Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa
File: 0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa (raw, json)
Hash identifier: i+FX59/XtMW/8gmUH2jgeEyByOCXMI3eEtMtNI5KB4s=
Subject key identifier: D2:60:64:F9:86:04:11:CA:52:D8:45:9E:F4:9B:8B:E5:95:3D:3B:3C
Certificate issuer: /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial: 019426D97CB72663911AA34C54C744AE7D42
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33871
IP address blocks: 80.67.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7c:b7:26:63:91:1a:a3:4c:54:c7:44:ae:7d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d26064f9860411ca52d8459ef49b8be5953d3b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:3e:7a:eb:c3:28:da:74:95:d5:a4:a0:51:
11:7c:2e:c4:5a:e7:a3:91:78:23:67:d2:18:7d:81:
a2:d6:bb:a1:79:fd:6f:25:75:8f:27:b2:a2:68:8f:
16:c0:b6:e5:f0:57:37:50:02:6a:b2:a5:18:17:8d:
8b:be:d2:b0:55:c7:66:e9:b3:00:63:2f:dd:5b:53:
0e:f6:93:91:1e:3b:18:2e:17:60:ed:fd:c1:6f:ee:
2e:fb:14:56:df:6c:52:7e:d1:57:e1:58:0e:4a:2c:
51:27:f0:22:7a:0d:9b:65:58:64:14:ff:0c:8b:26:
cc:0a:f6:bf:6c:da:e2:3a:16:f3:ec:46:9f:36:ce:
f4:3c:5e:b0:53:24:1f:7b:ec:92:b8:b0:40:95:a9:
db:78:ac:a7:3d:7f:7a:b9:b7:9e:ce:e3:26:21:94:
cf:f5:f8:d3:4c:4b:c0:53:2a:de:45:8e:70:39:d4:
80:e2:2e:15:a5:41:a2:16:e3:cb:b5:b4:41:1d:69:
38:27:0c:36:6d:cd:63:7a:b6:34:74:7c:f3:0f:0f:
08:d3:31:da:b2:f1:18:13:be:7d:ad:ff:06:de:94:
e3:af:ad:10:69:9c:a7:63:da:31:e6:77:f7:8e:57:
51:a6:14:76:6a:ab:1d:f4:11:4d:f8:7d:ba:ec:ee:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:64:F9:86:04:11:CA:52:D8:45:9E:F4:9B:8B:E5:95:3D:3B:3C
X509v3 Authority Key Identifier:
keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:78:f9:a8:f9:1f:89:ee:72:01:81:5f:fe:9c:14:cf:a3:2a:
2a:df:3d:69:67:a6:24:02:60:e3:e4:c3:c3:07:50:9b:a7:9f:
4b:32:f8:72:15:7a:d9:de:5c:97:9b:b5:2a:42:c6:60:f6:a3:
7e:55:20:b1:7d:e5:e7:ca:34:74:80:80:bb:7f:3e:5e:8f:52:
42:2b:b6:4d:5c:0d:19:ab:8e:bf:c6:82:53:f7:6b:b6:dc:5c:
92:ea:31:c8:4f:6c:d0:90:e6:2c:f6:0b:8d:4a:bb:52:c0:10:
8d:a5:4a:37:57:a8:25:1c:27:23:bc:76:10:58:d4:7e:5b:c8:
7e:7b:ab:94:92:ab:fe:88:4a:0e:5f:c5:e0:d1:f0:9c:d5:94:
be:56:aa:29:b9:1b:43:7a:49:cc:9e:b6:6f:3a:fb:31:f3:b7:
0e:b6:54:94:98:9e:42:ba:c4:26:df:6a:11:b0:f4:07:4a:0e:
7b:05:32:aa:1b:fe:4a:8b:b1:12:ce:ca:73:3d:e0:b7:aa:1a:
70:9d:48:48:56:9f:9b:76:e4:13:7a:0a:f0:98:35:8a:3e:b4:
61:b9:8d:a5:12:69:5a:ef:80:4a:bc:bf:8e:a1:12:af:95:fe:
a5:7c:4f:a2:85:de:f0:46:12:d3:0b:b8:7e:3b:d9:e8:bc:3c:
d5:70:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:48 2025 by rpki-client