Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ijaEBGBM7o1seGP9ZFryQWjDWk4.roa
File: ijaEBGBM7o1seGP9ZFryQWjDWk4.roa (raw, json)
Hash identifier: Pjmjb1/h0AeL+KxQ/QOIKyfX0TnoNPhenlbIfi1Wt9Y=
Subject key identifier: 8A:36:84:04:60:4C:EE:8D:6C:78:63:FD:64:5A:F2:41:68:C3:5A:4E
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA028F6DA2A746803E7377438AABBD
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ijaEBGBM7o1seGP9ZFryQWjDWk4.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57045
IP address blocks: 80.76.41.0/24 maxlen: 24
185.177.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:02:8f:6d:a2:a7:46:80:3e:73:77:43:8a:ab:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a368404604cee8d6c7863fd645af24168c35a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:46:47:ff:d5:a1:c7:b2:c8:0e:bb:3c:dc:
31:41:5e:af:6e:f3:bb:74:c6:10:d9:c5:05:6e:e5:
a2:3e:22:33:53:db:b4:64:10:fb:e6:07:01:7c:80:
95:17:44:19:50:b8:77:4e:1f:68:f5:ad:fa:ea:dd:
ed:ae:ad:da:89:73:c0:6c:a0:09:38:85:b6:31:44:
6c:18:db:ef:8d:ff:e6:c0:f4:a5:02:56:59:ff:ad:
66:32:9b:e2:3f:81:30:b4:5d:ea:dd:1b:35:a0:9a:
1a:e8:0a:89:d5:9d:fa:eb:f7:72:b6:1c:0c:99:7e:
b5:cf:f1:82:3c:5f:f1:3d:62:09:5c:5f:83:d9:a1:
45:eb:55:98:ef:fb:61:e7:ab:61:c5:64:4e:df:6a:
04:a5:09:a7:26:4f:f1:3e:15:b7:54:99:1c:65:19:
e8:f7:55:23:6c:54:d6:35:b8:1c:20:20:a4:4f:0e:
4d:55:b8:0e:ab:23:c7:df:60:ae:fa:d9:06:43:c4:
9d:7b:40:0b:ce:bb:cd:81:7e:f1:dd:ca:ba:1b:d8:
ab:78:55:03:36:4b:12:81:bd:5e:a8:0d:f7:b5:5d:
ed:f0:ca:94:ac:9a:c9:02:61:8c:79:91:90:1f:4f:
bb:dc:80:01:f5:8a:8a:cb:47:29:4a:04:e9:31:c0:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:84:04:60:4C:EE:8D:6C:78:63:FD:64:5A:F2:41:68:C3:5A:4E
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ijaEBGBM7o1seGP9ZFryQWjDWk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.41.0/24
185.177.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:1a:49:53:14:f1:dc:2e:88:51:55:a1:7a:5b:16:d5:d8:cf:
87:d3:35:7a:19:a5:15:9a:02:08:af:10:47:d1:47:c1:97:7a:
83:a6:a4:db:c1:d1:9d:15:a7:9c:26:d7:5c:93:77:72:a5:59:
75:9b:42:93:a0:c2:a8:1e:49:3c:b5:27:d8:b1:a4:15:f6:76:
a6:ad:12:45:64:2f:55:0a:5c:ad:2f:45:95:8f:55:e7:f0:62:
01:40:8f:bf:67:df:0c:f1:29:dc:6c:17:d1:aa:72:6a:e3:f8:
23:6a:18:0c:c7:ce:44:be:8a:80:05:6d:be:43:1d:2c:0e:d4:
85:ee:e3:75:74:23:0d:2a:da:9f:91:ca:ce:dd:cd:00:9e:30:
0d:5b:49:9c:c8:ef:32:97:ce:e4:41:f2:70:83:2b:6d:47:44:
bc:aa:bf:03:11:db:4d:09:8d:88:09:9f:4e:15:15:13:12:13:
16:50:57:af:2c:dc:e2:0e:71:3d:87:d1:fa:ae:bf:32:80:60:
00:35:ec:c7:31:95:b7:13:70:ad:44:c9:e6:8c:67:c1:d3:af:
10:6d:43:37:4c:33:3c:0c:f7:ec:0e:47:5e:52:bc:1d:ee:e0:
be:7d:b1:a2:ad:72:db:90:a7:3b:ad:98:07:ac:a0:14:e2:97:
3c:92:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:04 2025 by rpki-client