Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/SOLF2PkE720JgjOdf1KwRyDMoVU.roa
File: SOLF2PkE720JgjOdf1KwRyDMoVU.roa (raw, json)
Hash identifier: xFpd4K6CQn8K2Nx3S7ipIBzbB30czEVkqtv2sS8du2A=
Subject key identifier: 48:E2:C5:D8:F9:04:EF:6D:09:82:33:9D:7F:52:B0:47:20:CC:A1:55
Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial: 019428264E2082E9798C4877B93329E356F8
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/SOLF2PkE720JgjOdf1KwRyDMoVU.roa
Signing time: Thu 02 Jan 2025 17:53:06 +0000
ROA not before: Thu 02 Jan 2025 17:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210422
IP address blocks: 80.68.154.0/24 maxlen: 24
2a12:9f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:4e:20:82:e9:79:8c:48:77:b9:33:29:e3:56:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
Validity
Not Before: Jan 2 17:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48e2c5d8f904ef6d0982339d7f52b04720cca155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:a8:6b:b4:c4:41:01:76:db:70:95:a7:ff:
79:ff:75:69:b3:94:8a:b8:89:37:c7:99:ec:f6:0f:
6e:6d:11:28:fc:3b:b4:64:95:68:a0:27:8c:a2:6f:
bb:0e:00:a6:82:68:fc:52:5e:3e:a0:03:9c:30:49:
c3:ff:0d:f2:7f:b0:52:b0:67:cd:a1:3a:ec:1a:5b:
43:c8:2c:29:9d:8a:5f:c0:90:2b:ab:14:6c:e9:a2:
c7:68:a0:10:d4:38:bc:f1:d7:ac:b8:bc:51:47:11:
10:53:bd:f6:82:f1:b3:06:6e:4b:c9:d9:a3:57:8b:
72:6d:ed:64:3a:ce:35:71:2f:ce:51:40:b7:5b:2b:
8b:5f:0b:12:d8:86:9f:4f:87:6e:ef:52:70:32:31:
d5:94:71:d9:e6:8d:89:65:8b:e5:fb:68:86:42:d5:
6a:58:da:13:24:b3:b5:df:ed:2c:2b:fb:bb:63:5d:
2e:cf:72:00:9e:1e:26:fd:42:5a:c7:ae:97:64:f3:
f3:1e:68:db:e8:ed:f1:69:b5:98:ba:e6:41:ac:32:
ab:6d:c4:79:62:61:06:0c:06:fd:0f:0d:c9:b6:24:
5b:ef:98:3f:ab:c3:47:59:24:04:8c:13:47:c5:c4:
c9:b8:c4:32:50:ec:78:d2:1b:b5:97:de:26:7b:56:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:C5:D8:F9:04:EF:6D:09:82:33:9D:7F:52:B0:47:20:CC:A1:55
X509v3 Authority Key Identifier:
keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/SOLF2PkE720JgjOdf1KwRyDMoVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.154.0/24
IPv6:
2a12:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
9f:7d:56:bf:8b:b7:ff:71:4d:f5:9e:8d:67:80:76:97:8e:42:
ec:62:56:00:af:55:05:a1:61:f3:b9:5b:8d:c3:40:75:c7:46:
a8:b6:75:6a:de:6b:d4:76:36:be:04:ea:32:2e:b7:55:ff:96:
f8:b9:43:1e:ab:25:0b:d6:3d:4e:8e:de:c8:cf:fd:10:30:8c:
85:82:2d:9b:2f:b1:e2:7f:cd:69:93:f1:ec:01:ef:e4:e3:36:
f6:8e:ed:1f:52:e6:d4:7e:fe:73:1f:8c:1c:0f:4a:6e:e7:ba:
aa:e0:e4:1e:b6:c0:0e:5e:e5:98:24:bf:61:e1:27:45:9b:93:
02:d5:00:a4:61:e7:eb:5e:63:03:60:a8:a9:e9:94:7e:37:9f:
84:01:fc:01:23:f0:e3:fc:84:1c:c3:18:16:8d:03:ea:b8:bf:
9e:0f:d0:be:11:8b:93:3d:f7:3e:f2:f6:45:f9:80:9c:a1:50:
ff:ed:30:10:50:0f:33:af:67:b7:ff:0f:bd:1a:09:c1:54:cc:
ef:31:bc:a3:46:f7:11:aa:38:0b:84:24:dc:52:dd:c7:b0:83:
24:d0:ad:de:af:be:43:2d:90:82:7e:5a:bf:62:8c:5e:46:65:
d0:cf:fb:1b:65:d8:3a:28:b9:23:90:bd:13:13:46:0d:8c:a9:
cf:95:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:05 2025 by rpki-client