Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/fgObtEnjhGSc2Dbcv69KzOyhLQg.roa
File: fgObtEnjhGSc2Dbcv69KzOyhLQg.roa (raw, json)
Hash identifier: +AsZFMBywBZBAtd5zEwLILx86Sgs0i4z2/GivURPyZk=
Subject key identifier: 7E:03:9B:B4:49:E3:84:64:9C:D8:36:DC:BF:AF:4A:CC:EC:A1:2D:08
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 019424B3880F8752618DB0B4CD628D98D10F
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/fgObtEnjhGSc2Dbcv69KzOyhLQg.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56605
IP address blocks: 80.84.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:88:0f:87:52:61:8d:b0:b4:cd:62:8d:98:d1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e039bb449e384649cd836dcbfaf4acceca12d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:53:a9:ba:56:3d:56:fc:23:01:f7:a0:ef:
11:ff:0e:c3:37:f0:ab:31:63:57:99:9e:5e:cc:a7:
57:15:95:c8:ab:de:8a:4e:5c:09:4c:1a:53:c0:03:
84:1e:e7:be:38:28:c4:2b:06:68:13:46:b9:6d:d7:
6f:ca:49:b9:79:a0:9b:eb:a2:20:81:12:2f:f1:ba:
b9:a8:50:88:76:ce:91:82:a5:37:0d:b1:b2:62:1e:
5d:36:6d:23:2a:56:44:d9:c1:3c:69:75:82:03:18:
bc:91:ea:9b:8b:99:99:a9:b9:67:87:63:02:21:18:
d1:13:b3:70:a5:87:6e:1f:40:00:90:ed:12:aa:1b:
84:d0:7a:0e:d6:c0:78:2c:b0:a8:37:91:e7:e6:37:
96:ba:6e:86:84:f5:23:45:27:dd:6b:8b:06:ec:de:
c6:45:43:ac:91:5b:2d:fc:7d:73:ae:90:b8:c7:01:
ba:10:bd:ff:f5:96:8c:f7:49:cd:7a:64:76:12:c7:
93:a4:16:fa:ef:92:98:43:49:9b:dc:83:50:fd:27:
24:ec:22:b9:98:e9:d3:8f:1d:47:83:ac:d4:fc:f4:
cb:76:74:97:71:37:2f:04:0a:e4:82:bd:e3:4d:b3:
ac:c4:f7:20:94:8e:49:e7:8e:b1:1b:1a:68:8e:77:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:03:9B:B4:49:E3:84:64:9C:D8:36:DC:BF:AF:4A:CC:EC:A1:2D:08
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/fgObtEnjhGSc2Dbcv69KzOyhLQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.191.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f9:34:4b:8b:c2:e6:2f:ca:cc:d1:cf:fc:ad:c9:27:36:c9:
c9:af:18:29:51:69:2d:eb:c0:6b:da:af:d0:ed:53:14:9a:26:
b7:7c:7e:e6:2e:35:d0:6d:8a:05:6b:31:df:50:75:11:81:45:
80:bd:75:cc:01:8b:d1:b9:4e:c7:98:2c:8b:67:76:04:f0:8d:
dc:6f:c4:35:a9:fa:b2:ba:7d:c8:32:76:30:8f:d5:15:99:18:
44:1b:1e:19:08:8b:16:d9:e3:b9:2e:e3:61:1f:2f:ac:51:d3:
6c:03:ba:80:45:1f:8a:da:45:51:b4:6d:86:67:a6:af:d7:3b:
b4:3d:a9:7d:5a:da:8c:0c:7b:cd:0f:b5:b1:b3:c6:80:b2:74:
08:7a:c5:d5:55:02:59:cf:ec:02:31:89:00:09:cd:bc:5a:e8:
0c:57:85:f5:e9:4f:f1:29:19:a6:9b:cb:57:d9:fa:3a:96:c2:
ff:e8:a6:78:6d:4f:2d:97:6a:90:b1:fa:f5:15:4b:9f:35:2c:
49:62:09:33:20:26:81:e4:21:43:0f:38:03:e4:fa:d5:83:25:
f6:c3:e1:fa:bc:05:1c:c9:be:81:7c:3f:f1:f9:ba:0f:c4:15:
c2:0c:91:8a:6b:11:20:dc:0c:09:3d:9d:77:42:89:85:7e:51:
4a:fc:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:31 2025 by rpki-client