Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/0EYHloNNMUeAQfFhtTwh0_j8yCs.roa
File: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (raw, json)
Hash identifier: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=
Subject key identifier: D0:46:07:96:83:4D:31:47:80:41:F1:61:B5:3C:21:D3:F8:FC:C8:2B
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 019427488211EF689D148B46D28FBB3000ED
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/0EYHloNNMUeAQfFhtTwh0_j8yCs.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19551
IP address blocks: 80.244.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:82:11:ef:68:9d:14:8b:46:d2:8f:bb:30:00:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0460796834d31478041f161b53c21d3f8fcc82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:a2:d9:d1:90:07:ff:5a:d5:c9:29:83:b1:
13:dd:71:66:15:1f:dd:f4:75:eb:81:64:1c:c2:e6:
37:be:42:9e:c5:13:0f:e9:81:a6:30:28:b4:44:c6:
04:bb:7c:fa:97:4e:7d:6f:ca:97:3a:23:e7:6c:8a:
63:87:c5:e8:29:54:ca:89:20:16:2c:3d:b3:d7:d2:
7e:36:d4:4d:51:74:48:0a:7f:87:7b:e7:a5:06:6a:
a2:a4:55:32:5a:dc:38:4e:bd:d9:28:e3:d3:b2:6c:
76:d2:40:35:54:0a:50:ba:18:d3:fd:4b:00:64:77:
f7:b4:76:92:0c:94:9b:c9:32:7d:9d:f9:4b:76:c6:
36:0b:d1:9f:5d:74:15:2c:8c:45:69:9f:98:d5:72:
f0:69:c6:5b:a0:6c:f6:4c:ef:c1:29:fe:64:7c:11:
b5:a4:0a:25:5f:ac:cc:a6:f7:0b:01:ab:6c:9f:c3:
61:b7:81:e1:fe:9f:21:51:a8:05:bb:ca:85:a8:c4:
70:17:c6:da:4b:3d:c5:7e:00:45:da:e2:f1:a2:d6:
10:89:fb:12:b4:ca:43:aa:20:b8:3b:7f:83:08:5b:
5c:e9:bf:42:b5:c3:b9:71:b6:98:05:0d:fb:7c:be:
e0:fd:c6:f4:e0:a7:98:b1:3c:99:e8:7a:c8:77:f9:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:46:07:96:83:4D:31:47:80:41:F1:61:B5:3C:21:D3:F8:FC:C8:2B
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/0EYHloNNMUeAQfFhtTwh0_j8yCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.170.0/24
Signature Algorithm: sha256WithRSAEncryption
11:cc:94:5a:28:e7:c8:6d:c0:0a:84:7e:80:e6:41:64:82:c2:
cc:9d:b6:90:2e:7b:1a:8e:92:32:c0:4e:f6:5f:5a:ed:7f:d7:
74:c0:05:ad:f7:74:e2:4f:2a:b1:ee:06:cb:5e:d7:d7:43:8a:
13:7d:a5:fa:9f:90:2c:5e:97:fb:69:fd:63:10:9d:03:b8:00:
27:c1:ba:85:1d:dd:f6:37:53:0d:c1:55:61:da:b1:05:ac:e2:
0e:0c:a0:8b:ee:10:fa:45:3f:9a:d4:80:de:3b:c4:09:38:d8:
38:78:79:0d:c8:bd:75:d1:c8:90:03:72:bc:11:20:84:10:fb:
e8:38:b7:7f:f5:6c:4c:85:58:b4:a3:89:de:2d:7c:b9:4b:cf:
f6:52:8c:29:66:89:05:68:aa:e1:43:6a:79:26:ba:f3:e6:01:
5e:04:e8:44:08:35:4d:c7:ba:fa:8a:16:90:4c:a7:e1:c7:ff:
ef:4e:a7:62:c7:71:af:8b:44:87:82:ce:a7:f1:07:14:40:2a:
12:90:29:17:22:14:9a:d3:f7:a7:ea:2e:9c:82:a4:a3:52:aa:
91:69:21:ab:20:09:b1:c7:67:e9:8d:2d:20:4b:94:3b:ea:c0:
6c:b2:85:ed:bc:34:a0:b3:76:36:27:7e:c7:c9:a0:13:e8:12:
13:2a:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:24 2025 by rpki-client