Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/L01JaFs6upvCxukuRpNJVKLONEM.roa
File: L01JaFs6upvCxukuRpNJVKLONEM.roa (raw, json)
Hash identifier: RD22oITNNi+VkpKpvsFNn1oAsq5Be0nqy5KSTok7hqU=
Subject key identifier: 2F:4D:49:68:5B:3A:BA:9B:C2:C6:E9:2E:46:93:49:54:A2:CE:34:43
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 01942444801197226A8FA3848F3692AB4EBE
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/L01JaFs6upvCxukuRpNJVKLONEM.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42580
IP address blocks: 80.243.88.0/21 maxlen: 21
185.224.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:80:11:97:22:6a:8f:a3:84:8f:36:92:ab:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f4d49685b3aba9bc2c6e92e46934954a2ce3443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:86:1d:4e:8d:cd:3f:a3:c9:b5:b1:89:f5:
28:19:63:7c:b1:0b:1a:24:24:f1:d5:d3:ad:6d:95:
5e:5f:6e:12:b6:ca:20:05:9e:35:36:50:96:70:06:
80:20:ac:44:fc:f9:20:09:a6:59:a0:1c:f4:11:cc:
6b:7d:c7:8d:0a:57:28:ea:12:9d:9c:7d:93:f8:1e:
d4:a7:f2:11:da:0b:39:9e:1e:5e:0d:cc:7c:8d:5d:
e6:56:0c:41:aa:f2:66:0f:c0:71:2d:82:ef:43:be:
f2:0c:07:86:21:68:ea:a4:a6:3c:13:45:37:94:2c:
25:aa:6a:25:07:aa:fe:ae:5f:c2:2c:ff:d3:56:8b:
c8:13:91:52:04:bd:42:28:0b:99:bf:ba:6e:b0:d0:
56:0b:99:89:c0:73:f0:3b:69:95:56:36:e3:38:9c:
90:1a:7f:66:55:19:61:e8:74:e5:64:ba:8e:53:19:
a0:2b:d0:96:d8:85:6f:0b:90:2b:ff:25:61:c4:e9:
7d:bd:75:02:f6:e6:cc:72:9f:a7:fe:5b:48:9b:f4:
c2:c4:2e:f3:ea:c0:cc:d8:0b:53:12:f8:e0:e2:31:
b8:ce:9c:a3:4d:94:bb:1c:31:a2:dd:b8:26:e9:50:
a7:92:1d:d9:fd:13:7f:7a:8a:45:0f:3f:19:59:45:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4D:49:68:5B:3A:BA:9B:C2:C6:E9:2E:46:93:49:54:A2:CE:34:43
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/L01JaFs6upvCxukuRpNJVKLONEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.88.0/21
185.224.164.0/22
Signature Algorithm: sha256WithRSAEncryption
30:18:9b:cb:8d:bb:b4:32:6f:09:26:c9:b5:66:04:f4:f7:94:
06:6f:1d:cb:95:71:e2:5e:67:18:a2:06:2e:16:b8:a7:9b:c8:
cc:83:0d:2e:59:16:38:19:77:88:97:83:9d:22:d4:0a:13:65:
c4:e7:95:c1:13:bd:e5:9a:61:04:16:d0:67:c5:91:72:3f:fb:
c3:cf:5b:25:1a:6f:1c:3d:be:fe:51:4d:71:10:4e:36:30:60:
cd:39:36:2e:2c:2c:0e:63:da:97:43:f3:85:c3:92:a4:61:e9:
62:79:07:df:3e:88:27:b9:5f:84:66:08:0d:c2:c0:cc:4a:8f:
02:35:6c:a9:bf:1d:de:fd:27:49:38:ab:08:42:36:e8:29:c1:
02:0b:2f:b8:d1:c8:c4:0f:7f:fa:b9:63:03:3d:bb:41:57:4d:
08:d5:27:9b:5b:23:11:5c:23:b3:70:19:0f:a6:b4:4c:b6:23:
88:58:40:d2:2a:1f:54:05:d8:f0:4d:2e:94:7b:da:04:6c:12:
d3:68:a2:45:b1:9f:5f:e7:7c:eb:ef:d2:5d:44:90:cb:c8:40:
fb:b9:7f:f7:59:44:fb:a3:31:4d:8f:31:d1:f6:ed:5d:09:fa:
5c:9c:2d:70:d4:b2:c1:b5:32:70:85:04:58:7f:3e:04:ff:33:
19:13:27:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:11:14 2025 by rpki-client