Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/pJcYXodpDPmMRbZLo0Tatq1ioSM.roa
File: pJcYXodpDPmMRbZLo0Tatq1ioSM.roa (raw, json)
Hash identifier: reA4i3iUw1X1kJD9p6sG3wX62hmlDQuF+yso9k92RQ4=
Subject key identifier: A4:97:18:5E:87:69:0C:F9:8C:45:B6:4B:A3:44:DA:B6:AD:62:A1:23
Certificate issuer: /CN=ba443d86435578576b4231555a0ed213f522bef3
Certificate serial: 019420D5EE6E7351B9647DDEF7DE1E909A5E
Authority key identifier: BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/pJcYXodpDPmMRbZLo0Tatq1ioSM.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20914
IP address blocks: 80.76.0.0/21 maxlen: 21
2a00:ce8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ee:6e:73:51:b9:64:7d:de:f7:de:1e:90:9a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba443d86435578576b4231555a0ed213f522bef3
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a497185e87690cf98c45b64ba344dab6ad62a123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:6f:05:33:13:09:cb:88:33:1f:10:ba:19:
89:7e:9a:5a:50:0a:5c:02:03:31:49:67:9a:8c:bd:
75:00:02:8c:ec:ba:9f:32:02:c7:58:88:01:84:d8:
ae:f3:77:09:a5:aa:29:0a:9c:b9:f7:2f:a7:e2:23:
5b:54:7d:df:63:90:0a:02:2e:50:62:14:f7:3a:4b:
ba:58:e9:fc:23:ce:28:1f:95:01:1a:07:d7:bb:16:
68:8c:52:1b:d4:01:3b:4e:0f:bb:91:55:4d:eb:e6:
2e:ff:0e:99:3b:d5:63:ef:d4:3c:d5:0d:e9:e1:df:
81:36:f4:a3:5e:9a:d3:dc:4e:28:91:7a:8c:e6:cb:
3f:4e:48:a9:3a:60:bf:81:84:47:e5:0f:ea:33:7d:
1f:b3:4c:36:46:64:4e:2a:7a:d1:15:a0:3f:ef:34:
92:fb:b4:7e:62:9c:1d:d2:41:0a:66:5b:fb:c7:4c:
e4:b9:1e:75:cd:dd:71:cd:40:43:ab:de:72:53:c0:
cd:04:a6:fb:8a:54:60:96:0a:f9:4f:4d:d8:b5:61:
c1:ec:63:00:63:6f:25:f9:06:f2:40:f2:56:8c:52:
f5:a2:cd:e6:ee:2f:26:9c:16:4b:28:40:a8:0a:f0:
66:2a:10:31:ca:f0:80:4b:69:ae:f6:14:97:92:b2:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:97:18:5E:87:69:0C:F9:8C:45:B6:4B:A3:44:DA:B6:AD:62:A1:23
X509v3 Authority Key Identifier:
keyid:BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/pJcYXodpDPmMRbZLo0Tatq1ioSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.0.0/21
IPv6:
2a00:ce8::/32
Signature Algorithm: sha256WithRSAEncryption
80:54:63:a8:37:c7:53:e6:f8:c8:d1:a6:fd:bb:f3:61:d9:fd:
38:07:23:9b:ed:71:a0:28:09:66:b2:c8:0b:00:71:87:a7:e8:
5d:a2:c7:e6:75:84:32:a0:b8:6c:00:ee:1c:7a:54:04:74:d8:
1f:51:70:d0:47:fc:78:d3:2d:d2:ba:9b:5a:6e:a7:66:a5:8a:
7f:35:01:f9:18:fe:36:05:b3:61:43:a9:84:6e:6b:cf:3a:9b:
aa:5a:78:1c:e8:80:3a:ea:b7:36:ef:47:de:7d:17:1f:67:47:
a1:94:f4:14:e7:ed:bb:bf:ed:92:25:cc:22:3a:e0:d7:e9:66:
f2:ec:25:9e:ae:39:81:b3:af:be:de:13:5e:0b:eb:6a:e6:cc:
a7:3f:d4:0d:6b:c6:c8:5d:63:a0:ff:4a:e3:1f:54:f7:83:c1:
86:69:3e:8d:23:9d:ee:5d:1a:f6:52:a8:fb:03:c6:d0:88:8b:
64:41:b0:de:12:7b:c7:40:dd:45:43:7a:91:48:c5:27:63:12:
78:33:6f:32:1d:40:3e:4e:4c:2a:91:f5:2d:5a:8b:64:2f:d9:
b5:16:47:57:a7:9f:c6:6c:1f:28:46:41:eb:5b:1c:e5:b1:b2:
6f:8c:f4:6f:04:85:20:0a:ce:b6:11:f4:83:62:22:e6:6b:16:
dc:02:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:24:43 2025 by rpki-client