Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/EBhWHNZ4rCZNn1IWSdwLYfi5op8.roa
File: EBhWHNZ4rCZNn1IWSdwLYfi5op8.roa (raw, json)
Hash identifier: Mm23NNUb8U2+h1x60lLk+eDLMp0mNZmTIcfZacPFNUs=
Subject key identifier: 10:18:56:1C:D6:78:AC:26:4D:9F:52:16:49:DC:0B:61:F8:B9:A2:9F
Certificate issuer: /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial: 019427484E94AE2B29E6E81AE5DE9E264436
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/EBhWHNZ4rCZNn1IWSdwLYfi5op8.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30720
IP address blocks: 80.85.160.0/24 maxlen: 24
80.85.175.0/24 maxlen: 24
2a01:6a40:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4e:94:ae:2b:29:e6:e8:1a:e5:de:9e:26:44:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1018561cd678ac264d9f521649dc0b61f8b9a29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:4f:02:ec:4b:88:fc:46:c4:1c:46:fc:50:
95:02:05:cb:12:ea:4e:18:67:11:ce:99:f4:02:24:
19:b0:d7:dd:1a:14:ef:c9:31:5c:3e:6e:68:94:4b:
23:d4:46:78:ad:dc:6a:03:b3:7a:82:75:6f:cc:d8:
5f:94:a9:b4:59:a3:81:6e:ea:e4:62:c7:c7:56:9a:
ec:b9:c0:1c:d9:72:99:a4:63:e7:c8:57:53:2b:03:
ef:6f:aa:9a:df:b6:73:18:b5:a6:cd:da:f8:bf:0c:
06:cc:d3:aa:df:55:82:39:d9:f3:ee:ad:ef:cb:6c:
90:4e:26:e5:67:d8:3b:ed:80:27:47:18:11:66:16:
19:f7:87:46:61:a9:ba:db:3f:74:ab:1b:5d:56:fa:
70:1f:34:c5:eb:34:9a:42:de:30:56:04:10:db:c3:
5f:43:12:95:34:98:6b:67:d1:a7:41:9a:14:84:e5:
de:87:a2:68:20:73:31:31:83:ef:21:43:cd:bf:cc:
0d:aa:e8:57:a3:40:34:0c:ae:35:fc:3a:37:a6:f5:
2b:0f:39:9c:f0:a9:e2:11:75:b5:3d:ae:3a:3e:0a:
04:42:3f:55:66:8e:fe:11:2d:ec:fc:59:53:19:e0:
01:87:a0:99:a5:13:21:8c:4a:27:55:93:69:04:fa:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:56:1C:D6:78:AC:26:4D:9F:52:16:49:DC:0B:61:F8:B9:A2:9F
X509v3 Authority Key Identifier:
keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/EBhWHNZ4rCZNn1IWSdwLYfi5op8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.160.0/24
80.85.175.0/24
IPv6:
2a01:6a40:1::/48
Signature Algorithm: sha256WithRSAEncryption
33:61:42:f7:e5:96:2c:62:8e:05:e4:b4:3f:48:54:bb:c1:1f:
7e:5f:19:6b:f8:2e:e6:55:0b:88:f5:d7:32:5f:f1:16:a9:5b:
ec:7e:f5:e5:11:c3:94:0e:5b:2f:71:75:82:6f:b3:be:01:19:
3d:b5:af:e9:78:12:01:a7:8a:f5:12:af:95:34:c8:5f:2c:42:
a5:d5:ac:25:eb:54:c5:68:08:e4:c8:af:61:20:c3:d2:9c:fe:
0b:e0:34:51:60:29:85:c8:78:48:d4:f1:59:32:87:34:c0:94:
e9:c9:0d:7c:8a:6a:35:73:04:88:b7:84:4f:78:71:6d:73:8b:
7f:da:1c:37:d8:d4:89:e9:60:7e:ec:09:5b:24:db:48:b2:ad:
ae:9d:86:26:7a:63:12:19:0d:7f:81:fc:1b:bd:6d:d6:10:23:
5d:83:84:fc:4e:7c:40:cc:07:b4:a8:92:2b:9f:1c:9a:92:41:
e0:11:ba:fd:d1:4f:63:14:e7:37:09:7a:7f:2f:a3:c6:7e:5d:
93:c7:f9:ee:96:b9:39:e5:45:5e:70:e5:2d:dc:b0:eb:e9:7e:
dc:4a:fc:33:96:02:5d:7c:0a:87:a3:f0:8f:82:cd:b7:80:f3:
70:2f:97:83:b5:0b:a1:cf:fa:3f:80:32:84:01:b8:4c:55:9a:
45:78:56:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:32 2025 by rpki-client