Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/tGsnD0ErM4m3G3OyuZsRF3rAk08.roa
File: tGsnD0ErM4m3G3OyuZsRF3rAk08.roa (raw, json)
Hash identifier: 1ulLLM2swrVXwoHGWG90/2I7oEmO5aXyc7s/CBAFdww=
Subject key identifier: B4:6B:27:0F:41:2B:33:89:B7:1B:73:B2:B9:9B:11:17:7A:C0:93:4F
Certificate issuer: /CN=868e89c7ab4e1512a9b46d5389b5de9c6a1d7e99
Certificate serial: 3807C0BC
Authority key identifier: 86:8E:89:C7:AB:4E:15:12:A9:B4:6D:53:89:B5:DE:9C:6A:1D:7E:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho6Jx6tOFRKptG1TibXenGodfpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/tGsnD0ErM4m3G3OyuZsRF3rAk08.roa
Signing time: Sat 01 Jan 2022 11:54:26 +0000
ROA not before: Sat 01 Jan 2022 11:54:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 87.241.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940032188 (0x3807c0bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868e89c7ab4e1512a9b46d5389b5de9c6a1d7e99
Validity
Not Before: Jan 1 11:54:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b46b270f412b3389b71b73b2b99b11177ac0934f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:84:95:07:8a:4a:c6:8b:26:8a:39:5a:78:
e9:1b:67:04:13:57:a4:7d:d5:87:0a:af:51:4a:63:
54:c4:f1:51:90:4f:b7:92:dd:e5:07:79:6b:ec:dd:
cc:7d:5c:f1:09:dc:2e:8b:b0:c1:1a:1c:c0:0e:61:
8c:c8:b5:7c:31:63:8a:72:43:9e:6b:cc:05:0f:01:
e0:99:f8:eb:db:70:33:a1:28:87:1f:92:8d:67:6f:
cb:bf:45:04:de:3a:02:5d:9d:f8:cf:dd:d8:ac:a5:
93:ec:16:52:38:72:a2:30:6c:23:8b:48:9c:db:20:
6b:a8:69:0d:b4:c7:52:4e:48:e0:54:dd:f7:81:41:
ec:a9:24:e0:1a:23:1e:e4:b8:6e:e6:2a:ca:6d:f3:
c7:00:cc:c0:52:77:ab:b0:1e:5d:71:45:ba:a2:83:
4b:44:a7:b9:b4:bf:7b:b4:88:ac:1e:1c:c4:5a:fe:
72:5f:28:a2:d1:1d:03:c0:70:95:fb:09:79:98:9c:
18:a5:5c:90:32:c8:50:56:c6:12:fa:d7:79:99:6a:
3e:b2:dc:4a:7b:75:ea:0e:49:45:30:81:b4:1b:52:
ed:2f:e5:5c:99:f6:f8:9e:50:a3:d2:89:3b:72:d1:
93:66:56:b3:bf:5f:14:1d:7a:31:01:6d:e9:06:35:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6B:27:0F:41:2B:33:89:B7:1B:73:B2:B9:9B:11:17:7A:C0:93:4F
X509v3 Authority Key Identifier:
keyid:86:8E:89:C7:AB:4E:15:12:A9:B4:6D:53:89:B5:DE:9C:6A:1D:7E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho6Jx6tOFRKptG1TibXenGodfpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/tGsnD0ErM4m3G3OyuZsRF3rAk08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8d40c2-c28e-45dd-ac10-07fe7760a979/1/ho6Jx6tOFRKptG1TibXenGodfpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.241.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:68:72:58:40:8c:c4:55:46:fa:c0:be:6f:31:50:6d:7f:eb:
71:4f:fe:35:4d:70:54:0f:62:19:88:6b:a4:f7:22:a2:1e:55:
c2:03:fd:ee:90:70:3a:69:38:61:58:a1:23:a2:ed:00:aa:d3:
d8:4f:98:9f:83:e0:79:d1:ad:98:0e:dc:4b:a6:7f:69:df:87:
ad:99:62:a7:05:31:10:bc:41:56:b8:bd:c0:3b:b7:30:94:2e:
21:cc:b5:47:88:78:af:db:d1:8c:62:98:ba:d6:12:e8:84:76:
d6:d6:3f:9b:9b:76:16:41:2f:fd:1e:28:eb:26:0a:4f:dc:c2:
63:60:03:24:c2:23:dc:2e:ec:ea:11:02:2d:84:66:0c:e7:97:
fb:62:7c:12:67:c5:01:fc:dc:66:24:85:83:b4:66:cb:37:15:
58:46:fd:13:7d:8b:c9:69:94:f9:c7:83:de:4f:d7:34:ba:6b:
c8:6d:9d:05:1d:d5:d6:33:5d:cd:c8:b7:f6:d3:af:b3:ce:6d:
7c:d4:89:67:37:71:a8:bb:2b:d6:75:25:d6:6a:c3:cb:6e:b4:
13:2d:da:56:ab:c4:ea:33:5a:30:77:6c:2f:b5:c0:34:2f:30:
e2:71:d4:ed:29:e7:8d:a8:ab:ff:9f:2d:65:bf:b2:e4:35:ec:
b9:85:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:59 2025 by rpki-client