Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/7DobkB9YDZRCFthUqh8EeCazT9A.roa
File: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (raw, json)
Hash identifier: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=
Subject key identifier: EC:3A:1B:90:1F:58:0D:94:42:16:D8:54:AA:1F:04:78:26:B3:4F:D0
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 0194274721833B1917A006FDB163CFAA6DCF
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/7DobkB9YDZRCFthUqh8EeCazT9A.roa
Signing time: Thu 02 Jan 2025 13:49:20 +0000
ROA not before: Thu 02 Jan 2025 13:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30830
IP address blocks: 80.73.128.0/23 maxlen: 24
80.73.130.0/23 maxlen: 24
80.73.132.0/23 maxlen: 24
2a01:5140::/32 maxlen: 32
2a01:5140:a::/48 maxlen: 48
2a01:5140:b::/48 maxlen: 48
2a01:5140:128::/48 maxlen: 48
2a01:5140:129::/48 maxlen: 48
2a01:5140:130::/48 maxlen: 48
2a01:5140:131::/48 maxlen: 48
2a01:5140:132::/48 maxlen: 48
2a01:5140:133::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:21:83:3b:19:17:a0:06:fd:b1:63:cf:aa:6d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Jan 2 13:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec3a1b901f580d944216d854aa1f047826b34fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:9d:49:e7:91:83:62:58:4d:30:57:99:2a:
6e:7b:7f:8b:07:b4:22:69:d3:32:49:70:1e:bf:79:
7b:10:05:e0:28:77:10:d0:99:8b:b7:60:5c:36:27:
35:be:70:1e:b5:1b:93:73:53:d3:7c:2e:37:61:47:
43:7d:fc:a3:00:13:83:64:53:f9:56:c8:cb:b5:5c:
83:99:2c:36:ed:ef:66:84:08:78:8e:40:dc:d1:a4:
a2:ae:87:6e:4f:63:e0:89:74:06:63:7c:97:80:cf:
c6:3c:d8:5f:c6:0c:77:d0:1d:97:62:09:b4:0e:8a:
58:2e:6e:4e:0b:ac:6a:6f:1e:5b:4b:39:37:08:0c:
83:15:63:c4:90:b5:b3:6b:21:18:4a:c0:7d:ac:45:
65:3c:ac:d5:f9:68:ea:85:a3:87:d5:dd:86:7b:e0:
73:67:7d:1d:e5:6a:46:9a:df:71:4a:20:89:2e:c6:
40:e3:7f:b8:66:c7:4e:8e:b8:40:ab:5f:36:08:58:
67:21:15:96:c8:9e:cb:58:82:ed:ca:e1:8c:e2:46:
71:fc:68:54:06:2e:0c:7f:24:56:c8:8a:34:1e:d4:
37:15:bc:f3:b8:8d:ae:af:6c:b2:0d:a9:a5:4e:fc:
ef:67:ae:41:04:01:ac:6a:b8:5a:10:fb:f4:7d:2e:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:1B:90:1F:58:0D:94:42:16:D8:54:AA:1F:04:78:26:B3:4F:D0
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/7DobkB9YDZRCFthUqh8EeCazT9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.128.0-80.73.133.255
IPv6:
2a01:5140::/32
Signature Algorithm: sha256WithRSAEncryption
1f:3a:79:f8:0f:c5:2f:34:47:1b:22:6d:05:9d:5f:42:4d:bf:
13:73:da:b9:12:94:63:38:70:ed:ad:1f:ba:62:52:67:b5:e1:
cc:fd:08:3a:8a:0d:c5:4a:9f:c8:fd:81:e8:f3:ee:44:ad:45:
d9:38:8b:41:77:cb:b8:c1:c5:e0:3d:05:37:9f:1c:69:47:15:
d4:bc:4e:a3:80:be:3c:12:f2:bc:7c:4d:d9:57:5e:e9:c5:01:
df:5d:ed:2e:f8:d3:e6:3f:33:97:f0:c1:90:8a:d7:e8:52:01:
50:7c:88:ab:2b:2e:0b:ee:ca:8d:8e:d5:78:bd:fd:4a:5a:2d:
7b:61:e0:f0:ac:ab:a3:d6:ee:a5:78:6f:5c:5f:f8:ea:a0:e0:
3a:df:27:f1:5f:15:4e:81:1c:ba:3c:0f:ab:22:3a:f5:e0:ec:
f7:5c:3f:7b:3e:cd:c0:6e:eb:be:2a:fd:13:4c:c9:a9:68:4a:
ed:5d:33:04:67:1a:83:6e:d1:47:6c:07:7d:76:ec:d4:d7:82:
4b:86:8d:d4:0a:79:fb:de:94:6a:1d:d1:a0:63:f7:9e:a2:d3:
f5:b7:f2:fa:19:2a:73:17:9c:20:58:2d:35:ca:57:70:ae:e2:
37:74:35:6c:99:be:47:41:09:f9:82:64:59:92:fe:48:10:f0:
e3:10:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:21 2025 by rpki-client