Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/_g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa
File: _g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa (raw, json)
Hash identifier: lCKjV64dwqXs6VagiwwJOVKqACy5VCGM5CrdkZRYvvY=
Subject key identifier: FE:0E:ED:26:FF:51:43:C1:8A:07:38:77:26:82:05:2C:38:60:E8:EB
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 01941F8C472DC8BD2F533DCB0B03FBD83AA0
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/_g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 87.198.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:2d:c8:bd:2f:53:3d:cb:0b:03:fb:d8:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe0eed26ff5143c18a0738772682052c3860e8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1c:df:34:11:91:89:e5:b3:ab:2a:3f:4a:51:
c5:fd:90:91:6c:08:56:b0:82:94:61:51:b5:1b:35:
38:e4:96:32:1b:68:98:25:98:97:88:20:ef:39:6e:
f9:d7:ee:37:7a:c3:12:a6:b5:40:4c:d3:6c:ff:be:
f8:9d:2e:2f:17:0e:ef:82:30:69:7d:37:51:04:72:
2b:4c:34:ec:e8:a1:30:4b:47:16:8e:f9:18:52:b7:
5d:cd:fe:89:40:89:0b:bc:56:20:9c:c4:87:51:73:
60:ae:35:89:f8:db:47:e5:cb:8d:e6:23:88:aa:23:
a6:08:ea:95:54:8e:a0:00:fe:d2:95:4d:c6:1f:a8:
ea:4d:10:cd:59:91:7f:03:2c:0a:c1:bf:30:7e:f7:
0e:0f:33:4f:17:ad:31:98:ca:57:5a:d9:67:55:1b:
b8:c4:27:48:5a:2c:2d:2d:0a:0a:13:d5:14:f8:e2:
6f:36:21:b1:80:63:db:2f:53:88:d3:3e:b5:0b:0d:
7d:94:2f:46:2b:20:57:95:03:d8:f4:ba:c0:bb:94:
fb:f5:1f:6d:02:94:c7:01:e3:26:10:85:cb:06:61:
9c:9a:6e:cb:8e:97:e9:64:57:cc:17:2e:8a:7c:d4:
fe:14:c2:a6:20:f6:86:11:8d:49:b4:c9:3b:de:4c:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0E:ED:26:FF:51:43:C1:8A:07:38:77:26:82:05:2C:38:60:E8:EB
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/_g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.198.212.0/24
Signature Algorithm: sha256WithRSAEncryption
92:14:ec:39:14:ac:47:8f:b8:d0:5a:5e:dd:84:35:c7:27:37:
96:08:b6:2f:f8:a1:11:d2:53:cd:a0:21:a8:8d:ed:3d:8d:9c:
0c:72:d3:85:07:c1:25:b1:d4:eb:9c:89:61:9c:1c:c6:88:58:
dc:42:98:df:18:c3:37:cd:6a:c1:6a:9e:64:ac:0c:dc:7c:27:
f5:2d:93:15:fc:6a:90:8e:d9:7f:e2:eb:3a:b7:f5:03:8a:d9:
e0:4d:eb:a9:40:a9:46:42:86:e7:1e:ef:3e:b6:23:67:63:7b:
c4:68:b2:67:46:78:0b:e3:f9:4e:79:27:a1:06:15:e2:92:a2:
35:01:cd:5a:12:c7:b6:a3:87:67:00:d8:16:23:2a:74:36:0a:
a8:14:78:de:42:d7:35:cf:e4:13:5f:f9:5a:0b:12:e9:46:8c:
9b:b4:1c:d9:f4:d3:e7:b1:c2:fc:d8:ba:37:26:b3:7f:4c:d9:
98:19:3a:79:31:6a:e3:21:18:91:b9:56:82:d3:24:c9:91:0e:
ef:d3:00:e1:b1:38:21:42:56:7c:25:e4:5f:0b:7d:1c:d6:f7:
a5:91:6f:dd:c3:bf:35:c9:83:dd:4c:ff:7a:67:f0:1c:52:ab:
9b:e8:1b:34:ff:75:c6:c9:80:12:bf:39:4c:bc:ed:44:a0:ed:
0d:5e:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:30:25 2025 by rpki-client