Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa
File: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (raw, json)
Hash identifier: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=
Subject key identifier: 91:2D:1A:36:CD:65:C7:E3:BA:11:FC:22:2B:03:8C:A1:F6:32:B7:64
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019423D76DCDC4B2ED6DE8FF1B95E454ADCD
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa
Signing time: Wed 01 Jan 2025 21:48:28 +0000
ROA not before: Wed 01 Jan 2025 21:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152117
IP address blocks: 80.73.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6d:cd:c4:b2:ed:6d:e8:ff:1b:95:e4:54:ad:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jan 1 21:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=912d1a36cd65c7e3ba11fc222b038ca1f632b764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:1d:6b:36:a5:62:3d:5d:30:d1:68:bf:89:
25:b2:0a:b4:59:3d:5f:f4:37:54:9b:aa:14:0e:26:
0f:18:c0:8d:cf:7f:51:97:da:6f:6e:f9:f2:66:af:
fe:b0:2a:8a:5f:6c:12:19:cf:94:48:c7:ff:18:09:
91:44:13:db:dc:6c:cc:6f:46:67:02:c1:fa:15:dd:
9f:3d:c9:52:89:c9:c2:be:56:35:2e:c1:b0:f9:dd:
2e:0d:c0:1b:3e:15:e8:df:ec:8a:2f:20:43:29:aa:
18:a3:85:53:16:a3:39:1f:51:5b:75:7b:cc:1e:96:
55:63:b9:20:b5:da:64:fc:b9:76:e8:7c:63:00:a2:
39:67:60:9e:06:c4:8c:02:1c:84:a0:1b:82:c7:ee:
f4:fa:21:68:f4:ab:5e:81:51:81:75:4e:21:1f:a0:
f3:22:86:b6:5c:a3:a0:7a:77:0e:45:3d:8d:e3:e7:
de:2a:90:d7:d4:a3:01:02:31:e5:22:d5:3b:7b:62:
f8:53:4d:7d:2a:c0:4c:85:2e:8f:46:af:1f:bc:3e:
ce:a6:0a:04:29:41:d7:4c:f7:de:51:4c:95:e1:dc:
18:cc:39:82:72:1b:fc:80:55:9b:d2:bd:44:d3:09:
1e:f9:cf:9e:d9:40:1b:77:1b:0e:2b:b5:68:08:22:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:1A:36:CD:65:C7:E3:BA:11:FC:22:2B:03:8C:A1:F6:32:B7:64
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.135.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0a:e5:64:0e:02:58:d3:32:c3:02:f2:df:91:29:31:50:11:
32:96:f1:b4:6d:d2:cf:ec:aa:29:e8:a3:0f:57:c9:58:d0:e7:
27:8d:d8:e9:e5:ed:02:58:68:c6:8a:66:00:1f:a7:dd:40:ef:
52:74:e3:75:12:d7:cd:f4:b7:84:6a:9f:e3:3d:6a:df:36:dd:
e6:ff:78:cc:60:8b:6e:63:57:5a:2b:ab:fb:09:4b:e9:33:45:
c9:2a:f3:78:f2:ae:71:74:b2:0a:ea:52:52:43:58:bc:24:da:
eb:e4:a8:27:f2:78:dd:72:d0:83:ee:ff:e2:b9:09:29:ad:7a:
eb:1f:2a:67:7c:6e:fd:e5:4c:31:8b:e5:5c:68:c2:fa:7a:73:
e7:92:78:df:05:06:70:57:6d:84:90:2f:03:40:f2:6d:bf:94:
6c:77:a6:83:03:28:32:de:10:2c:bd:9d:97:53:2a:b0:9c:27:
ac:a2:8d:61:70:56:b2:b9:59:ea:e8:55:89:23:7f:f7:e5:ce:
2a:a6:99:5c:ad:d4:81:d6:1a:7e:79:c3:b6:3c:6e:22:91:81:
6d:88:2a:8a:23:ac:c7:66:4d:fb:63:85:31:59:a0:53:96:99:
a6:bc:6f:07:0e:2b:79:d8:8f:dc:af:62:25:ac:90:f7:e6:b7:
a8:7f:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:34 2025 by rpki-client