Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SIFp25Z5J5aF8Tj89WCHL2zIIqg.roa
File: SIFp25Z5J5aF8Tj89WCHL2zIIqg.roa (raw, json)
Hash identifier: rj0bIDuw0N9cXMvZkoQ6Emvbrf+MzSCjN0r++QukMpk=
Subject key identifier: 48:81:69:DB:96:79:27:96:85:F1:38:FC:F5:60:87:2F:6C:C8:22:A8
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0195328E9FF74B166C0B98B54A366BF87262
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SIFp25Z5J5aF8Tj89WCHL2zIIqg.roa
Signing time: Sun 23 Feb 2025 11:26:02 +0000
ROA not before: Sun 23 Feb 2025 11:26:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 87.229.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:8e:9f:f7:4b:16:6c:0b:98:b5:4a:36:6b:f8:72:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 23 11:26:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=488169db9679279685f138fcf560872f6cc822a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:89:e7:b5:53:a9:a8:85:58:e7:72:03:f9:
9b:3c:96:14:e7:ad:3c:f4:79:97:9a:de:67:28:60:
d5:95:d9:f5:dc:27:22:b5:ba:bb:cf:4e:42:09:44:
8c:f9:a3:3b:1e:75:34:28:47:9b:6f:5d:18:8a:1f:
f2:10:11:41:16:19:1d:21:35:f8:6c:67:6d:00:69:
6c:b0:84:3d:fd:b0:d0:6e:7e:59:53:11:aa:81:07:
b9:01:ef:c5:30:10:e5:5f:f3:e7:41:87:10:3e:2a:
cc:73:7a:40:e8:14:64:92:0a:e3:5d:47:f6:50:7b:
d7:c2:c8:12:ef:42:81:68:eb:bc:10:1a:e4:e8:8e:
b9:d5:77:24:96:b7:f4:61:58:bc:df:a0:a0:13:ff:
22:e6:88:67:86:8a:ff:10:f2:76:43:03:2d:2b:a3:
f3:b8:38:27:d7:40:d3:26:1a:e9:14:6f:2b:3a:cd:
c5:91:ec:c4:67:cf:79:4d:ec:87:70:db:22:9b:46:
1a:00:77:5d:38:cf:f4:2c:d9:42:42:d1:1c:30:a3:
4e:5c:ae:58:d0:55:c6:d7:eb:b5:4e:c6:d0:ee:86:
f0:e4:e8:7a:59:64:c0:d2:e2:1b:46:d7:4e:3a:33:
c5:c7:96:a6:e5:a8:66:c6:3d:b8:dc:49:17:7f:73:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:81:69:DB:96:79:27:96:85:F1:38:FC:F5:60:87:2F:6C:C8:22:A8
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SIFp25Z5J5aF8Tj89WCHL2zIIqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:30:03:4a:d6:a1:d1:8d:b5:a0:d6:53:27:e0:be:bd:44:88:
a8:ed:9b:94:52:93:09:07:0e:06:87:57:fb:e7:00:32:8b:a8:
50:6b:df:69:3b:1e:40:68:47:71:b0:e5:5f:6a:22:24:d0:da:
f0:50:85:42:00:88:c6:8c:c9:51:03:4a:fe:01:ec:4a:f7:71:
10:d2:8f:ee:90:a7:d4:eb:5b:88:3d:cf:fc:bb:b1:4b:95:10:
32:4a:a1:79:51:e7:4e:44:71:e5:1c:7a:28:96:1a:fd:3d:75:
da:1f:b6:54:ca:67:85:18:82:7c:a5:7d:e2:a9:57:4e:4f:0c:
61:06:09:5c:ee:64:a3:39:04:a8:84:6c:bb:3d:04:d6:e1:c7:
82:4a:86:c0:8c:d2:cb:12:af:f7:48:ab:9e:b8:ca:6a:e2:a1:
96:f5:cf:73:ad:b5:b0:a6:63:21:c7:12:97:9d:e4:a4:a8:f6:
7c:c5:31:8f:61:16:5b:c0:53:55:37:7e:9c:23:cf:7a:e2:c7:
0a:f4:1c:fe:57:7d:79:5c:0c:70:c8:24:30:41:2f:6a:e6:cb:
1b:35:d7:20:01:34:c3:5f:54:4a:a0:0b:46:7e:5e:b8:0a:e6:
43:6a:ba:07:f6:4b:1b:46:ea:7b:3b:b2:fb:2f:84:e0:ae:aa:
64:e7:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:08 2025 by rpki-client