Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uRnPCHqZdBC324_iVQgVakYf0yc.roa
File: uRnPCHqZdBC324_iVQgVakYf0yc.roa (raw, json)
Hash identifier: w9ogZ7Pplh4Svej0FhwC8/NaDCB3saPo6gyGwdz/gUo=
Subject key identifier: B9:19:CF:08:7A:99:74:10:B7:DB:8F:E2:55:08:15:6A:46:1F:D3:27
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01953E69997B0956BCFBB6BB0AB4497B0DE9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uRnPCHqZdBC324_iVQgVakYf0yc.roa
Signing time: Tue 25 Feb 2025 18:41:02 +0000
ROA not before: Tue 25 Feb 2025 18:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 87.229.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:69:99:7b:09:56:bc:fb:b6:bb:0a:b4:49:7b:0d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 25 18:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b919cf087a997410b7db8fe25508156a461fd327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:92:27:ed:11:60:cf:63:f7:4c:d5:a5:15:
57:92:e8:96:b7:da:7b:0b:84:be:88:ee:08:d1:2e:
57:c2:42:c9:db:ce:3e:76:1b:03:18:2b:1c:e7:83:
43:d8:bd:cb:d0:38:d7:cb:ce:98:ae:94:1c:16:0d:
f8:a6:58:a1:79:03:f7:bf:b9:17:58:d0:8b:24:81:
5d:13:c6:e4:ef:0d:81:d0:a9:80:94:01:49:5a:e9:
6b:08:3b:cf:09:88:8d:34:c1:83:f4:b6:67:aa:07:
73:16:f1:5e:f3:bd:11:ef:99:74:47:6f:63:4a:f0:
63:5d:cb:54:40:40:db:df:67:9c:7e:4f:3a:56:1e:
b9:0e:bf:76:83:5f:de:ed:fb:b5:78:d8:23:8b:50:
bc:dc:c2:e7:69:7f:66:46:83:00:34:7c:cc:56:bf:
c8:a9:7a:95:08:8f:60:54:9b:c7:11:4c:39:49:26:
50:f5:ed:7d:71:96:11:06:b8:6b:c4:3f:aa:3f:6b:
ba:f4:28:e4:02:35:77:3e:15:86:66:ec:30:84:b5:
9e:5a:1b:97:05:86:f8:9a:5d:76:5f:51:ed:18:ec:
64:a2:cb:de:67:9a:1d:80:63:d9:bc:8c:a5:6f:60:
d2:67:c4:05:ac:78:32:37:f0:56:c9:bd:9a:ce:26:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:19:CF:08:7A:99:74:10:B7:DB:8F:E2:55:08:15:6A:46:1F:D3:27
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/uRnPCHqZdBC324_iVQgVakYf0yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:89:87:99:5a:07:df:f6:44:22:07:67:e5:18:16:2e:d0:28:
a8:78:67:db:05:43:a1:91:22:be:bc:b6:50:ad:ff:e0:63:b4:
a5:10:0a:11:09:08:2a:77:cb:42:e9:a4:0a:1b:89:46:ec:52:
f4:a0:a0:d4:cb:ac:f9:45:01:ea:68:5f:52:19:0e:6a:83:72:
16:c6:88:45:8c:2e:db:32:07:10:8c:91:a6:09:99:77:ca:ac:
49:48:34:1d:c6:88:1a:41:ae:8f:d0:c3:f9:84:f3:3f:62:58:
72:4e:7d:ea:e3:d1:c8:9e:4f:74:b6:5a:2c:a9:32:84:ef:03:
a4:57:e2:16:47:f1:f9:c7:99:16:c8:03:e5:43:f4:8d:f6:1e:
2e:1c:fe:2d:fb:f0:28:32:6c:e8:8e:8a:dc:a1:37:55:e2:2d:
ee:42:96:fc:3b:b8:ac:67:bb:2a:cd:c4:32:47:d8:53:90:42:
47:8a:1a:7f:50:07:d8:97:bc:64:e9:a9:18:fd:0e:b2:66:df:
07:8a:45:90:62:c5:b2:3d:db:5e:15:45:30:50:08:a8:bb:5c:
42:1b:80:00:3c:99:9e:6a:91:c2:5f:64:ea:d6:2c:57:2f:a5:
75:ec:7b:f7:a3:41:9e:b2:a9:82:65:73:66:c1:76:a0:1c:e2:
4b:18:4d:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU+aZl7CVa8+7a7CrRJew3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMjI1MTg0MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTE5Y2YwODdhOTk3NDEwYjdkYjhmZTI1NTA4MTU2YTQ2MWZkMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOySJ+0RYM9j90zVpRVXkuiWt9p7
C4S+iO4I0S5XwkLJ284+dhsDGCsc54ND2L3L0DjXy86YrpQcFg34pliheQP3v7kX
WNCLJIFdE8bk7w2B0KmAlAFJWulrCDvPCYiNNMGD9LZnqgdzFvFe870R75l0R29j
SvBjXctUQEDb32ecfk86Vh65Dr92g1/e7fu1eNgji1C83MLnaX9mRoMANHzMVr/I
qXqVCI9gVJvHEUw5SSZQ9e19cZYRBrhrxD+qP2u69CjkAjV3PhWGZuwwhLWeWhuX
BYb4ml12X1HtGOxkosveZ5odgGPZvIylb2DSZ8QFrHgyN/BWyb2aziaWXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLkZzwh6mXQQt9uP4lUIFWpGH9MnMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvdVJuUENIcVpkQkMzMjRfaVZRZ1Zha1lmMHljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UkMA0G
CSqGSIb3DQEBCwUAA4IBAQBNiYeZWgff9kQiB2flGBYu0CioeGfbBUOhkSK+vLZQ
rf/gY7SlEAoRCQgqd8tC6aQKG4lG7FL0oKDUy6z5RQHqaF9SGQ5qg3IWxohFjC7b
MgcQjJGmCZl3yqxJSDQdxogaQa6P0MP5hPM/YlhyTn3q49HInk90tlosqTKE7wOk
V+IWR/H5x5kWyAPlQ/SN9h4uHP4t+/AoMmzojorcoTdV4i3uQpb8O7isZ7sqzcQy
R9hTkEJHihp/UAfYl7xk6akY/Q6yZt8HikWQYsWyPdteFUUwUAiou1xCG4AAPJme
apHCX2Tq1ixXL6V17Hv3o0GesqmCZXNmwXagHOJLGE1O
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:24 2025 by rpki-client