Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/sPN4MQOyS-s_riyCy93fzpeT-34.roa
File: sPN4MQOyS-s_riyCy93fzpeT-34.roa (raw, json)
Hash identifier: yENIXfYPwcHSIXCDZ9TP6nlOKTHnb7yHcks9QDKcNxs=
Subject key identifier: B0:F3:78:31:03:B2:4B:EB:3F:AE:2C:82:CB:DD:DF:CE:97:93:FB:7E
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01942747A0D00CCDBC0331CF25F3633FFF32
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/sPN4MQOyS-s_riyCy93fzpeT-34.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61209
IP address blocks: 80.191.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a0:d0:0c:cd:bc:03:31:cf:25:f3:63:3f:ff:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0f3783103b24beb3fae2c82cbdddfce9793fb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:b5:4f:e9:a7:2c:68:24:c9:57:12:29:8b:
34:4a:dd:2e:11:e1:eb:3b:ee:c0:f5:73:66:b4:ac:
2e:45:ec:54:2a:af:00:ca:fa:0f:4e:30:54:90:15:
f7:83:78:50:7d:b0:a7:55:0d:e1:44:ef:07:32:37:
f1:33:ed:0e:61:06:df:b9:e3:98:f0:98:19:58:a8:
5b:94:c5:5d:50:8b:5a:3b:86:3a:14:69:3b:21:91:
5c:c5:2f:2f:91:bd:ef:ac:30:8e:85:03:1c:05:dc:
e6:ee:e2:ed:a0:78:59:d8:d7:56:c6:dc:3b:31:14:
18:55:2c:69:81:df:5e:df:17:0b:73:c2:3f:2a:1a:
3d:a7:8a:21:47:e4:20:3a:15:00:ea:bd:14:2e:ab:
45:59:25:34:d9:82:07:6b:71:a9:72:9c:3d:16:a0:
80:be:d2:ae:9d:45:b0:a3:21:aa:dd:00:a6:e4:25:
40:5f:aa:e5:69:f4:36:01:de:98:f1:cb:3f:92:74:
96:db:87:7e:03:af:45:fd:a2:22:c2:4d:01:37:1f:
5d:ae:6c:fe:2b:5e:af:10:2b:69:e6:a0:91:4f:74:
d6:58:06:a5:82:d3:e6:7b:c6:65:91:c1:de:d5:f1:
d9:04:c8:47:0c:c0:8d:71:16:a6:ca:42:e4:c7:e3:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F3:78:31:03:B2:4B:EB:3F:AE:2C:82:CB:DD:DF:CE:97:93:FB:7E
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/sPN4MQOyS-s_riyCy93fzpeT-34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.191.172.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:e8:a1:28:ee:83:ff:35:ee:5b:1d:8f:09:fd:45:ae:0a:ae:
84:55:4d:48:eb:0d:23:c6:f6:2d:87:ae:d5:f9:d4:c4:d1:be:
02:9e:10:e1:06:1c:97:7f:21:2c:4b:52:70:8a:af:9c:9f:b0:
f1:8a:cc:9f:eb:69:79:24:e4:23:93:c8:f1:e6:7e:3b:06:82:
25:3c:1f:9e:a7:c0:84:2d:49:67:57:2b:35:fe:eb:c3:a0:1d:
9d:c3:30:db:45:7f:ad:9e:77:33:85:88:ca:dd:bd:68:94:ae:
1b:a7:34:b1:c7:95:fa:c8:31:fa:b1:56:be:dc:93:2c:09:66:
c5:b1:03:a5:55:a4:1b:d2:13:cb:f5:96:3d:fe:b7:c6:1f:6f:
bf:9f:89:2c:8b:ab:66:91:16:f5:d2:18:fb:77:6d:6e:40:63:
c6:e6:48:f1:b4:62:cc:86:70:af:f9:74:98:7c:bc:36:5a:15:
eb:10:4d:96:43:9f:a7:98:05:63:dd:af:e8:49:d1:fe:7d:9d:
e3:90:35:56:4b:99:1e:1d:dd:bd:1e:b5:0b:d2:94:70:36:1d:
6e:07:13:18:a6:96:62:65:1b:1b:47:18:74:60:ea:8f:92:24:
89:e3:2e:ed:97:a4:51:f4:38:9a:90:0a:73:94:83:c4:a7:34:
d7:fd:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:05 2025 by rpki-client