Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/5v-fOTRGTF9c8U7b6nzKzrj_Y0Y.roa
File: 5v-fOTRGTF9c8U7b6nzKzrj_Y0Y.roa (raw, json)
Hash identifier: VZnp6fYvw/+BPHQQcr7mdLl9tbfRb+FY6UHV9H/juh0=
Subject key identifier: E6:FF:9F:39:34:46:4C:5F:5C:F1:4E:DB:EA:7C:CA:CE:B8:FF:63:46
Certificate issuer: /CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Certificate serial: 01941F8C55E0CEDCC68BB01958CCD1FBC9FC
Authority key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/5v-fOTRGTF9c8U7b6nzKzrj_Y0Y.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 80.91.223.0/24 maxlen: 24
2a12:b180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:55:e0:ce:dc:c6:8b:b0:19:58:cc:d1:fb:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6ff9f3934464c5f5cf14edbea7ccaceb8ff6346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:23:f6:f2:23:29:1c:a3:0f:23:8e:61:e6:
1c:40:2a:8b:4b:aa:c0:69:40:66:fc:ab:94:f5:f5:
07:33:3c:70:a2:ab:6d:64:c3:3d:ca:02:c3:fb:ab:
02:ae:30:6a:5f:5d:c1:d5:fb:ad:fd:f4:7f:ed:23:
23:f0:56:6c:91:79:e7:05:c0:07:a9:79:67:82:5e:
f5:9a:00:b8:0f:3c:6e:82:75:33:92:5f:74:b8:da:
1a:94:57:da:a5:31:9d:c4:09:aa:ef:1d:a5:70:ed:
3a:12:4e:d8:8b:a4:eb:01:c6:69:00:7d:23:5b:9d:
32:d2:cf:50:70:f2:c7:2e:4a:ea:81:1d:84:b9:ae:
84:d1:41:b2:eb:0d:85:ef:71:ee:47:69:87:83:55:
dc:5e:09:db:79:3b:a7:84:3e:a6:a2:4f:e3:79:14:
ac:b7:53:fe:24:ae:45:f1:c9:9b:d0:f7:9e:41:a3:
1c:ea:d0:38:10:28:41:13:55:ce:9e:89:23:d0:d4:
8e:6a:9f:8f:ed:c7:58:6f:83:eb:36:60:8f:a1:0b:
c6:89:08:cd:b1:45:35:be:2a:d0:c8:74:57:aa:0f:
dd:dd:f6:ff:8a:af:7d:1b:7d:1c:9b:74:f0:e5:51:
bb:be:0d:06:c3:1e:14:08:fa:f0:26:af:df:2c:ba:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FF:9F:39:34:46:4C:5F:5C:F1:4E:DB:EA:7C:CA:CE:B8:FF:63:46
X509v3 Authority Key Identifier:
keyid:2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/5v-fOTRGTF9c8U7b6nzKzrj_Y0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.223.0/24
IPv6:
2a12:b180::/29
Signature Algorithm: sha256WithRSAEncryption
9e:a2:dc:36:a8:8d:73:04:1f:6e:72:99:26:45:89:02:49:08:
d3:bd:4d:b6:ad:a9:b7:8a:0c:69:e0:80:17:59:00:1f:18:94:
f3:b0:8e:e3:8c:2c:10:85:6b:a7:d4:0e:f2:51:fc:55:7d:1d:
49:45:d1:7a:7c:c7:0b:9c:5e:7a:9a:84:3f:5f:93:84:64:d4:
2d:94:fa:4b:7f:78:0b:3a:45:b0:ba:2e:f1:e5:e1:86:cf:d7:
0c:7d:5f:d7:89:6f:de:c6:32:55:30:60:24:e4:43:ee:61:24:
c2:f6:96:1a:65:54:75:08:c0:41:ae:00:50:99:23:ed:13:7c:
89:09:1d:66:5b:47:b1:14:ce:83:43:06:60:74:e9:59:d9:d9:
93:18:f9:3f:ef:9e:3f:c4:26:54:73:da:e6:72:40:07:c2:68:
29:c5:2d:b5:0f:1b:06:b6:8b:b9:ca:d0:26:76:1a:47:73:01:
d7:f4:c3:c8:aa:52:85:25:fd:21:2c:a2:b4:f7:b1:9f:ec:51:
b0:30:ac:9d:87:c8:93:ed:c6:e9:eb:52:e1:ec:2d:69:6c:cc:
df:2c:59:11:7d:d6:b4:d6:83:2f:9d:30:78:ec:8a:b8:8f:dc:
05:a6:33:c3:f5:d9:db:9a:dc:36:bc:ef:d1:cb:bc:a0:58:82:
de:4a:bf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:00:36 2025 by rpki-client