Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/Du4r0IcScgI4YpWJ-9I9INdoB6g.roa
File: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (raw, json)
Hash identifier: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=
Subject key identifier: 0E:EE:2B:D0:87:12:72:02:38:62:95:89:FB:D2:3D:20:D7:68:07:A8
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 019420D61070FCF68A830E5D8F40CD3AA542
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/Du4r0IcScgI4YpWJ-9I9INdoB6g.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39153
IP address blocks: 80.248.80.0/20 maxlen: 20
80.253.16.0/20 maxlen: 20
109.71.192.0/21 maxlen: 21
2a00:5d00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:10:70:fc:f6:8a:83:0e:5d:8f:40:cd:3a:a5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eee2bd08712720238629589fbd23d20d76807a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:09:4d:da:62:d1:1b:c8:9a:d4:e5:6c:96:
d9:06:1a:3e:4c:be:d2:4f:5d:12:51:d2:fe:71:85:
fe:60:8c:0c:e3:df:66:5e:1e:43:22:4e:a5:62:01:
06:43:48:88:da:54:be:9c:ea:21:50:86:21:a6:95:
fe:20:fa:e7:b7:63:9c:5b:0b:64:cb:4e:2c:88:49:
a7:0d:4f:51:ad:fb:7f:94:c1:2d:a3:a3:97:c0:fe:
c6:a7:d0:91:ce:3e:72:6f:05:bc:e2:8e:60:5a:c4:
e3:a0:17:ac:ed:ac:d3:fb:fc:0c:ab:11:88:9a:0f:
ae:eb:42:f1:14:34:a9:8a:bf:b3:77:2d:48:2e:5e:
63:df:5e:e8:08:85:69:aa:9d:1b:e9:d1:aa:cd:bc:
5e:8d:23:a6:0f:8d:9d:44:83:84:65:45:96:80:68:
8d:e5:85:5c:0d:a0:9b:88:c3:64:39:8a:28:5c:f0:
3b:5d:7a:dc:66:19:33:5b:66:b9:62:cd:d4:e9:1c:
14:c7:d5:33:b9:39:05:50:a0:f9:c2:73:f2:c7:26:
c6:33:13:0b:8d:16:10:a2:3d:77:73:d8:8f:cf:78:
b7:09:85:24:54:2b:cb:fb:d3:90:d4:36:b7:5b:e5:
b2:4c:da:a2:d3:84:f9:e3:16:0a:2c:90:15:5f:bb:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:2B:D0:87:12:72:02:38:62:95:89:FB:D2:3D:20:D7:68:07:A8
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/Du4r0IcScgI4YpWJ-9I9INdoB6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.248.80.0/20
80.253.16.0/20
109.71.192.0/21
IPv6:
2a00:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
50:7d:b4:99:30:ad:b0:21:62:a9:54:7e:73:e9:06:b6:81:2f:
75:1e:ea:66:f2:27:5e:3f:e4:4c:61:21:70:d6:42:b4:9e:fb:
7a:1c:cb:74:d7:f4:9d:9a:45:dc:35:a2:a4:60:24:6b:33:31:
2e:bf:b0:a4:1d:c6:14:38:af:11:23:ae:93:dc:78:40:7b:01:
f4:75:be:55:df:a3:18:0e:95:b2:1d:9f:5c:14:7d:e0:f9:1d:
57:23:7f:af:13:85:91:c7:df:f8:ee:b4:d6:e1:fd:a1:e0:24:
4d:d4:10:56:96:f7:5f:96:5d:27:e4:f7:db:12:54:d7:ee:f3:
27:5a:b8:a7:43:71:f8:ab:20:b4:9d:21:d1:7b:51:60:3b:92:
6d:3c:d6:bb:2c:1b:29:58:fa:5d:bc:a8:41:bb:62:5d:f5:0c:
d3:11:fe:e9:41:2e:ae:43:4a:29:a4:f3:5a:19:9d:f6:d8:5c:
1e:97:b3:80:54:e8:a7:f0:3b:87:f3:06:b0:bb:3d:f6:1b:e9:
85:52:2a:f2:fb:a4:d1:f5:1d:7f:e1:6f:21:3b:eb:59:ce:75:
30:2c:05:b6:37:5d:77:3f:3c:09:b7:9c:d4:98:ef:5b:54:c7:
da:9d:2c:f5:58:c4:63:16:8e:c2:40:95:a6:38:59:54:96:03:
6b:9c:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:15 2025 by rpki-client