Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/FggVd8KMWuGOhlC3clhpBTAeUQY.roa
File: FggVd8KMWuGOhlC3clhpBTAeUQY.roa (raw, json)
Hash identifier: P1awjLZuI5lBE9+Df2fbieSLoOqxhT8uF5Oq7wrxfy8=
Subject key identifier: 16:08:15:77:C2:8C:5A:E1:8E:86:50:B7:72:58:69:05:30:1E:51:06
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA4DE07EA8396E7588BA6FA127F152
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/FggVd8KMWuGOhlC3clhpBTAeUQY.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43415
IP address blocks: 87.107.80.0/22 maxlen: 22
87.107.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4d:e0:7e:a8:39:6e:75:88:ba:6f:a1:27:f1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16081577c28c5ae18e8650b772586905301e5106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:b4:f3:d8:8d:a5:14:c0:25:ae:96:90:08:
2f:db:cd:49:ff:51:3b:3e:7c:56:3f:db:d3:b5:e8:
51:6b:42:d3:09:b9:de:6f:5e:72:c5:a2:96:ad:46:
b6:1f:3d:a3:44:a0:46:2e:a8:bd:25:29:1d:e3:65:
a4:30:4a:5e:74:72:d7:6e:5a:b3:3f:ae:5b:75:57:
ee:84:e8:ff:89:9f:bc:96:d4:e0:03:9b:c4:c8:14:
94:29:f3:25:1f:37:53:54:1a:c4:da:7d:0b:3d:d3:
ef:ac:82:f1:12:c6:fa:62:4b:76:17:26:eb:de:c8:
9a:79:7e:83:d0:5f:40:8a:23:33:7a:fe:5f:23:ea:
5a:b6:61:0f:aa:ec:f8:66:ff:3a:ae:36:47:64:c3:
c0:4f:b6:d2:5e:f5:6e:4e:b5:d9:03:a1:ee:c7:2e:
56:d6:cf:4c:e9:71:34:7f:61:6c:6c:e8:54:92:af:
ef:a2:31:4a:d8:20:aa:3d:0d:0c:10:28:fc:f8:3b:
d4:b8:f3:31:80:bf:82:7d:e8:ce:9c:b5:90:0a:cb:
a1:50:53:6c:3a:4e:96:f8:36:44:f7:2d:0b:0b:16:
81:da:80:ae:1d:a4:4e:60:fa:0a:0c:98:d3:a9:bc:
ad:4b:5f:e9:96:6a:44:6c:80:32:0f:2f:d5:b7:0c:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:15:77:C2:8C:5A:E1:8E:86:50:B7:72:58:69:05:30:1E:51:06
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/FggVd8KMWuGOhlC3clhpBTAeUQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.80.0/22
87.107.93.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d5:de:20:c8:9a:2b:8f:05:e5:a6:01:c5:85:58:38:29:19:
8c:65:95:bc:92:1a:c4:89:7f:ac:0a:06:88:d8:2d:c1:34:51:
9d:6c:df:64:bd:bc:7d:b1:61:b7:65:dc:05:d2:11:bc:88:57:
1c:dd:66:df:70:08:44:15:8a:36:21:97:f5:af:eb:05:32:06:
00:f8:54:7a:c1:78:ba:70:66:c7:f3:b0:f6:2e:33:38:5d:79:
b1:ba:cf:bc:e7:1b:a4:db:bc:de:42:d4:18:4e:e2:be:5b:71:
af:40:2a:84:ba:16:73:97:d4:0a:ff:40:32:02:ae:a0:61:9b:
1a:cb:7c:80:5a:5f:66:9c:f8:5a:0b:a3:ed:5e:f8:be:4e:cf:
e7:d4:c9:49:38:8e:2b:1d:5c:45:0c:88:b2:06:fe:73:6e:39:
5b:bc:2f:76:b1:db:20:4c:a6:9d:ed:b9:c5:6e:3f:6f:06:f6:
02:6d:42:e9:57:30:c6:23:4b:90:c8:f2:0e:36:90:31:c6:d1:
b5:1e:c7:e0:45:e2:28:61:c7:72:55:48:72:4f:44:09:ab:b4:
ac:c5:39:16:bd:3e:61:b6:da:c7:f3:b4:34:93:d2:a0:af:c2:
d7:61:a7:7e:ed:7c:75:92:73:a7:ec:39:01:e9:21:23:5c:27:
17:e7:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:40 2025 by rpki-client