Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/R1oI9EIdBra2bXlqz6SuX1ScRks.roa
File: R1oI9EIdBra2bXlqz6SuX1ScRks.roa (raw, json)
Hash identifier: oGAswo+RudYTAtiRAg/RtBQqs9ly1TD5MGy67oQDR7Q=
Subject key identifier: 47:5A:08:F4:42:1D:06:B6:B6:6D:79:6A:CF:A4:AE:5F:54:9C:46:4B
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA4B07CB91780160443C30BD798CB2
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/R1oI9EIdBra2bXlqz6SuX1ScRks.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12660
IP address blocks: 87.107.156.0/22 maxlen: 24
87.107.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4b:07:cb:91:78:01:60:44:3c:30:bd:79:8c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=475a08f4421d06b6b66d796acfa4ae5f549c464b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:19:f3:43:b4:48:20:36:1f:76:5a:2f:c6:ae:
67:a2:d7:43:11:17:a2:ab:86:19:43:d0:58:a1:91:
7c:28:14:28:79:60:d0:c7:be:30:b1:02:ed:af:c5:
f2:00:79:98:86:df:ef:29:da:b9:16:b0:13:45:24:
43:25:8f:03:fb:2e:d3:2c:f7:11:15:27:cf:b8:1b:
4b:7a:41:8e:12:6a:47:bb:9a:ae:e8:1a:90:43:93:
b1:1b:f3:b9:87:f4:72:f0:93:48:dc:65:90:49:72:
34:f7:d9:11:cf:1c:53:d1:da:da:36:4c:a5:dc:74:
16:91:74:a3:83:d2:1f:3b:bd:c5:3a:8a:2a:94:14:
0c:c6:31:48:89:14:1c:38:19:78:16:56:a0:75:87:
70:f7:e2:1d:02:ef:c7:75:dd:7d:bb:42:2b:aa:e8:
1e:22:b5:e5:7d:4f:15:55:fb:f2:48:40:d1:1b:e0:
99:9d:76:16:5c:0d:14:00:0f:3e:76:50:f3:b4:5d:
bb:30:18:8c:f0:a7:55:ae:da:ab:90:bb:4b:bc:8b:
96:0d:9f:c3:0c:36:97:da:0b:7e:9c:72:90:65:ff:
22:09:df:47:2b:89:07:ab:ec:11:c2:16:4b:9f:14:
23:0f:b1:91:08:e6:3f:bf:a6:f5:94:ad:19:a4:4d:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:08:F4:42:1D:06:B6:B6:6D:79:6A:CF:A4:AE:5F:54:9C:46:4B
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/R1oI9EIdBra2bXlqz6SuX1ScRks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.156.0/22
87.107.184.0/23
Signature Algorithm: sha256WithRSAEncryption
37:a5:00:ba:57:cf:44:a1:84:81:6f:8d:83:c7:6b:da:a1:fe:
7e:52:7f:b5:b0:72:b3:44:88:cc:dd:c8:ca:e0:28:d3:0e:1d:
be:16:8f:c4:a3:da:c3:fc:f8:09:7a:47:b4:fd:1c:67:1f:e0:
21:64:d1:92:04:17:f1:78:9d:8c:c6:65:cf:3e:78:b1:2e:7b:
e3:45:be:d1:e6:7f:c5:ba:94:08:e0:5b:a1:ac:1d:67:1c:9f:
09:2f:b9:dd:47:b2:4d:47:f2:2d:3d:02:2c:b0:4b:e8:58:87:
3f:e9:4e:50:bb:40:90:30:88:5d:65:94:b2:d6:e9:79:37:18:
c8:69:35:59:42:cb:62:07:89:07:11:06:3c:ce:7d:d4:8c:61:
37:10:8f:f5:13:a4:0e:fc:c9:0d:2f:8c:71:50:e7:5b:e3:ea:
bc:ea:ff:4a:e6:56:e5:d7:e0:61:b7:78:a5:b7:13:b0:d9:1f:
4f:0a:0f:b6:11:15:cd:85:61:92:f5:f4:63:32:2f:a1:3a:a9:
00:34:66:f5:db:1f:b8:60:f3:dd:06:eb:83:ab:0d:20:e4:20:
d0:20:7e:bd:fe:fa:37:b7:28:cd:a9:03:1a:83:48:43:74:04:
ec:41:0f:82:57:4e:45:0c:ee:e1:ee:fb:74:39:66:09:3d:de:
e3:c5:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:37 2025 by rpki-client