Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/7d46OTwbNs5KuUyqdxKYkS8NBJI.roa
File: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (raw, json)
Hash identifier: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=
Subject key identifier: ED:DE:3A:39:3C:1B:36:CE:4A:B9:4C:AA:77:12:98:91:2F:0D:04:92
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 01941FFA6E1E3D107F99022BB0B59D66C9B7
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/7d46OTwbNs5KuUyqdxKYkS8NBJI.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202278
IP address blocks: 80.75.214.0/24 maxlen: 24
2a13:5680::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6e:1e:3d:10:7f:99:02:2b:b0:b5:9d:66:c9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edde3a393c1b36ce4ab94caa771298912f0d0492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:a7:00:a5:07:bd:66:a8:c5:5b:1d:2e:a7:
a7:77:76:20:09:dc:9d:f5:03:2f:9e:a2:28:4d:89:
ae:ff:dd:eb:f3:2a:b3:a0:7b:a8:32:af:be:76:31:
36:33:49:52:5e:00:78:df:92:4f:79:ee:3c:64:31:
a8:d2:93:7d:09:d6:cf:0c:e0:d2:b6:d2:e6:42:ef:
a3:66:64:0b:60:71:66:65:79:9b:97:b7:3b:6a:05:
3d:23:de:51:61:d2:ad:a1:a4:55:ef:d5:44:97:9d:
eb:bc:93:88:21:8d:82:37:14:48:9b:3d:5e:60:f1:
8e:ea:d3:1a:7e:5c:e6:b8:27:97:ed:b0:b4:8a:e7:
cb:15:0f:04:4c:fe:08:eb:9a:e6:ae:0f:5a:f4:80:
f1:55:00:c5:24:db:ad:f4:a0:6d:73:6a:cc:ae:b0:
a6:39:c5:66:86:28:44:96:44:d5:ff:24:e3:c0:c5:
c9:a5:de:dd:d6:7f:5a:5c:4c:eb:77:72:c8:a0:14:
f1:d8:00:09:88:6a:42:a0:88:4c:e5:bf:db:08:f6:
3e:ec:2b:fc:c1:be:91:35:41:89:32:1a:14:8f:44:
a6:1f:a5:7b:7f:46:e0:d1:7a:1d:c4:eb:14:4b:03:
97:b4:4a:7c:36:e4:5c:54:f6:a3:54:86:e7:12:b8:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DE:3A:39:3C:1B:36:CE:4A:B9:4C:AA:77:12:98:91:2F:0D:04:92
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/7d46OTwbNs5KuUyqdxKYkS8NBJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.214.0/24
IPv6:
2a13:5680::/32
Signature Algorithm: sha256WithRSAEncryption
99:bd:be:43:ee:5e:2b:04:d7:aa:03:8a:1e:d9:be:fd:7d:4d:
70:b2:8a:bd:9b:5d:81:a0:af:75:cf:41:2e:c0:88:4f:b8:3d:
6c:32:0d:e8:3d:d5:8a:15:ae:9c:0a:ef:c1:9c:27:50:f4:54:
9d:5e:79:8d:6b:17:e1:cc:14:d1:48:8d:cd:cd:a1:4e:f4:a1:
40:9e:f0:9b:26:28:bb:33:40:08:f0:76:84:e0:6c:00:fc:66:
a8:ee:33:2a:13:51:af:11:d9:8a:0b:f8:71:40:eb:7d:13:e0:
ec:ae:9a:d1:24:2d:c4:e3:cc:20:06:d6:bd:c6:92:59:29:ef:
31:cd:e2:92:14:65:f8:7a:65:06:57:f8:a8:18:f3:14:52:e1:
ce:8c:8f:85:9b:3e:a6:3f:71:fe:b6:a4:db:fc:79:5c:a6:1f:
a5:55:ac:af:14:a2:a5:ef:f1:ac:95:7c:46:c7:f0:79:25:bb:
2d:f8:b7:17:b9:20:cf:01:82:07:5f:9f:cc:b3:cb:69:1d:d8:
fb:44:fe:60:5f:3c:f3:fa:36:e1:0c:1c:27:dd:0b:e3:f6:b5:
92:7b:81:c0:51:96:40:ec:59:83:62:0c:a4:2b:50:67:47:bc:
4b:e1:ab:75:e6:ce:94:0b:9f:b9:fb:10:99:d8:b9:9f:72:4e:
02:db:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:07:03 2025 by rpki-client