Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/n25w7ONWy79FTBTwW1Ke36N-ks4.roa
File: n25w7ONWy79FTBTwW1Ke36N-ks4.roa (raw, json)
Hash identifier: Ul6u2eDSbRtUTKVyx7zRQF8iz7tjwnKE08aw+E8W+vQ=
Subject key identifier: 9F:6E:70:EC:E3:56:CB:BF:45:4C:14:F0:5B:52:9E:DF:A3:7E:92:CE
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D788A6F923634F5685E9594B5530BC
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/n25w7ONWy79FTBTwW1Ke36N-ks4.roa
Signing time: Wed 01 Jan 2025 21:48:35 +0000
ROA not before: Wed 01 Jan 2025 21:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199300
IP address blocks: 80.233.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:88:a6:f9:23:63:4f:56:85:e9:59:4b:55:30:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f6e70ece356cbbf454c14f05b529edfa37e92ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:d4:b1:70:ad:5c:2b:3a:c1:8a:8a:f8:d7:
a4:4a:51:17:85:e4:ad:ab:db:b5:ca:88:4e:24:1c:
4d:19:c2:ad:5b:7b:3b:ac:d0:fd:ba:6a:6a:72:ce:
cc:05:e5:c8:8d:5b:ab:b4:dc:a5:9c:4a:16:6d:38:
46:dd:fc:52:2e:8f:57:9b:35:77:d1:04:9a:4b:9b:
10:7a:9b:d6:cb:5b:ef:3c:55:6d:3f:24:50:16:bf:
b8:b6:c2:81:eb:05:1d:c0:65:63:bd:68:a1:fe:2a:
81:46:ee:5d:d0:e5:fc:56:a7:68:e8:6d:a5:16:05:
cd:3e:2d:ea:1e:38:35:cb:bc:bf:ec:8f:f5:92:d6:
b9:94:66:a1:d9:c4:a8:6e:bd:62:36:a2:9e:a6:94:
44:ca:c8:b0:ca:a1:0f:bc:ea:af:48:38:c2:b2:4f:
14:20:ff:5f:b6:fb:fb:45:16:7e:2c:b3:26:ef:92:
dc:a3:bd:de:52:d0:4a:cd:69:8f:1f:cb:cd:c5:ba:
3e:87:29:36:93:c8:e7:ee:65:23:ff:85:a8:f4:08:
9c:47:42:0b:ec:b6:ca:d9:98:42:83:e9:63:75:39:
4f:08:0c:aa:43:c1:70:2f:d5:cc:af:26:12:80:f9:
ac:50:39:be:5f:03:9e:0d:2e:fc:35:03:e7:8c:b6:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:70:EC:E3:56:CB:BF:45:4C:14:F0:5B:52:9E:DF:A3:7E:92:CE
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/n25w7ONWy79FTBTwW1Ke36N-ks4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.153.0/24
Signature Algorithm: sha256WithRSAEncryption
78:04:b3:be:8d:f3:af:32:d2:96:30:6e:b8:5e:be:92:c9:c8:
14:ef:86:cf:fa:30:ba:c8:63:0b:b3:27:3a:74:ef:7c:30:a1:
ec:92:7c:fd:d1:60:56:b0:63:86:e6:6f:81:d0:68:1f:24:64:
01:8b:7b:45:a8:27:40:d5:2e:45:a5:2e:43:bf:a3:15:be:f1:
0c:0e:76:c4:19:c4:82:e1:22:88:dd:2a:03:d4:41:1f:94:66:
e6:c1:12:ad:b8:e2:70:fe:40:f2:9c:a2:b2:64:6b:f4:bb:81:
50:65:2f:0b:9f:15:74:3c:2a:79:40:b9:15:2d:6c:99:b2:89:
6e:f5:cd:01:31:94:f9:f9:e8:c6:5b:c5:a5:a5:3b:67:ab:1d:
02:82:c1:1a:59:18:0a:7c:cc:51:6f:d0:67:a8:1c:30:4f:ba:
71:2f:c6:4f:66:e7:9a:a0:6e:4d:78:ab:72:76:c9:7f:d6:b0:
47:e6:91:fb:05:56:b5:b9:d0:c2:30:7c:d0:cb:a3:6b:12:ac:
27:10:a1:3e:30:93:2f:ba:21:a5:82:91:35:fa:dc:89:0c:34:
27:d7:93:b6:65:f1:53:95:12:9e:5c:b7:d5:f0:46:62:e0:e2:
2d:60:9a:94:68:4a:4a:b9:03:14:a5:5c:c7:5c:19:64:22:d1:
ad:23:7e:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj14im+SNjT1aF6VlLVTC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjUwMTAxMjE0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjZlNzBlY2UzNTZjYmJmNDU0YzE0ZjA1YjUyOWVkZmEzN2U5MmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuHUsXCtXCs6wYqK+NekSlEXheSt
q9u1yohOJBxNGcKtW3s7rND9umpqcs7MBeXIjVurtNylnEoWbThG3fxSLo9XmzV3
0QSaS5sQepvWy1vvPFVtPyRQFr+4tsKB6wUdwGVjvWih/iqBRu5d0OX8Vqdo6G2l
FgXNPi3qHjg1y7y/7I/1kta5lGah2cSobr1iNqKeppREysiwyqEPvOqvSDjCsk8U
IP9ftvv7RRZ+LLMm75Lco73eUtBKzWmPH8vNxbo+hyk2k8jn7mUj/4Wo9AicR0IL
7LbK2ZhCg+ljdTlPCAyqQ8FwL9XMryYSgPmsUDm+XwOeDS78NQPnjLbZAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9ucOzjVsu/RUwU8FtSnt+jfpLOMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvbjI1dzdPTld5NzlGVEJUd1cxS2UzNk4ta3M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOmZMA0G
CSqGSIb3DQEBCwUAA4IBAQB4BLO+jfOvMtKWMG64Xr6SycgU74bP+jC6yGMLsyc6
dO98MKHsknz90WBWsGOG5m+B0GgfJGQBi3tFqCdA1S5FpS5Dv6MVvvEMDnbEGcSC
4SKI3SoD1EEflGbmwRKtuOJw/kDynKKyZGv0u4FQZS8LnxV0PCp5QLkVLWyZsolu
9c0BMZT5+ejGW8WlpTtnqx0CgsEaWRgKfMxRb9BnqBwwT7pxL8ZPZueaoG5NeKty
dsl/1rBH5pH7BVa1udDCMHzQy6NrEqwnEKE+MJMvuiGlgpE1+tyJDDQn15O2ZfFT
lRKeXLfV8EZi4OItYJqUaEpKuQMUpVzHXBlkItGtI36b
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:50 2025 by rpki-client