Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/7uN2APKNMZUlxFAFIqYBRSCqDys.roa
File: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (raw, json)
Hash identifier: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=
Subject key identifier: EE:E3:76:00:F2:8D:31:95:25:C4:50:05:22:A6:01:45:20:AA:0F:2B
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0194206861A383B041E38F5CE183B0DA6DD7
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/7uN2APKNMZUlxFAFIqYBRSCqDys.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199440
IP address blocks: 80.92.228.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:61:a3:83:b0:41:e3:8f:5c:e1:83:b0:da:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eee37600f28d319525c4500522a6014520aa0f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:75:e8:98:91:95:09:36:30:6f:be:2f:09:
0c:f3:74:30:f3:cb:eb:0d:12:1b:b8:0c:8a:57:59:
a0:75:a7:5d:f4:f6:2e:48:12:1d:22:13:b0:86:70:
f7:b9:58:c5:5e:35:49:d3:8c:f3:1f:e9:bc:58:28:
9b:0a:2f:9e:a4:66:8f:62:6a:7f:5c:ca:ea:04:da:
97:a5:68:64:13:8c:b6:67:c7:05:94:b3:92:ea:99:
b0:d3:de:33:ac:31:04:ca:6f:c3:c9:a6:02:a2:3f:
33:02:4d:4b:5c:39:ef:b5:7d:fb:62:65:cf:c1:93:
e9:08:2a:dd:66:66:4a:db:4b:9a:5f:1d:3b:2c:7b:
c8:36:9f:4d:a8:2e:ac:72:f0:4a:ae:b1:59:18:75:
2b:6c:2f:9e:9d:f1:04:4d:58:88:c3:0d:f9:69:b7:
12:3f:ca:21:25:30:a5:f4:db:94:57:95:c2:e2:5c:
89:c0:d6:b3:1c:0e:aa:b0:ef:8b:b3:0d:79:dd:d9:
7d:c3:14:09:24:8c:87:a0:8d:1e:d1:13:9c:1d:de:
25:e2:88:25:0f:d1:36:92:ba:ed:be:09:3e:37:f0:
2d:ee:14:d0:4b:64:21:f3:6e:e9:1d:a9:4d:18:2a:
01:1b:2c:ee:06:96:ac:ac:20:35:3d:aa:32:15:bf:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E3:76:00:F2:8D:31:95:25:C4:50:05:22:A6:01:45:20:AA:0F:2B
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/7uN2APKNMZUlxFAFIqYBRSCqDys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:94:e5:3a:02:7c:19:50:55:c1:79:13:84:d1:8c:98:ed:78:
88:7a:97:77:22:7e:ee:1d:f4:7a:af:fe:34:b8:a5:83:a0:6e:
b2:d3:fc:33:63:6a:8f:bb:08:ce:2e:84:71:35:b9:cf:b0:13:
a3:09:56:09:37:b5:43:13:b1:32:2d:f6:97:c9:1d:84:4d:fe:
e6:6d:0b:17:c6:52:a1:77:ee:64:31:e4:ce:e6:f6:54:6c:57:
51:cf:6d:52:cc:47:1a:78:37:41:16:7a:6d:63:04:7a:a0:1b:
27:cd:b3:e4:25:6d:51:48:ef:16:c7:0a:c9:77:85:11:42:a0:
31:9d:6a:2f:ac:23:6a:02:28:da:36:f3:47:2a:70:e2:b2:d5:
6a:35:b0:70:ff:d0:db:06:01:77:d2:74:bb:9c:37:8d:de:75:
2d:2a:f2:9a:db:51:c8:59:ea:1b:b0:37:75:df:5e:ed:c3:dd:
01:a8:31:a8:b4:ca:4f:38:a0:2f:32:6d:1b:b9:a5:6d:ef:66:
eb:80:b3:6a:bb:0c:60:b5:f4:a7:a5:e3:5c:8c:01:85:2c:4d:
b8:fb:69:e9:20:56:69:b2:78:72:f9:43:e5:19:7f:e5:f8:30:
57:c7:d4:d3:db:e5:a9:62:b8:1d:fa:3c:9a:f4:71:96:00:8d:
9c:ba:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:28:52 2025 by rpki-client