Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/87zZlptNTj5eDmw1mp6aa_Smc8s.roa
File: 87zZlptNTj5eDmw1mp6aa_Smc8s.roa (raw, json)
Hash identifier: nu7kaOdLdpePP5zeOGZHAUgVzLeegYTbbp8hwPgny7Y=
Subject key identifier: F3:BC:D9:96:9B:4D:4E:3E:5E:0E:6C:35:9A:9E:9A:6B:F4:A6:73:CB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422204E5D5FEC6A200F6A150783C2E213
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/87zZlptNTj5eDmw1mp6aa_Smc8s.roa
Signing time: Wed 01 Jan 2025 13:48:49 +0000
ROA not before: Wed 01 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 185.221.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4e:5d:5f:ec:6a:20:0f:6a:15:07:83:c2:e2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3bcd9969b4d4e3e5e0e6c359a9e9a6bf4a673cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:c5:33:f2:32:8f:35:1e:02:dc:90:81:74:
4d:4a:b9:07:ec:9d:41:1b:88:bd:2f:f0:ab:9a:e6:
4f:3f:70:b5:53:05:bb:96:99:08:73:d7:f7:a6:a6:
f9:a4:1b:78:49:31:71:e2:26:57:f8:cb:79:bd:8a:
6f:2b:de:9a:39:96:c8:8c:a8:8d:b4:e4:cd:be:19:
06:06:3a:d2:9f:71:66:35:fe:20:e3:92:89:41:24:
f2:c5:60:b0:85:91:89:1c:8e:93:a5:03:8f:c7:d9:
76:6e:3c:23:7e:7e:ca:dd:c7:ca:93:ad:50:47:92:
34:1b:e6:fb:03:a2:bc:27:99:4c:63:08:27:9a:54:
ae:f9:16:36:39:ce:08:58:fa:ac:50:15:ca:02:36:
a0:c4:de:b4:12:88:94:5e:97:90:60:3a:5f:69:b0:
30:53:b8:d9:7a:1e:e6:b9:4d:32:a1:07:a9:37:14:
0e:e8:19:7d:14:8d:48:82:21:f9:7b:3d:58:dc:03:
11:f7:de:83:54:a1:66:57:85:38:dc:cb:85:34:f8:
b3:b6:ca:d2:ec:ce:dd:7a:71:76:1e:30:cd:c3:c0:
9a:c0:59:e3:2f:ff:f4:f8:fa:20:95:3f:ff:71:5a:
a3:62:8d:06:9c:52:f1:7c:fd:ae:26:00:b8:67:cc:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:D9:96:9B:4D:4E:3E:5E:0E:6C:35:9A:9E:9A:6B:F4:A6:73:CB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/87zZlptNTj5eDmw1mp6aa_Smc8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.22.0/23
Signature Algorithm: sha256WithRSAEncryption
31:91:17:da:66:2d:ac:be:6b:56:7a:7c:84:68:a1:25:ca:5e:
27:e6:10:24:5f:c9:24:c1:97:ba:ad:55:e4:a4:0c:b7:31:1e:
e6:c9:e5:ce:9d:0e:5d:00:12:04:f7:c7:43:1d:e4:8e:70:a5:
1c:4e:28:d4:ea:94:6b:c7:69:bb:4c:69:e4:c6:b4:93:d7:73:
f4:6d:4a:c1:96:bb:88:bc:ab:b5:b5:8d:eb:99:48:91:57:34:
39:97:91:ef:a2:15:45:67:05:89:46:0e:55:d3:3e:cc:42:0b:
4a:3e:2b:44:c6:c1:b9:be:33:a4:9c:f2:8b:04:fe:34:16:3c:
d6:ba:11:b3:43:a0:29:14:8f:23:a7:a2:f1:52:26:52:01:53:
9c:a0:db:34:2b:25:ed:73:f6:9a:e2:d2:50:a8:a3:fc:9e:81:
68:d7:69:a6:06:ad:9f:68:dd:bd:9e:98:ca:c6:5b:4c:bd:7a:
8e:a6:b5:6f:08:1e:5c:34:47:21:a7:c9:fc:ae:ab:87:50:3b:
54:72:eb:f8:7d:d4:c2:17:67:e0:0c:46:21:50:b2:c1:1d:72:
c1:83:98:3c:ce:af:b5:3c:98:50:24:d3:41:85:8a:cb:d2:20:
4d:64:f6:9b:53:5a:8b:c3:a4:de:5e:4c:5e:5a:49:fd:db:47:
54:01:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:46:02 2025 by rpki-client