff:0d:a8:29:d5:8c:3c:
c2:c0:0b:8b:5e:be:d8:44:c7:66:7c:8a:55:f8:06:
fa:08:e9:f3:f5:5b:d1:39:51:d0:48:5d:a4:07:d7:
a2:07:e2:4e:d1:31:4f:ea:47:29:91:cb:bb:7e:a9:
e6:be:41:d1:82:20:f4:a8:af:2f:88:68:51:f4:c1:
7d:d3:9d:21:3e:31:42:b5:0c:83:eb:bb:a0:d5:14:
e7:0f:41:0f:0b:ad:25:10:8c:e4:29:12:39:6f:57:
d7:06:57:d6:4f:87:0d:6e:ce:e2:8b:8c:15:99:92:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:ED:F0:35:20:64:9D:41:51:A1:60:12:1D:E9:71:3E:F5:34:71
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RvTt8DUgZJ1BUaFgEh3pcT71NHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.72.0/24
87.229.103.0-87.229.104.255
87.229.120.0/24
95.138.196.0/24
217.144.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:30:f0:36:aa:56:94:92:25:c1:4b:c6:dc:65:70:73:a5:72:
b9:50:09:f5:b3:e9:2e:03:2a:b0:5d:f8:a3:36:0f:ae:2d:cd:
9a:bc:ab:cf:85:9d:12:c6:86:56:4a:cf:bc:c6:1c:86:92:31:
70:6b:99:a7:43:c9:d3:c3:f0:d9:36:64:e6:d8:c3:aa:25:56:
81:f3:05:67:33:5c:c2:61:67:a3:93:44:59:b5:91:e8:89:f9:
db:f3:80:23:54:fc:91:ce:71:73:d0:20:5e:7d:15:a1:3b:0d:
9e:de:6c:19:5d:43:c9:bb:d5:a5:03:2b:a4:8d:69:33:80:80:
f5:2c:0b:4a:e4:9e:c8:74:67:f9:c9:f2:9f:f5:bf:b0:a9:e0:
04:15:77:4d:38:8d:4f:ee:6d:81:59:a0:11:1f:b1:14:09:46:
9e:dd:91:b2:bf:c3:3a:15:44:9a:2d:eb:fb:46:6a:ad:15:d2:
67:1f:fa:10:e0:72:50:a0:3d:c3:3e:83:2c:63:47:9a:36:12:
1c:b4:e2:48:0c:51:cf:6f:03:83:6e:1b:44:1f:e9:34:4f:b4:
02:2b:2f:3d:66:7e:6e:04:06:5b:49:ff:32:1e:70:00:98:49:
a6:08:e9:d8:1a:e7:ee:e1:bb:a4:45:f7:71:da:ee:77:8e:de:
ae:0e:27:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:36 2025 by rpki-client