Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/sqHnWw_DTKSgc5zNQG4iPku5PBw.roa
File: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (raw, json)
Hash identifier: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=
Subject key identifier: B2:A1:E7:5B:0F:C3:4C:A4:A0:73:9C:CD:40:6E:22:3E:4B:B9:3C:1C
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 019423D6F0BCE63A8884F9FDA84219409025
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/sqHnWw_DTKSgc5zNQG4iPku5PBw.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202132
IP address blocks: 80.241.136.0/22 maxlen: 22
80.241.136.0/24 maxlen: 24
80.241.137.0/24 maxlen: 24
80.241.138.0/24 maxlen: 24
80.241.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f0:bc:e6:3a:88:84:f9:fd:a8:42:19:40:90:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2a1e75b0fc34ca4a0739ccd406e223e4bb93c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:c4:49:21:3c:f4:9c:f9:9c:2a:a0:a4:1c:
1e:88:58:c8:bc:e7:c6:82:5a:03:83:2a:02:12:90:
73:55:d5:0d:5a:95:db:50:55:5e:1d:f4:ac:59:71:
c3:72:d9:4e:74:2c:1b:66:64:0c:b1:19:f7:69:e0:
13:bb:f0:4b:7c:9a:50:f2:da:77:79:25:ec:24:39:
db:e4:e0:68:30:ab:b5:74:67:96:ab:c1:ef:ee:e9:
b9:cb:e3:f2:38:37:d1:7e:cf:a9:55:94:de:8f:99:
85:04:96:c7:90:67:9c:75:a1:85:e1:13:e3:85:2b:
e9:bf:71:bf:d3:c1:73:ed:20:91:5a:74:f5:f7:f0:
64:7e:1a:97:5d:75:db:cb:16:44:90:8b:d3:02:a9:
f4:c3:12:4c:94:12:e2:40:42:01:8c:30:b7:a5:d6:
8c:45:9c:b2:62:a8:7b:23:82:81:91:e0:48:f5:18:
54:48:f3:b7:3c:3e:a4:8d:71:3e:1f:6d:09:ef:08:
20:e4:a6:80:dc:f7:a7:5d:d5:0b:c5:19:44:d9:01:
99:67:4c:8a:34:ed:09:e8:ff:7c:ad:4a:35:b6:ff:
1a:f7:95:3d:14:77:cd:4c:36:b0:29:82:33:db:9e:
16:f0:ee:6c:3a:d5:19:2c:b9:c2:20:db:af:97:2f:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A1:E7:5B:0F:C3:4C:A4:A0:73:9C:CD:40:6E:22:3E:4B:B9:3C:1C
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/sqHnWw_DTKSgc5zNQG4iPku5PBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.136.0/22
Signature Algorithm: sha256WithRSAEncryption
11:3d:a3:a2:a4:af:17:05:73:d6:c0:50:35:0c:53:53:da:a1:
f4:dc:63:42:57:49:72:df:9c:2d:71:f3:a5:c4:b8:1f:8e:e7:
3a:18:9f:88:5b:7e:3e:41:2d:7c:17:e8:44:79:2d:6a:a4:b3:
c9:69:84:b5:09:67:8a:9d:03:af:f3:51:52:68:3a:f1:d3:c3:
51:72:87:1c:c6:14:55:38:d8:68:72:c2:ae:82:c7:e2:c8:92:
33:00:8d:88:a4:12:85:79:c0:c0:4f:0e:6b:d6:78:c5:58:37:
f5:fd:97:7f:91:ac:3c:6a:e2:94:52:07:4b:5f:61:56:2f:72:
8c:f1:da:a6:6e:4e:c8:01:ce:d2:67:0d:75:d6:0b:08:6c:4a:
2b:e4:aa:0a:51:18:02:f5:fe:63:0b:e7:c3:c5:c0:eb:f1:36:
06:f5:21:42:c1:25:66:06:c1:9d:65:1d:df:68:d1:30:66:bc:
51:40:d8:cb:a3:67:a3:32:a1:5a:bd:b6:d2:0e:46:17:80:92:
e0:1e:09:28:be:df:8c:26:b0:d2:73:82:1d:7c:c8:9a:22:b2:
6c:1e:5a:9a:5f:ae:c9:7a:79:40:36:8f:37:61:35:22:e1:7c:
7e:52:c0:2c:de:49:4b:b0:3f:ba:16:ec:4c:e9:03:c8:34:b4:
50:4f:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:48 2025 by rpki-client