Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/4F9izwsHHxNkuKU97mIzesCX1fA.roa
File: 4F9izwsHHxNkuKU97mIzesCX1fA.roa (raw, json)
Hash identifier: 9EEtKc3sBCyfxrwHugYM/2yhW3k3q6DEwjqGSNZdJ9g=
Subject key identifier: E0:5F:62:CF:0B:07:1F:13:64:B8:A5:3D:EE:62:33:7A:C0:97:D5:F0
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 019420D64033DE1380BF14771ED2DF233F17
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/4F9izwsHHxNkuKU97mIzesCX1fA.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7979
IP address blocks: 87.76.25.0/24 maxlen: 24
87.76.26.0/24 maxlen: 24
165.84.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:40:33:de:13:80:bf:14:77:1e:d2:df:23:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e05f62cf0b071f1364b8a53dee62337ac097d5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:76:84:43:f6:f6:9e:24:7a:d1:94:58:7f:
e2:81:a7:e2:d5:ed:7c:63:aa:e6:8c:f9:1e:d8:16:
a2:da:3f:2a:ea:70:7e:70:02:5b:1e:cf:b0:ba:0f:
ff:75:1e:65:a6:a2:b3:04:04:05:83:8d:21:d0:3c:
70:dd:47:f3:32:3e:eb:a8:c4:ad:ec:bb:63:d5:d7:
d9:d4:97:5f:04:b6:d2:92:3d:c4:b9:5f:bf:d0:89:
4c:d8:55:e6:4f:68:c5:14:25:60:dd:a8:5e:c8:49:
51:41:3e:bc:ed:32:98:52:ea:db:ff:a5:21:f6:05:
a1:d7:8f:77:f1:75:af:e2:2c:48:52:0d:ff:c5:1d:
71:f9:9c:da:64:36:6a:c4:40:c7:3a:f6:cd:52:50:
64:0b:10:a1:b1:34:3c:03:e0:5d:3a:e3:1d:78:3f:
6e:ec:77:ff:b8:eb:c7:76:6a:8c:1e:51:b4:90:95:
58:61:49:c7:da:2a:99:ff:bc:d4:9e:0f:01:19:ac:
6c:9c:03:af:0e:ce:e3:1e:37:a0:1e:16:49:0f:31:
3f:62:ee:f7:4d:7c:88:ce:03:4e:f2:fe:07:0c:dc:
2d:ed:17:31:81:d3:e9:8d:be:f3:c5:ad:f6:47:09:
6c:fb:37:2c:9d:98:5e:0b:7d:30:e6:7a:16:43:d7:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5F:62:CF:0B:07:1F:13:64:B8:A5:3D:EE:62:33:7A:C0:97:D5:F0
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/4F9izwsHHxNkuKU97mIzesCX1fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.25.0-87.76.26.255
165.84.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:67:08:68:ec:05:d4:15:99:69:aa:3c:d9:d0:1c:9c:93:fe:
af:3d:87:d8:9c:51:cc:95:8f:b0:7c:e1:47:8f:c8:05:f7:5b:
a9:db:77:fb:4d:e9:69:08:d6:03:7b:2a:b6:5a:f8:3f:fe:0b:
9a:9c:e1:95:92:68:4b:9f:ad:97:ae:62:47:78:6f:a5:77:f6:
de:51:d7:2e:c8:8f:23:9c:fd:45:58:9a:bd:50:3b:57:5f:24:
f2:a6:3e:44:6c:8d:f5:31:d7:27:66:1f:11:89:40:84:25:76:
f2:cd:24:82:a9:04:a0:3e:48:2b:8f:69:da:e9:cb:bc:9e:e2:
a9:e3:9b:c5:9d:14:b2:bc:2c:8e:5f:f4:70:05:25:18:4c:e9:
e5:fa:e0:d8:24:7a:33:ac:a1:ca:34:bd:0d:d8:c7:84:82:24:
c1:e7:69:91:30:2b:a9:ac:fb:2b:e2:33:44:8b:16:0f:30:70:
13:2f:41:f4:37:b2:22:03:da:8d:20:a9:f6:76:1c:ee:70:52:
17:0b:d5:3b:95:ca:1a:d2:89:57:23:1f:12:29:05:09:8d:77:
87:d7:d6:c4:03:40:e1:c1:08:c0:3c:b6:04:dd:24:c4:ee:e9:
26:ec:57:b4:9d:17:9e:2f:ee:2a:78:3a:dc:f4:66:1b:24:81:
28:dc:80:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:51 2025 by rpki-client