Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Om69jzfURFTvRPYXdUhJ3Rl2ef4.roa
File: Om69jzfURFTvRPYXdUhJ3Rl2ef4.roa (raw, json)
Hash identifier: zHsv2Qx4P9HuLGcOckXiS9M1hUykTxDulgHm6SC0pXk=
Subject key identifier: 3A:6E:BD:8F:37:D4:44:54:EF:44:F6:17:75:48:49:DD:19:76:79:FE
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77F5755738C55D789162B1E1B90CA
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Om69jzfURFTvRPYXdUhJ3Rl2ef4.roa
Signing time: Wed 01 Jan 2025 21:48:32 +0000
ROA not before: Wed 01 Jan 2025 21:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35809
IP address blocks: 80.233.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7f:57:55:73:8c:55:d7:89:16:2b:1e:1b:90:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a6ebd8f37d44454ef44f617754849dd197679fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:f2:9b:3a:11:b7:c2:24:b9:fe:3f:0c:1b:
37:a1:86:a1:95:64:81:d3:d1:12:13:bb:74:c0:46:
04:b4:3c:65:6f:79:3b:f0:37:3a:26:59:7a:1a:7d:
cd:e3:84:21:22:0a:99:8f:92:2a:a3:37:3d:9b:0c:
6f:1e:e0:f9:97:2d:79:ef:39:3a:f9:36:98:5c:f7:
97:71:75:36:a7:49:f8:d8:cb:de:5f:8a:f5:24:24:
e4:56:1c:3f:67:98:08:a5:02:06:25:61:c2:00:7c:
43:72:c8:5e:08:96:5d:fc:e4:3b:44:52:a0:88:89:
1e:0f:c5:3c:38:fc:89:3c:e6:69:b7:91:90:5e:b3:
08:c0:28:c7:95:3f:fe:bc:3e:68:4a:f7:dd:82:a8:
62:d2:bb:9e:d9:a4:d9:05:52:75:66:d5:ee:10:fd:
26:83:3f:ee:46:2d:40:4d:77:1c:4b:1e:03:08:7c:
97:45:74:9b:76:86:ae:27:bd:8f:b3:ae:50:8e:02:
ce:9f:c0:0c:aa:5a:fd:ae:03:b6:3e:9a:c9:e4:44:
c5:76:b1:ba:ec:2e:10:2c:9d:1c:26:99:28:7d:6d:
d8:90:02:4f:70:d2:1e:7a:67:72:8d:de:3c:4d:c8:
0f:56:19:19:56:10:6d:cd:c0:f9:8b:d0:f8:f3:17:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6E:BD:8F:37:D4:44:54:EF:44:F6:17:75:48:49:DD:19:76:79:FE
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Om69jzfURFTvRPYXdUhJ3Rl2ef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.167.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:78:82:07:66:37:dc:8b:2e:8e:43:6d:39:c1:37:c1:c8:e2:
09:27:83:56:c7:da:03:58:42:2e:b1:0f:00:99:91:38:ac:4f:
06:a8:fe:df:68:c9:80:a4:b1:ec:d2:15:39:4b:59:88:00:08:
c5:6d:23:6c:bc:73:e5:ea:a9:ad:31:b4:63:51:95:cb:62:a4:
bf:60:c3:f4:d3:c3:6c:6f:6e:e2:71:71:73:26:09:99:6a:d1:
1f:17:00:18:12:79:69:6e:29:5d:07:05:d7:6b:27:ee:a7:6e:
56:b7:02:c9:04:7b:d3:0d:3b:29:b1:54:5c:80:65:ff:72:8d:
fc:84:82:32:02:6e:9e:b7:6b:e2:62:ce:28:0b:03:6d:e4:20:
72:a1:cd:f4:c5:21:51:c3:97:83:bf:35:ac:27:c8:b6:5a:1a:
b1:91:34:43:d9:28:9d:dc:63:03:1f:78:ff:13:45:a4:1e:a9:
6b:ba:ae:8e:b9:24:f0:4f:89:bf:c7:8a:29:63:db:a8:9a:5a:
06:a3:c8:54:93:a3:79:5a:0a:a2:bd:a3:d4:5c:bf:57:22:1e:
47:21:b8:42:8c:ca:44:4d:4b:c8:13:43:84:ec:dc:c1:ac:c9:
a1:7c:30:9d:67:1e:78:c4:5a:d6:25:3b:66:19:8c:bd:94:e4:
55:8c:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:12 2025 by rpki-client