Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/W1OC8DXA-JBLcfhFPFVeaJnmF2M.roa
File: W1OC8DXA-JBLcfhFPFVeaJnmF2M.roa (raw, json)
Hash identifier: Bn11GLaQo8vWxTsyNwP3g7O7jm760Wf0FQskPZIbPmo=
Subject key identifier: 5B:53:82:F0:35:C0:F8:90:4B:71:F8:45:3C:55:5E:68:99:E6:17:63
Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial: 0194228DDD65DFCE8AEC16BE561EED06FB94
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/W1OC8DXA-JBLcfhFPFVeaJnmF2M.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24713
IP address blocks: 80.248.160.0/20 maxlen: 20
81.22.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:dd:65:df:ce:8a:ec:16:be:56:1e:ed:06:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b5382f035c0f8904b71f8453c555e6899e61763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:d6:13:c8:47:ed:80:ed:d4:b1:25:72:ac:
6f:56:23:7b:c7:b7:43:00:24:9d:58:01:ee:84:05:
31:9b:74:be:80:30:f8:a9:b6:03:64:e8:42:44:a7:
12:db:7a:4b:fe:7e:83:cb:87:10:30:1b:40:dc:22:
3f:0b:68:df:b7:f1:ce:3c:ca:ca:46:76:7c:17:5a:
fc:62:30:af:c6:2e:18:24:21:0c:e9:9e:79:63:49:
5f:e3:c6:93:0f:5a:af:01:fe:7d:b0:82:79:e2:13:
c8:41:74:6c:bb:7c:e1:52:e2:f2:b9:0e:53:5c:c6:
9e:d8:fc:18:d3:e6:fa:96:2d:2a:49:87:3f:46:0e:
c6:7d:04:21:c2:4c:d0:0b:52:cf:51:1c:f2:32:8f:
ff:37:b9:10:b2:2c:22:95:22:a8:56:e3:8f:9d:8a:
a1:ce:a1:00:4f:bb:d2:d1:73:57:d3:2c:d6:52:b0:
a7:45:2e:93:b1:16:5e:85:0a:ce:14:c2:e8:36:2b:
94:27:bc:26:ee:dc:38:51:25:85:87:36:32:97:52:
11:71:3e:1c:99:91:48:4d:2b:e4:7f:87:86:61:89:
27:50:75:a7:08:2b:e7:af:c6:19:a1:91:92:bf:48:
56:22:2d:da:61:b0:f6:6e:76:c3:26:c1:ea:a4:3b:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:53:82:F0:35:C0:F8:90:4B:71:F8:45:3C:55:5E:68:99:E6:17:63
X509v3 Authority Key Identifier:
keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/W1OC8DXA-JBLcfhFPFVeaJnmF2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.248.160.0/20
81.22.160.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:ac:2f:74:bd:9b:0a:e7:bb:a9:a3:90:63:c1:48:53:3e:e9:
3d:d9:36:ed:a8:77:5a:84:c2:ef:71:24:2e:21:40:12:31:d4:
c3:ab:40:bb:5b:06:bf:9f:57:83:c1:c3:bf:11:71:90:40:d0:
5e:5c:90:33:2c:69:3d:9c:77:6a:42:1e:fa:8a:ec:cc:a6:f2:
3d:88:a2:56:86:54:83:ef:5f:16:c4:7b:98:f8:f9:7d:83:79:
1d:e0:82:d3:09:91:e3:17:8a:d7:65:25:0d:5b:97:11:44:88:
ee:c2:df:65:27:10:0b:ab:e5:7f:ed:5a:14:dd:e1:85:8f:38:
6f:6f:e4:bc:20:2c:af:32:1c:9b:74:eb:5f:53:06:a5:d4:3a:
c9:26:a0:d1:8b:19:06:73:c8:01:44:07:11:92:18:5e:b0:bc:
22:bf:41:65:1d:0e:47:8e:d3:f4:78:ae:86:16:52:2d:90:a8:
d2:56:13:07:17:05:66:22:77:0d:0a:81:dd:e3:41:07:0c:02:
f4:56:10:29:c8:57:f9:74:60:91:8e:34:c9:c5:ae:b2:03:3f:
86:77:05:2b:de:85:e0:86:ca:eb:cc:15:3f:f6:f9:32:fb:e0:
96:35:25:d3:37:b1:e6:d0:db:59:46:29:90:ab:15:6f:d8:62:
3d:b9:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:41 2025 by rpki-client