Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/GlJLYgf16agSfqwntlZ-9s0ycuE.roa
File: GlJLYgf16agSfqwntlZ-9s0ycuE.roa (raw, json)
Hash identifier: H/pf+nizH//gW/qa/JKNB79H5K4HjIq/Ki214ycp+sk=
Subject key identifier: 1A:52:4B:62:07:F5:E9:A8:12:7E:AC:27:B6:56:7E:F6:CD:32:72:E1
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA4F38DA6518E47DAC05A2119D3C51
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/GlJLYgf16agSfqwntlZ-9s0ycuE.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49207
IP address blocks: 87.107.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4f:38:da:65:18:e4:7d:ac:05:a2:11:9d:3c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a524b6207f5e9a8127eac27b6567ef6cd3272e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:a7:13:65:89:99:23:1c:6d:f5:d6:d1:52:
c3:7b:ce:6b:96:83:a9:bd:ed:0f:1c:01:44:a1:56:
ec:b8:e3:64:ff:bc:cc:f8:8d:30:c4:7c:66:09:c8:
1f:c2:05:07:1b:27:f4:46:d3:21:56:93:66:f5:2e:
17:29:f2:06:7e:f4:be:c4:1d:cc:a8:6f:0a:98:31:
63:fa:98:0d:02:f5:e7:2f:08:6d:cd:66:d5:15:26:
4f:e1:d7:2e:23:c0:f6:dd:f2:37:d9:7f:32:70:c3:
3b:32:4d:92:19:30:d0:5e:1c:56:13:85:4f:18:f5:
8e:c0:00:32:b5:73:60:ae:fc:30:c9:7a:12:e0:92:
c2:20:95:73:dd:41:13:b6:77:6a:60:97:75:87:b2:
4e:fa:14:f1:63:32:24:28:99:c2:98:72:53:28:54:
be:1b:c2:a5:f6:de:8c:70:71:b4:d3:12:74:f6:d4:
ab:1f:73:f0:7d:bd:7b:d7:bd:48:1a:23:17:f2:cf:
15:ae:ae:07:30:52:45:0a:c5:d4:03:ab:ac:fe:c7:
dd:fe:f1:0d:06:0c:34:3e:4d:0f:43:a5:7f:b7:df:
ba:ec:6e:dd:ff:ae:87:fb:37:69:64:12:ca:97:5e:
c8:35:09:ee:5d:50:2b:3b:37:05:a8:64:fe:25:54:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:52:4B:62:07:F5:E9:A8:12:7E:AC:27:B6:56:7E:F6:CD:32:72:E1
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/GlJLYgf16agSfqwntlZ-9s0ycuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.94.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c6:08:0c:95:04:62:04:88:05:74:4c:c7:55:27:ba:5f:e8:
88:aa:7d:ce:ed:02:d1:e2:43:46:79:70:7a:b4:9e:b7:20:28:
78:dc:9b:7d:99:36:ac:6b:7c:7d:13:92:da:b6:2c:3f:da:66:
83:cc:f3:4c:0e:24:6b:c6:61:9d:db:0d:97:f0:8e:6e:e2:18:
f3:3f:55:9b:25:4f:3c:66:6c:23:2e:21:1e:e4:5b:62:fd:3e:
5d:57:ee:5a:0a:3a:32:0b:bd:cc:e3:12:c8:0f:72:d8:be:e4:
23:a4:6c:98:db:3f:60:b9:93:e9:14:2c:88:f6:3b:90:88:cc:
37:5b:fb:e1:a2:09:4e:b3:d1:bc:23:02:72:97:bf:01:4b:0b:
dd:21:7c:d1:85:ca:b5:f6:6d:76:90:60:9b:b2:5a:5d:15:83:
bd:3b:3b:50:34:2f:61:63:57:f7:0b:f5:fc:87:37:5c:44:49:
13:e3:b5:25:be:fb:15:8c:5d:9c:cf:86:bc:1f:f5:7f:2c:59:
f9:08:18:8e:f1:ba:bc:8e:43:4a:06:0b:87:84:33:67:65:61:
a1:07:98:fc:16:63:19:f8:98:b1:ad:d5:5e:25:e1:98:98:9b:
63:15:a2:f8:8a:ed:fc:f3:b1:98:6b:2e:69:1e:f0:a4:44:66:
17:7a:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:52 2025 by rpki-client