Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/fj4ybxpsDPTq3Dcp32ARk19V658.roa
File: fj4ybxpsDPTq3Dcp32ARk19V658.roa (raw, json)
Hash identifier: G3z4kx3nRpiPVloWlnA+5o5/TapLF4KViU9lT9zaU4s=
Subject key identifier: 7E:3E:32:6F:1A:6C:0C:F4:EA:DC:37:29:DF:60:11:93:5F:55:EB:9F
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 019420D615765B4223C6D8A48E3DBB2F7995
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/fj4ybxpsDPTq3Dcp32ARk19V658.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57277
IP address blocks: 80.92.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:15:76:5b:42:23:c6:d8:a4:8e:3d:bb:2f:79:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e3e326f1a6c0cf4eadc3729df6011935f55eb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:c6:0d:c0:6e:ad:9b:e4:5e:cc:53:bf:68:
51:31:74:eb:8a:1d:fa:2c:73:5b:d6:79:e3:a4:67:
15:ef:5f:c5:84:e0:e3:82:0a:54:5a:dd:8f:aa:bd:
2d:70:fb:09:67:e2:a4:aa:0d:90:59:b6:36:ef:6b:
58:36:81:88:90:c7:7b:05:95:5a:38:81:53:b3:e4:
f2:0f:00:8f:b4:5b:d4:10:e1:07:d8:4d:01:81:ac:
2a:e3:89:58:c2:76:27:22:55:0c:bb:17:30:2c:b6:
66:85:0f:27:73:24:97:7b:69:6c:13:a7:80:87:2e:
40:17:74:4c:c5:d6:83:b5:bf:7d:00:07:4b:c4:5f:
c9:e0:c4:1a:c0:c7:b2:3b:80:5a:8a:2e:f6:2a:c1:
ba:4e:2b:58:75:ac:20:97:ef:d6:c6:f1:af:7d:27:
38:b5:ea:9f:03:de:3b:13:8a:d3:da:38:aa:f1:6f:
03:a2:f6:5d:26:3e:7d:8a:89:4b:33:ab:9f:e2:7f:
ae:8f:f1:28:11:ec:ef:ba:cc:9e:8c:b9:1d:28:91:
94:dd:c0:74:5e:aa:db:fc:82:20:bd:0d:e6:a8:5b:
c2:2a:59:28:5a:c3:11:e4:ed:4a:ef:df:b4:06:6b:
98:60:1d:90:66:f9:b4:14:26:19:bf:00:9c:27:38:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3E:32:6F:1A:6C:0C:F4:EA:DC:37:29:DF:60:11:93:5F:55:EB:9F
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/fj4ybxpsDPTq3Dcp32ARk19V658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ff:16:32:db:6c:8c:14:8a:ec:b6:39:bb:a3:aa:8d:cc:66:
e6:61:3d:f5:2b:3c:77:fe:60:a4:d0:43:49:c6:68:00:d7:fe:
a5:c0:bb:44:ce:ac:79:8d:c6:12:ab:7a:eb:9a:57:3b:82:ae:
47:02:bd:a7:83:94:85:cc:da:a0:11:56:ad:36:ec:50:46:ce:
83:b2:c7:49:da:d6:c7:12:6e:6f:f2:9a:84:4b:6f:05:fb:79:
8c:18:7b:42:93:a0:24:31:e8:3a:cc:22:f6:91:45:b5:40:0a:
06:52:f7:0f:b4:6e:21:ee:a3:86:f0:e4:d0:99:53:af:e1:35:
ab:ba:20:96:2b:39:a0:ec:a3:c6:88:f3:92:31:05:ae:a6:c3:
0e:39:12:bf:c5:24:96:83:f5:15:88:58:5b:45:9c:10:3a:7c:
c8:52:2f:6d:21:2a:15:29:4a:7a:6d:4a:49:b5:5a:00:9c:46:
8e:e7:b2:7b:2b:e5:c8:e8:b4:d4:2f:f0:6f:b3:78:aa:57:ed:
95:20:3b:34:50:12:db:07:5e:6f:79:80:f5:bc:db:fa:66:11:
32:c0:4c:02:47:ee:80:7e:ac:91:46:c6:f9:29:f9:0c:ea:7c:
da:eb:22:fe:06:8f:fc:56:08:c3:34:0d:53:85:12:30:6d:25:
fb:3c:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:18 2025 by rpki-client