Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/D-zKhuWPkxLy8zaYbK0D0Frw7ec.roa
File: D-zKhuWPkxLy8zaYbK0D0Frw7ec.roa (raw, json)
Hash identifier: w8bSqTQlhfxtATfQh4eWS/eZa2u3cEwYUnWnj6COmyg=
Subject key identifier: 0F:EC:CA:86:E5:8F:93:12:F2:F3:36:98:6C:AD:03:D0:5A:F0:ED:E7
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 019427B5D0C91B21F79AD0AB38891540D7DC
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/D-zKhuWPkxLy8zaYbK0D0Frw7ec.roa
Signing time: Thu 02 Jan 2025 15:50:14 +0000
ROA not before: Thu 02 Jan 2025 15:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44716
IP address blocks: 87.225.128.0/17 maxlen: 17
212.21.64.0/19 maxlen: 24
212.42.224.0/19 maxlen: 24
212.42.244.0/24 maxlen: 24
2001:bf0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d0:c9:1b:21:f7:9a:d0:ab:38:89:15:40:d7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fecca86e58f9312f2f336986cad03d05af0ede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:27:d0:0a:5c:44:30:49:e8:02:7d:24:bf:
73:a0:1a:e2:6d:77:3e:45:0f:e8:9b:23:8b:d2:73:
86:5d:33:09:cc:48:12:86:7c:2b:56:bc:0b:54:9e:
d6:3d:24:7c:c6:49:dc:63:e8:5a:e0:81:65:6f:05:
7e:e7:15:b3:32:47:8e:64:13:3c:de:0f:fc:77:c5:
6b:19:ac:87:c5:cd:ee:5a:86:91:4e:a0:f7:dd:e5:
76:cb:5f:1f:98:0d:e0:43:42:b2:10:d7:28:dd:e3:
e7:de:11:ac:36:e0:d6:40:36:92:51:5e:e6:df:b6:
3c:2a:d6:f0:4b:a7:53:a1:fd:d7:35:cd:fb:e7:89:
2d:f5:50:07:b9:68:98:3f:d0:e6:6e:78:cc:0a:b7:
b6:2f:24:ba:69:3c:a0:96:a3:29:ce:d3:3c:75:f3:
59:18:47:03:59:8a:71:22:58:94:5e:b5:b4:5c:ed:
37:79:1b:db:8a:2f:bc:9b:43:36:5b:2d:70:04:a9:
9b:b0:51:b2:4f:98:b5:cb:07:d3:d6:2a:49:1e:10:
c4:9c:82:c6:a9:63:16:69:bf:66:ce:51:71:64:9c:
b6:75:bf:86:c7:4d:51:53:d7:69:0c:f6:c9:3d:5d:
61:24:17:6c:94:1f:95:3d:5a:9a:bc:7c:78:87:56:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:CA:86:E5:8F:93:12:F2:F3:36:98:6C:AD:03:D0:5A:F0:ED:E7
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/D-zKhuWPkxLy8zaYbK0D0Frw7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.225.128.0/17
212.21.64.0/19
212.42.224.0/19
IPv6:
2001:bf0::/29
Signature Algorithm: sha256WithRSAEncryption
94:39:dc:25:7a:72:5f:f2:da:2d:1a:b3:8b:bc:a9:96:b7:bf:
f3:39:eb:bd:50:a5:cc:5b:52:c7:73:da:80:82:98:ff:81:e2:
80:3a:e8:a6:50:06:ca:f0:95:dc:0f:f4:01:85:18:7c:66:7b:
d8:ca:2d:6f:15:bf:4c:36:17:3a:7d:63:07:80:e5:98:b3:61:
2e:2c:62:f1:da:eb:32:07:09:41:a8:b4:24:0c:9c:e0:7e:b6:
6f:aa:5c:c4:cb:66:b5:bd:1c:cc:6f:33:17:47:1f:6e:47:66:
19:bb:09:3d:04:c4:61:fb:e1:4f:43:db:6c:63:d6:49:54:2c:
14:9f:4e:83:48:eb:08:ea:6d:b8:c7:3f:01:14:49:6e:ed:2d:
3b:7a:52:22:3a:e3:39:57:2f:a6:a3:74:db:9b:6a:e9:80:7b:
fc:e7:30:f7:74:15:8a:d6:12:e4:cd:0e:a9:fb:28:2c:de:d3:
ed:cf:b6:4a:f5:16:44:2c:63:15:ec:c5:46:3c:a8:1b:89:a0:
ab:2c:b0:c7:0d:fc:43:c7:b5:c5:59:47:14:f4:eb:4c:fe:a1:
cb:7f:78:2d:6f:ed:24:b4:95:41:29:7a:d2:b1:d7:ba:58:d9:
d3:8f:f0:58:06:99:2b:f9:e8:73:f5:ed:01:85:8f:bb:30:c3:
71:68:25:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:18 2025 by rpki-client