Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/Deo2xTMuFm8QocUJ-a4RvviXgQw.roa
File: Deo2xTMuFm8QocUJ-a4RvviXgQw.roa (raw, json)
Hash identifier: nYDs1ZDulSnhALP5AjppGJbC8hnqemDJikGGe6pDTwQ=
Subject key identifier: 0D:EA:36:C5:33:2E:16:6F:10:A1:C5:09:F9:AE:11:BE:F8:97:81:0C
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 019423D7405CA1488C61135B31AE2996E58B
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/Deo2xTMuFm8QocUJ-a4RvviXgQw.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25386
IP address blocks: 62.80.160.0/19 maxlen: 20
185.117.240.0/22 maxlen: 23
2a06:9000::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:40:5c:a1:48:8c:61:13:5b:31:ae:29:96:e5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dea36c5332e166f10a1c509f9ae11bef897810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:3b:86:8f:6d:e1:e3:dc:6e:92:71:8d:01:
fc:f8:75:7d:c7:5b:9a:58:3c:19:4e:e0:ed:af:46:
bb:5a:a8:33:c5:38:94:83:20:9a:7c:90:f7:d1:7b:
9f:20:cc:c1:13:81:eb:69:51:36:08:63:6a:6d:62:
32:c0:49:3d:98:ee:8a:21:5f:22:55:76:ab:2d:37:
4c:a4:7b:bf:0c:63:c8:6e:ec:06:58:dd:d9:b8:54:
26:b9:b7:e8:6e:65:ca:bb:fc:1c:7b:fb:46:f1:48:
b6:2f:1e:0a:6f:31:98:0c:34:d6:ba:ac:e3:0a:39:
ef:f2:d6:12:fc:03:91:ed:8a:8e:9f:72:5d:82:88:
fa:14:05:ba:99:ec:2e:10:a4:fe:b0:67:28:97:bd:
1d:57:06:b2:81:84:e0:c2:b3:53:d1:5e:f9:4a:53:
6e:7c:12:8a:07:fa:fe:23:0a:55:08:63:85:01:c6:
5c:81:95:d7:33:6d:3a:3b:d0:f0:a5:b7:a9:fe:20:
dc:c5:70:c1:2e:d3:1a:2c:e2:ef:2d:d8:a1:d8:d3:
88:9f:8c:3b:fd:ce:0e:2c:3d:0c:45:cc:cf:ed:26:
00:42:5a:e9:7e:96:6e:79:6f:57:9c:0d:54:52:f4:
03:f4:56:10:07:dd:87:aa:d1:5c:b3:00:b3:4a:0e:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:36:C5:33:2E:16:6F:10:A1:C5:09:F9:AE:11:BE:F8:97:81:0C
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/Deo2xTMuFm8QocUJ-a4RvviXgQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.80.160.0/19
185.117.240.0/22
IPv6:
2a06:9000::/29
Signature Algorithm: sha256WithRSAEncryption
1c:9e:03:f6:85:6a:3a:9e:b4:dc:99:c8:95:86:fd:80:48:5c:
35:22:49:db:12:1b:cc:53:a9:90:0e:1d:7b:54:fa:fb:f4:a5:
6d:ea:25:25:27:ae:85:8b:c6:13:f6:75:4c:c9:e2:c8:08:15:
0c:c1:62:92:bd:62:4f:38:7a:90:e1:f6:e1:ce:60:03:ae:ef:
79:04:e2:b6:03:96:c5:7a:e6:22:c8:2a:42:6a:73:3a:e3:c9:
5e:68:ab:81:16:35:e8:ab:d0:fc:8a:15:a5:c6:93:cd:29:5d:
94:44:77:8b:23:86:52:a4:74:3e:3b:30:d8:88:16:a3:60:a6:
4a:88:6f:b6:4f:4d:da:a9:7f:71:ca:74:f9:30:58:10:aa:1f:
1a:2a:f2:68:0e:02:22:8e:5c:4b:4e:4f:af:16:23:89:63:75:
02:bc:c5:c9:07:91:72:9f:c7:7a:83:10:a3:8a:7a:ef:9e:1b:
68:41:a4:c1:42:04:c5:00:f2:38:6e:00:72:62:3e:3a:3b:b0:
75:9a:39:f3:9f:f3:1e:41:19:2a:3c:a5:7e:92:97:a5:8d:3f:
ba:23:15:44:d0:fc:60:b7:0d:f2:63:3f:de:12:f7:9d:ca:95:
8c:10:c1:79:53:43:4c:44:ed:c6:80:93:11:8c:25:97:94:93:
1a:9a:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:21 2025 by rpki-client