Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/skSMa2ukTmXC2V3pp5i1hNEcOeA.roa
File: skSMa2ukTmXC2V3pp5i1hNEcOeA.roa (raw, json)
Hash identifier: KOz9+dbAnWrRw5AwAWSpXEjqqNOu4mWHnhwUOIlpTxc=
Subject key identifier: B2:44:8C:6B:6B:A4:4E:65:C2:D9:5D:E9:A7:98:B5:84:D1:1C:39:E0
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019557DCC04F1A4ACC2DF9368F906BA5DD32
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/skSMa2ukTmXC2V3pp5i1hNEcOeA.roa
Signing time: Sun 02 Mar 2025 17:17:19 +0000
ROA not before: Sun 02 Mar 2025 17:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201670
IP address blocks: 87.229.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:57:dc:c0:4f:1a:4a:cc:2d:f9:36:8f:90:6b:a5:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 2 17:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2448c6b6ba44e65c2d95de9a798b584d11c39e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:bf:93:2f:8c:a2:f6:52:43:7c:b3:67:26:
43:ba:a8:62:ba:8c:61:b7:74:9b:06:47:d8:f3:42:
fa:b1:2e:2c:75:22:1e:f2:29:72:b2:48:91:56:a4:
62:fa:6c:7b:88:27:02:ca:9d:90:c2:38:0a:8e:a1:
9b:ae:90:cc:5d:81:c0:b8:c8:2d:e5:d4:9a:fc:0e:
ee:ce:e0:2f:5a:35:a0:88:eb:51:b4:75:5b:3c:c3:
0c:8f:5d:96:73:59:94:32:46:5a:c1:df:38:78:ae:
87:81:07:12:6f:97:54:bc:1d:1a:3c:21:ee:a0:06:
33:e7:aa:4f:0c:5e:d3:9c:b4:62:84:6a:de:04:fb:
04:10:9b:16:49:6b:3f:42:44:78:ab:75:15:16:f2:
01:2a:2e:df:b0:d7:77:73:88:ea:0d:12:d3:37:e7:
9d:35:4f:60:91:71:d4:37:87:21:ed:0f:72:7d:e1:
b9:ef:5b:b3:a3:35:76:fd:48:b1:ad:3c:b9:66:5a:
73:18:10:22:c0:b5:b7:f9:2b:9b:b0:c4:9e:07:85:
dc:e9:23:2e:05:b2:01:fd:4d:a9:cb:53:ca:63:8f:
14:f7:18:a2:e7:d0:49:8f:b6:73:99:ad:e7:5e:9f:
a6:1e:41:97:1a:cf:e7:49:f9:1c:98:3b:70:2a:39:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:8C:6B:6B:A4:4E:65:C2:D9:5D:E9:A7:98:B5:84:D1:1C:39:E0
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/skSMa2ukTmXC2V3pp5i1hNEcOeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.37.0/24
Signature Algorithm: sha256WithRSAEncryption
04:65:c9:40:fb:de:f0:23:56:ef:57:df:f2:0c:e9:e0:9e:eb:
87:27:4c:52:5b:03:4b:e1:d7:94:de:72:26:d3:0c:69:d2:10:
a8:38:c8:9f:ef:19:57:e3:36:fc:55:10:02:42:ef:72:80:5e:
c9:ea:0b:c9:0f:4a:c6:91:c2:4f:e8:51:28:d8:2f:e5:7b:99:
ba:92:ba:56:32:01:2d:c8:ac:7e:af:f6:9e:15:04:43:bf:52:
18:b3:3f:86:90:6d:ad:54:dc:de:15:6c:1c:f6:93:99:07:b3:
44:4e:f6:56:eb:98:5c:c2:58:54:49:66:9d:89:47:9e:98:ef:
e6:b9:52:d9:42:d1:a7:8d:97:a6:5d:9d:b6:ee:27:0e:a5:70:
b6:07:27:10:5f:3d:65:0a:11:44:87:d5:92:39:cc:78:18:db:
9b:2f:ab:a2:88:8c:9d:21:65:89:12:fc:97:19:f0:92:7e:8f:
ad:88:fc:82:f0:00:67:66:e3:95:d1:9e:ea:d7:f3:5d:3b:5f:
d6:51:34:2e:fb:54:7b:ae:d2:51:f7:31:34:5f:3c:e9:72:8a:
56:01:ab:f0:b7:fb:15:b6:8d:a3:c0:a0:60:84:f5:c1:90:b3:
52:47:1d:8b:13:9b:bd:83:a8:40:51:cb:b7:57:c3:50:68:81:
e1:64:72:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:52 2025 by rpki-client