Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/uw1Qzt0lAgPJ7YrwdkE00u0jRmg.roa
File: uw1Qzt0lAgPJ7YrwdkE00u0jRmg.roa (raw, json)
Hash identifier: NACJSj54f9XKUKSbXrb0yYHYcWs6pQC8qvmkVDEJpYQ=
Subject key identifier: BB:0D:50:CE:DD:25:02:03:C9:ED:8A:F0:76:41:34:D2:ED:23:46:68
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77F11216B1ED64C06BB4A8C9008EC
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/uw1Qzt0lAgPJ7YrwdkE00u0jRmg.roa
Signing time: Wed 01 Jan 2025 21:48:32 +0000
ROA not before: Wed 01 Jan 2025 21:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35407
IP address blocks: 80.233.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7f:11:21:6b:1e:d6:4c:06:bb:4a:8c:90:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb0d50cedd250203c9ed8af0764134d2ed234668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:39:2d:ff:0b:8a:0c:73:44:6f:be:dd:95:
78:ae:72:c4:45:3b:b9:bd:54:71:6a:e6:78:50:e2:
0d:60:7a:88:b6:cd:0c:8c:12:e9:a7:e9:3f:45:10:
c3:02:47:cd:26:66:ce:30:35:50:92:26:9d:6b:1f:
cc:f5:be:47:93:6d:7c:a0:df:b1:d3:af:f2:19:62:
bf:3c:2c:2b:2e:a2:b3:02:1d:f0:bf:36:13:8e:93:
1a:bc:86:4e:a2:e1:28:e4:b9:73:10:37:a2:19:73:
fc:2d:ac:03:8c:58:ed:12:57:25:70:88:26:a1:66:
c8:96:69:5e:1e:c7:dd:b5:73:0d:01:5d:68:8c:6e:
cd:5e:40:8c:bd:4d:13:43:fd:97:d9:18:be:00:d1:
e3:1c:95:47:26:5e:03:3b:35:80:39:63:ae:e3:b9:
ab:34:0a:8e:ce:3f:fd:08:d8:47:95:f4:8d:b6:a9:
d5:53:6b:0b:d7:e6:25:a8:9f:f8:a9:81:e3:a9:25:
40:7b:82:17:b1:c9:24:5f:5f:b1:53:1f:2a:ef:df:
85:d2:3c:ef:8f:ed:dd:6c:bb:10:0f:c4:2b:af:47:
86:7c:ed:52:3b:7c:74:91:5b:2f:e5:82:6a:c9:86:
68:35:ab:17:a3:9a:4a:df:24:44:1c:e9:67:b2:18:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:50:CE:DD:25:02:03:C9:ED:8A:F0:76:41:34:D2:ED:23:46:68
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/uw1Qzt0lAgPJ7YrwdkE00u0jRmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.251.0/24
Signature Algorithm: sha256WithRSAEncryption
10:9b:51:fe:17:b4:9a:25:74:4e:a0:c2:49:95:5e:39:de:c4:
9d:bd:72:10:84:fe:a5:f2:5f:ed:64:ae:54:c4:d1:b0:8e:b9:
26:fc:45:33:0f:4b:be:45:fb:47:ea:91:23:7e:26:a8:af:61:
21:3a:01:08:08:ba:bc:bf:a8:cb:9d:e5:66:c1:fd:fd:7d:46:
b3:dc:21:dc:91:df:b3:16:53:27:45:48:b2:04:d3:ab:4d:fd:
1f:09:53:8b:36:d3:04:dc:9b:c4:8a:24:1b:8e:78:c2:58:fa:
7b:79:95:8d:57:a6:65:5d:10:92:ef:db:23:11:d3:3b:85:c3:
15:19:e9:45:29:d9:3f:d1:eb:ea:0d:93:09:2a:cc:2d:fe:ff:
86:50:f3:61:e9:35:bb:ad:e0:df:1e:37:3e:a5:47:ae:d0:c4:
c4:de:0d:79:1c:13:0f:bf:0c:96:bc:aa:3e:82:b0:c2:75:72:
65:ce:c3:a0:30:41:26:1c:47:8e:94:4b:8a:c6:98:1a:dc:0e:
de:cd:3b:48:ff:f8:f3:35:fd:46:6a:bf:c5:6a:34:e7:62:75:
f4:a3:15:63:14:90:9d:d1:c0:57:81:a3:ee:da:37:dc:5a:ff:
18:25:d6:b3:4e:76:ea:1c:42:b5:7c:cd:02:8b:f3:9e:0e:36:
87:45:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:28 2025 by rpki-client