Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/9Lwq1LBvX27atQq1weZQLSpzZys.roa
File: 9Lwq1LBvX27atQq1weZQLSpzZys.roa (raw, json)
Hash identifier: Ru92EY7Vb3HDUYhNcKHcwS3aaKSgGUnG29Cqyx+YyE4=
Subject key identifier: F4:BC:2A:D4:B0:6F:5F:6E:DA:B5:0A:B5:C1:E6:50:2D:2A:73:67:2B
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA4E623911B82A8A9D199041626B01
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/9Lwq1LBvX27atQq1weZQLSpzZys.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 87.107.100.0/24 maxlen: 24
87.107.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:62:39:11:b8:2a:8a:9d:19:90:41:62:6b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4bc2ad4b06f5f6edab50ab5c1e6502d2a73672b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:05:a3:3a:f9:dc:89:19:a6:7a:f7:28:e9:
32:f7:b0:a5:b8:97:cc:97:78:9f:e6:cf:b8:a6:40:
3a:66:bf:12:17:28:ab:d6:ac:5f:77:4d:7d:94:dd:
9f:59:54:2c:5c:4f:c4:e7:05:8d:e5:93:2e:c7:ac:
1f:a8:08:9e:e5:e4:24:e2:1f:ea:10:a9:fb:48:f7:
b0:cf:b4:ba:7d:6b:e6:f0:f6:63:53:e7:12:f3:c0:
6f:5b:c3:97:e7:4b:88:51:e3:ce:c9:b2:08:dc:ae:
53:51:a9:ea:83:1a:85:0d:73:eb:04:ec:05:a1:89:
12:8f:d1:10:3d:4c:38:a8:ff:1c:da:cb:da:bf:fd:
8e:e2:f9:01:a4:10:66:94:df:70:07:5d:6e:fe:d2:
d4:06:bc:de:a4:d2:21:65:64:d7:b5:bb:b0:7a:75:
04:b9:85:49:85:e1:78:e3:6a:ce:4a:d6:d5:87:b7:
49:4d:41:28:38:28:e1:8b:84:47:43:7e:86:5b:c4:
63:a9:40:a7:a5:67:22:92:4d:67:0e:29:51:e3:d6:
d2:9f:a4:49:0a:76:98:b4:f3:3c:bc:fa:0c:49:aa:
10:0d:d8:0c:73:b4:d1:55:ad:0f:33:0d:58:98:c8:
8d:92:f1:aa:19:09:17:7b:98:3d:41:f2:d2:80:f6:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BC:2A:D4:B0:6F:5F:6E:DA:B5:0A:B5:C1:E6:50:2D:2A:73:67:2B
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/9Lwq1LBvX27atQq1weZQLSpzZys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.100.0/24
87.107.157.0/24
Signature Algorithm: sha256WithRSAEncryption
91:07:65:f8:60:7c:59:b9:c6:e5:48:ef:39:82:d2:b7:08:44:
6b:e8:c6:81:9a:5f:05:dc:03:2e:86:1c:33:44:02:45:ec:4a:
2f:a0:e2:a3:b5:d9:01:f6:10:6f:86:d5:32:a1:22:19:b8:dd:
b1:d6:91:8e:a5:ac:f9:15:41:ed:80:d3:c7:14:5b:a4:2c:7a:
5c:56:27:9c:fe:0d:b7:62:ba:32:7c:f4:68:0a:87:dd:fd:db:
38:69:cc:06:71:af:37:8d:1d:16:55:35:96:cd:63:3b:8f:01:
15:a4:0e:e7:0a:9f:7e:a3:fe:b9:e8:83:7d:87:9e:d9:0a:58:
b3:12:54:7f:e5:fb:2c:ba:71:13:9d:91:9c:3d:bd:27:6d:9e:
f4:6b:2d:ba:72:09:e8:b8:a8:29:6f:cd:75:be:68:37:a7:0d:
85:9e:d8:0f:33:6b:1c:40:da:63:00:a2:be:ea:70:b4:ea:a0:
e2:f9:b1:64:7a:c0:5a:3e:b3:f5:24:f6:10:74:9b:1a:20:7a:
32:39:28:15:73:60:a8:76:58:95:bf:db:78:a1:8c:41:7b:a8:
10:5f:63:81:53:66:0d:af:05:a1:e2:47:1c:75:a9:fd:7b:1b:
5f:96:df:a0:65:e5:1d:d6:ea:03:a4:aa:db:34:ea:18:b2:c6:
ee:6e:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:44 2025 by rpki-client