Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/a-SMWXMaPSV0Pfc0j1_4ElMPccg.roa
File: a-SMWXMaPSV0Pfc0j1_4ElMPccg.roa (raw, json)
Hash identifier: /TQWFS3CvNvIyGCuyTIP1vsoPGbrey/oYBSw+IH1EAM=
Subject key identifier: 6B:E4:8C:59:73:1A:3D:25:74:3D:F7:34:8F:5F:F8:12:53:0F:71:C8
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827BFE9EC6B50DECEA5F15CA39F088E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/a-SMWXMaPSV0Pfc0j1_4ElMPccg.roa
Signing time: Thu 02 Jan 2025 17:54:41 +0000
ROA not before: Thu 02 Jan 2025 17:54:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 87.229.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:bf:e9:ec:6b:50:de:ce:a5:f1:5c:a3:9f:08:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6be48c59731a3d25743df7348f5ff812530f71c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e6:ef:07:e6:fb:6e:50:b8:43:7f:9d:23:55:
ce:59:27:47:f5:e0:15:0a:e0:63:79:57:5b:f7:21:
dd:d8:1b:4c:7a:67:48:c1:55:81:01:14:d6:bf:fc:
ab:04:ec:30:0c:4d:c7:b6:d6:ec:89:4a:ab:c8:12:
84:cf:de:2b:8a:48:e6:6e:6d:fb:98:69:72:bf:41:
32:4f:58:da:85:95:56:2c:79:4c:10:53:f1:1f:ea:
5d:c8:ff:9c:05:ad:97:5b:d2:1d:50:5b:16:0f:b8:
91:59:54:30:97:ff:fa:ab:03:c4:fc:5a:8a:23:15:
51:d7:b6:58:d0:67:20:97:56:6b:48:04:8c:34:c4:
02:83:e0:78:f6:09:03:55:18:f2:57:7a:90:96:03:
ad:60:99:35:3e:c1:20:88:4f:d3:65:4f:06:c8:86:
42:ab:f8:70:2a:13:87:28:33:95:90:79:da:f6:76:
e2:d5:d4:1b:47:30:cf:91:09:c2:fa:de:ad:54:7f:
6c:6e:43:fe:b1:e5:b5:ae:d2:c3:3f:0b:91:b6:68:
cf:3a:27:3c:9f:1d:bb:4c:71:55:5f:c3:b2:87:cd:
c8:3c:56:27:a7:9b:28:67:54:cf:26:a3:87:01:89:
33:be:69:43:74:91:ea:9f:f6:61:62:e7:17:64:b1:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E4:8C:59:73:1A:3D:25:74:3D:F7:34:8F:5F:F8:12:53:0F:71:C8
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/a-SMWXMaPSV0Pfc0j1_4ElMPccg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
57:68:1d:fc:68:a0:80:b4:d2:7c:59:e6:9a:b6:fa:4a:e1:cd:
9e:11:e7:92:09:e3:9f:b3:9f:bc:26:a7:97:35:0e:7a:24:0e:
5a:1d:1d:3b:fb:93:d3:ff:95:a0:1b:ed:cc:40:8c:30:98:cf:
e2:a3:d5:dd:bb:05:30:c7:2b:1d:4e:cb:7e:18:88:e2:d1:49:
8e:65:4e:15:07:84:5c:11:0e:6e:0b:ac:1f:36:7e:fd:25:4d:
ad:51:07:18:b2:bb:3a:73:74:32:e7:7c:7a:73:28:36:b9:b2:
c5:76:9e:dc:86:63:55:fa:93:fb:b8:96:8d:51:81:fb:0b:dc:
c6:d0:8d:31:f5:f6:9f:d3:cf:eb:d2:8a:7a:e3:bf:8a:8d:9e:
45:63:23:dc:54:12:b7:a4:f3:4d:84:79:fb:ce:3a:b5:e9:0a:
12:23:d6:04:89:6d:5d:e6:4a:3b:eb:6c:38:a9:ad:5c:04:d2:
97:0c:f3:b8:fd:dc:82:ed:0e:66:89:6a:ee:db:04:4a:a1:04:
41:1f:aa:e2:8f:7c:bb:0d:8c:42:6d:37:83:bb:b6:3d:2f:bf:
cb:d0:89:3b:74:0e:a8:59:54:2b:77:72:e9:22:19:2d:1c:61:
e6:6b:cc:41:3a:bd:e9:1f:af:f3:ae:de:fd:b7:29:93:bc:9d:
eb:0c:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:43 2025 by rpki-client