Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ERB7Dy7d9kFuCO_rozn-lnnqPCY.roa
File: ERB7Dy7d9kFuCO_rozn-lnnqPCY.roa (raw, json)
Hash identifier: oYSyd9Y6AcGGauxi4uT5B8e+wJTV4yjfVw3IQLffC9M=
Subject key identifier: 11:10:7B:0F:2E:DD:F6:41:6E:08:EF:EB:A3:39:FE:96:79:EA:3C:26
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA7CFDE7BE32B15A7180C1E5CBE99
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ERB7Dy7d9kFuCO_rozn-lnnqPCY.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213917
IP address blocks: 80.64.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a7:cf:de:7b:e3:2b:15:a7:18:0c:1e:5c:be:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11107b0f2eddf6416e08efeba339fe9679ea3c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:7a:84:27:84:65:e9:47:2a:71:15:3e:7e:
0f:1c:e9:0d:f3:d7:81:f7:2d:ca:96:46:f3:55:43:
ff:cb:f4:5f:7f:d5:9f:fd:d4:a6:72:d0:e3:97:74:
f8:5d:f5:9f:47:c0:d6:bf:67:c4:53:dc:91:75:30:
a2:26:c6:a9:e7:6d:d1:40:92:21:bc:7e:99:59:92:
36:ee:65:ab:6d:0a:d0:b3:a6:fa:20:76:32:63:28:
8f:81:aa:cb:87:73:4a:6e:a5:aa:ed:36:26:3c:d4:
95:ae:46:f3:14:52:cb:78:40:97:0c:90:6d:bd:c6:
0e:19:e3:6e:ba:0b:8a:54:d9:73:fb:db:06:ae:de:
66:76:8f:8c:72:e8:27:ce:ec:8f:9f:63:6a:1f:84:
36:92:15:f5:07:fc:a3:58:fc:09:b4:e4:c1:fa:91:
c4:d4:58:6f:03:3b:f6:88:60:c3:df:c2:c0:05:30:
76:82:7d:64:d4:d9:47:3b:77:85:1f:05:86:de:44:
92:eb:76:ac:5b:80:51:1c:d6:3d:71:5a:51:ae:d1:
00:83:4c:15:a1:3a:e2:07:d3:95:15:33:d1:4b:ef:
d1:0c:bb:57:b3:47:69:9c:1b:cc:39:9e:0f:4b:55:
14:a1:80:48:1c:5a:4b:52:5d:58:7d:26:40:08:4b:
61:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:7B:0F:2E:DD:F6:41:6E:08:EF:EB:A3:39:FE:96:79:EA:3C:26
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ERB7Dy7d9kFuCO_rozn-lnnqPCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a9:4a:fe:f7:35:3d:84:ee:c3:f4:66:43:f5:e3:18:ed:d7:
3e:e9:d9:0a:c8:d8:46:fb:c8:c9:7d:15:1b:35:9e:a7:0a:7b:
ce:e3:cc:bc:f1:6d:cc:bd:06:fc:5a:d3:c8:6e:06:40:ce:b2:
02:53:aa:51:7e:f8:53:04:65:e5:26:42:3d:a8:88:28:92:d3:
b9:a2:2f:93:41:62:cf:a4:07:0a:b0:03:ec:5d:9d:fb:a1:2c:
ab:15:2c:36:05:cb:69:7c:96:c1:e9:96:3a:14:35:1a:72:8b:
d9:e5:a7:12:cd:80:94:f6:b6:0f:d6:0d:f7:9e:0a:60:e1:95:
e4:ce:51:5e:89:24:82:fc:51:44:c0:2d:b1:f8:5c:51:2c:f2:
e9:4b:0e:7c:d5:be:32:05:9d:dc:a7:ce:9d:e9:ee:1c:34:a8:
6a:a6:50:19:e0:e2:4c:d0:c2:cc:83:ac:a3:3f:d5:eb:51:ba:
7e:75:45:eb:e0:fc:66:68:f8:1a:6f:8b:f2:f1:96:c0:37:91:
d5:13:2c:81:13:95:9a:a6:b4:83:b6:e4:8a:9d:74:19:f8:f5:
71:e2:96:93:b9:b1:43:e6:27:a3:4f:0d:f0:cd:44:35:06:2e:
f5:dc:2e:26:65:4d:c0:68:68:27:8c:73:79:09:c8:3d:ca:cc:
e4:03:60:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6fP3nvjKxWnGAweXL6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTEwN2IwZjJlZGRmNjQxNmUwOGVmZWJhMzM5ZmU5Njc5ZWEzYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxh6hCeEZelHKnEVPn4PHOkN89eB
9y3KlkbzVUP/y/Rff9Wf/dSmctDjl3T4XfWfR8DWv2fEU9yRdTCiJsap523RQJIh
vH6ZWZI27mWrbQrQs6b6IHYyYyiPgarLh3NKbqWq7TYmPNSVrkbzFFLLeECXDJBt
vcYOGeNuuguKVNlz+9sGrt5mdo+McugnzuyPn2NqH4Q2khX1B/yjWPwJtOTB+pHE
1FhvAzv2iGDD38LABTB2gn1k1NlHO3eFHwWG3kSS63asW4BRHNY9cVpRrtEAg0wV
oTriB9OVFTPRS+/RDLtXs0dpnBvMOZ4PS1UUoYBIHFpLUl1YfSZACEth8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEQew8u3fZBbgjv66M5/pZ56jwmMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvRVJCN0R5N2Q5a0Z1Q09fcm96bi1sbm5xUENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEAXMA0G
CSqGSIb3DQEBCwUAA4IBAQBrqUr+9zU9hO7D9GZD9eMY7dc+6dkKyNhG+8jJfRUb
NZ6nCnvO48y88W3MvQb8WtPIbgZAzrICU6pRfvhTBGXlJkI9qIgoktO5oi+TQWLP
pAcKsAPsXZ37oSyrFSw2BctpfJbB6ZY6FDUacovZ5acSzYCU9rYP1g33ngpg4ZXk
zlFeiSSC/FFEwC2x+FxRLPLpSw581b4yBZ3cp86d6e4cNKhqplAZ4OJM0MLMg6yj
P9XrUbp+dUXr4PxmaPgab4vy8ZbAN5HVEyyBE5WaprSDtuSKnXQZ+PVx4paTubFD
5iejTw3wzUQ1Bi713C4mZU3AaGgnjHN5Ccg9yszkA2DY
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:41 2025 by rpki-client