Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SYFGcTFHksF3Hqmspy80NO_jUK0.roa
File: SYFGcTFHksF3Hqmspy80NO_jUK0.roa (raw, json)
Hash identifier: UABe4OJDPyizrV7uzJY+AKqyagsHOYZbE5YQl/vHyaM=
Subject key identifier: 49:81:46:71:31:47:92:C1:77:1E:A9:AC:A7:2F:34:34:EF:E3:50:AD
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01954651D497E6B2C2B7AE67C9E049CD16B5
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SYFGcTFHksF3Hqmspy80NO_jUK0.roa
Signing time: Thu 27 Feb 2025 07:32:02 +0000
ROA not before: Thu 27 Feb 2025 07:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 87.229.8.0/22 maxlen: 22
87.229.12.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:51:d4:97:e6:b2:c2:b7:ae:67:c9:e0:49:cd:16:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 27 07:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49814671314792c1771ea9aca72f3434efe350ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:8e:ac:a3:88:35:aa:64:3a:70:f8:50:28:
03:54:3b:bf:be:95:42:0c:3f:06:90:b5:4d:43:73:
fb:7d:54:58:79:7f:40:70:1a:4e:b2:aa:94:88:62:
ba:f7:61:19:9d:7e:ea:9e:92:98:74:80:30:0f:74:
a7:84:25:59:df:82:5b:c3:31:3d:30:4d:ae:41:46:
a9:4e:02:5e:d7:b8:13:cc:fe:75:ab:0b:92:21:f6:
37:e7:7f:5f:76:0f:df:42:fc:7d:99:79:b4:90:db:
6c:d6:23:8d:09:68:15:25:98:88:0b:0b:21:35:0f:
f0:db:21:45:76:aa:b2:b9:71:67:c4:94:3c:8c:5d:
f1:68:e9:01:62:ea:4b:da:08:81:bb:a3:c4:1f:cd:
34:89:82:7e:19:0f:4b:5c:87:87:6c:e6:a9:31:92:
c7:85:bb:60:fa:0a:e3:b8:1d:48:80:6b:1d:a5:6b:
c1:65:cc:d1:3f:88:9f:7e:37:ba:3f:2f:dd:59:ca:
4c:64:5b:8e:6b:fd:06:05:67:8b:8a:07:a5:64:eb:
33:43:5c:f4:8a:97:47:8a:28:66:0a:69:cf:b0:9e:
b9:29:84:3a:30:84:c7:31:93:40:75:aa:ec:01:44:
0e:98:33:b5:f7:95:ac:29:8a:99:73:fa:3e:0f:51:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:46:71:31:47:92:C1:77:1E:A9:AC:A7:2F:34:34:EF:E3:50:AD
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SYFGcTFHksF3Hqmspy80NO_jUK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0-87.229.12.255
87.229.35.0/24
87.229.48.0/24
87.229.50.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7d:c6:2e:cc:a8:4d:26:a9:52:16:cd:4c:e6:01:81:03:31:
27:30:e7:b8:06:7e:06:53:bd:be:15:e1:14:45:c1:9e:ed:ad:
eb:62:15:3c:f9:c3:4f:2e:55:7a:ed:a3:c3:22:88:fb:53:20:
e5:cb:33:18:70:a1:7e:f2:1f:f1:85:b8:ac:75:a6:e2:e5:5a:
3f:77:cc:2e:68:3a:cd:dd:d3:5c:0c:02:56:ae:65:59:c9:b0:
ca:e1:4e:e8:9a:23:02:83:20:f3:e3:c3:75:15:70:00:c4:3e:
a5:ae:51:bf:80:91:c0:e9:7b:ed:f2:97:a3:b6:68:ac:6b:c8:
ee:af:fb:7e:11:02:4a:55:ee:37:cb:e0:be:e6:03:48:01:6e:
a3:63:b0:1e:c4:5b:37:9b:f4:40:e7:3e:7c:43:89:56:1c:c0:
bb:2d:2e:c2:f6:af:52:62:94:26:cf:89:2f:88:05:16:db:c2:
22:23:82:bc:93:9b:ba:54:76:08:44:99:f5:52:8e:54:d4:2a:
53:57:d9:7f:ff:b8:a5:8a:ec:63:c1:ab:d4:03:76:19:c1:ce:
85:3c:a1:f5:1d:ac:17:19:65:7f:ed:b6:c0:0b:4e:8a:66:69:
2b:e2:9a:63:2d:b8:c8:52:1c:1d:1a:5d:b8:3c:9f:ce:43:c0:
8d:1a:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:35 2025 by rpki-client