Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pOT0-IAf9fQauxWu7L28f3M8jNc.roa
File: pOT0-IAf9fQauxWu7L28f3M8jNc.roa (raw, json)
Hash identifier: fYhu74Nh0vPd9sYM4xyvKqw7xyT67wfXW2igqgT9/e8=
Subject key identifier: A4:E4:F4:F8:80:1F:F5:F4:1A:BB:15:AE:EC:BD:BC:7F:73:3C:8C:D7
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01952E3642A0E2C72C3F961AF2B379BE2E9D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pOT0-IAf9fQauxWu7L28f3M8jNc.roa
Signing time: Sat 22 Feb 2025 15:11:02 +0000
ROA not before: Sat 22 Feb 2025 15:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2e:36:42:a0:e2:c7:2c:3f:96:1a:f2:b3:79:be:2e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 22 15:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4e4f4f8801ff5f41abb15aeecbdbc7f733c8cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:6e:59:37:d2:88:66:da:7c:b3:72:8b:c7:
8b:c1:6c:ef:c9:da:3f:c7:ef:7e:8c:06:9c:26:ba:
63:f2:d0:ba:f7:56:01:9e:ca:a4:5a:88:8b:c8:0f:
2f:e4:b1:44:2f:6b:7d:08:f7:4f:0a:d4:5a:14:f6:
e2:6f:97:54:29:5b:d3:ea:0a:2a:9c:0e:ed:76:02:
5f:7d:46:2c:43:a7:2f:be:5d:90:26:63:fa:5e:92:
ef:f9:9f:df:5f:30:7b:e3:96:10:ed:76:d7:12:ab:
ff:74:2d:60:38:4f:17:86:9d:62:07:4c:7a:d2:ee:
15:3d:bd:b5:66:2b:e0:c7:10:ca:90:24:5c:17:73:
c3:6c:6d:88:0d:8c:b4:92:d1:ac:b0:01:12:06:44:
4b:bb:93:8f:84:a0:28:ef:d1:d3:92:22:3d:e5:4e:
2a:18:03:49:4b:1c:fa:93:fb:70:39:3e:b5:ad:d7:
8d:f2:cb:21:2d:97:52:0f:b8:7b:b4:32:40:13:25:
39:0f:6a:e3:df:71:64:8f:1b:6b:08:7f:a7:0c:f3:
13:42:2a:2c:f4:06:c3:84:f8:8b:e3:84:75:4c:2f:
d0:9a:14:18:4e:d8:26:52:3e:4c:dc:80:ac:10:63:
d6:d2:e4:15:f4:90:fa:17:88:78:07:fc:2f:cc:ee:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E4:F4:F8:80:1F:F5:F4:1A:BB:15:AE:EC:BD:BC:7F:73:3C:8C:D7
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/pOT0-IAf9fQauxWu7L28f3M8jNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.108.0/24
87.229.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:dd:45:39:f9:25:a3:63:ee:05:d9:6d:16:fa:ed:b4:b7:c0:
83:33:83:9d:9e:e4:2c:f6:87:09:8c:ff:dd:44:99:9b:57:78:
7a:a6:e5:b0:92:2e:14:5c:56:67:ca:45:4e:56:f4:45:0f:63:
b3:e3:0a:75:04:12:df:67:13:b8:86:d4:42:35:e1:7b:64:e1:
5f:d1:6a:20:9e:a6:7e:f3:d0:18:d8:08:c9:1e:ab:16:3d:4f:
45:6e:c5:c4:a9:53:5f:0e:cf:12:3e:89:2e:9d:0f:c8:48:72:
f7:4b:4f:99:1d:22:dd:81:32:58:b5:8f:7e:ef:21:c9:43:b4:
1e:0c:c5:96:0f:a2:80:0d:e9:7e:6f:df:0a:69:63:c9:4d:3e:
4a:f8:fb:f6:d3:1f:3b:4a:99:a5:db:29:00:95:63:e2:d3:83:
00:2f:f5:e5:79:08:70:0e:d7:1d:9f:92:6f:cd:a6:52:54:41:
04:8f:7f:f5:52:f6:e0:b4:b3:54:24:5e:e1:f1:f3:e0:c0:af:
45:28:30:fe:eb:a5:76:85:50:97:ad:c3:cb:4e:76:3a:5c:a8:
bb:80:07:08:bc:11:2b:e9:a5:ac:85:da:e6:e6:15:c1:b8:7d:
a5:9e:4b:30:41:a0:f1:3a:4c:f4:6c:f7:cc:eb:ca:4b:10:9c:
24:5e:d9:29
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUuNkKg4scsP5Ya8rN5vi6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMjIyMTUxMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGU0ZjRmODgwMWZmNWY0MWFiYjE1YWVlY2JkYmM3ZjczM2M4Y2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEpuWTfSiGbafLNyi8eLwWzvydo/
x+9+jAacJrpj8tC691YBnsqkWoiLyA8v5LFEL2t9CPdPCtRaFPbib5dUKVvT6goq
nA7tdgJffUYsQ6cvvl2QJmP6XpLv+Z/fXzB745YQ7XbXEqv/dC1gOE8Xhp1iB0x6
0u4VPb21ZivgxxDKkCRcF3PDbG2IDYy0ktGssAESBkRLu5OPhKAo79HTkiI95U4q
GANJSxz6k/twOT61rdeN8sshLZdSD7h7tDJAEyU5D2rj33FkjxtrCH+nDPMTQios
9AbDhPiL44R1TC/QmhQYTtgmUj5M3ICsEGPW0uQV9JD6F4h4B/wvzO753wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKTk9PiAH/X0GrsVruy9vH9zPIzXMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvcE9UMC1JQWY5ZlFhdXhXdTdMMjhmM004ak5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+VsAwQA
V+VwMA0GCSqGSIb3DQEBCwUAA4IBAQCm3UU5+SWjY+4F2W0W+u20t8CDM4OdnuQs
9ocJjP/dRJmbV3h6puWwki4UXFZnykVOVvRFD2Oz4wp1BBLfZxO4htRCNeF7ZOFf
0WognqZ+89AY2AjJHqsWPU9FbsXEqVNfDs8SPokunQ/ISHL3S0+ZHSLdgTJYtY9+
7yHJQ7QeDMWWD6KADel+b98KaWPJTT5K+Pv20x87Spml2ykAlWPi04MAL/XleQhw
Dtcdn5JvzaZSVEEEj3/1UvbgtLNUJF7h8fPgwK9FKDD+66V2hVCXrcPLTnY6XKi7
gAcIvBEr6aWshdrm5hXBuH2lnkswQaDxOkz0bPfM68pLEJwkXtkp
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:58 2025 by rpki-client