Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/PaT_nYM6R2ViYAgTUbxQ1NzbOSA.roa
File: PaT_nYM6R2ViYAgTUbxQ1NzbOSA.roa (raw, json)
Hash identifier: /oXQTiCemS6sXYuRjLsYunox2/Th+MYOuXrgUFHKw9E=
Subject key identifier: 3D:A4:FF:9D:83:3A:47:65:62:60:08:13:51:BC:50:D4:DC:DB:39:20
Certificate issuer: /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial: 01942826E7E4AB116D1620130DBD636A666A
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/PaT_nYM6R2ViYAgTUbxQ1NzbOSA.roa
Signing time: Thu 02 Jan 2025 17:53:45 +0000
ROA not before: Thu 02 Jan 2025 17:53:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34655
IP address blocks: 80.77.114.0/24 maxlen: 24
188.227.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:e7:e4:ab:11:6d:16:20:13:0d:bd:63:6a:66:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Validity
Not Before: Jan 2 17:53:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3da4ff9d833a47656260081351bc50d4dcdb3920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:04:01:eb:07:7b:8e:b8:14:d9:b5:01:63:
b9:84:c7:b7:93:6c:da:3d:32:f2:1d:97:65:cc:a4:
3b:ad:61:a9:c3:25:26:52:6d:1b:c6:0b:bf:e6:3b:
0e:93:6c:12:df:79:aa:7c:69:30:43:b0:92:09:46:
81:5e:cd:16:95:f6:d4:5b:d5:af:3d:14:d4:a7:d4:
05:3f:7b:dc:c6:26:52:f0:d5:83:67:8e:13:5a:14:
d4:96:c3:0b:98:54:e0:88:42:6c:63:b0:5c:d7:e8:
c3:c1:eb:00:0b:78:52:c9:9b:22:89:6f:ed:80:f8:
2f:df:f2:fb:78:3d:7b:81:ca:96:44:5f:bb:1a:b7:
93:43:65:5b:8e:85:b9:ea:f8:19:17:ab:f0:86:63:
7c:8e:73:da:37:71:6d:f4:f4:38:91:6c:76:17:21:
8e:3e:e7:94:a1:85:a1:14:a5:f7:07:e0:08:af:67:
f6:57:25:53:17:7a:45:c3:a4:c4:35:7d:72:04:e2:
c9:53:56:59:c0:58:93:a3:ad:60:11:f2:76:08:8f:
58:06:d6:5c:3a:25:f6:88:4d:a7:bd:8b:d8:7f:11:
ba:6a:ea:29:37:6a:64:f1:91:ba:30:3f:50:30:c1:
88:60:8d:93:14:68:3a:88:9a:33:62:0f:c9:4d:e6:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A4:FF:9D:83:3A:47:65:62:60:08:13:51:BC:50:D4:DC:DB:39:20
X509v3 Authority Key Identifier:
keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/PaT_nYM6R2ViYAgTUbxQ1NzbOSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.114.0/24
188.227.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2b:47:64:54:7d:96:82:15:7a:79:fe:0e:01:ff:2e:ef:10:
be:96:c0:83:f5:69:87:73:92:b9:73:30:b2:33:b3:06:29:29:
b3:cc:33:47:b1:c9:16:b2:b2:68:76:47:0e:50:2f:c4:d1:d1:
db:72:93:00:6b:49:06:ef:d8:e8:c7:f4:68:00:29:6b:84:04:
b6:cd:03:8c:b6:1c:44:85:64:72:75:1c:66:50:3a:8d:47:f6:
08:78:b2:60:f2:8d:e7:a7:04:c3:14:99:1e:0e:71:16:74:72:
34:27:78:10:77:6d:f9:ad:c5:87:97:0d:80:c7:c6:44:e1:c2:
af:c4:6e:96:ca:0b:b4:7d:3f:2d:4f:c6:78:fb:ba:e5:68:b7:
82:ed:41:a4:e6:61:5f:6d:be:5b:eb:2d:41:58:35:cb:06:5f:
0e:e7:6d:ad:9d:51:ca:d0:ff:a0:34:48:ad:ca:47:01:38:bf:
40:96:e7:ec:1f:9b:8f:b4:9e:76:67:64:ff:ba:1f:c5:1a:17:
fd:a9:c8:c1:a6:c7:48:36:88:5e:43:2e:86:bc:7d:5b:65:a6:
ff:0e:03:f9:a3:fe:de:4a:50:73:02:26:55:e9:c9:46:d4:66:
ce:22:5d:fd:ae:17:b3:b8:e9:9d:c7:e5:d9:12:de:9f:d2:93:
24:70:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:34 2025 by rpki-client