Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/i7rWRuwzlkV8xCOhfpRpRle8KzA.roa
File: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (raw, json)
Hash identifier: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=
Subject key identifier: 8B:BA:D6:46:EC:33:96:45:7C:C4:23:A1:7E:94:69:46:57:BC:2B:30
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019420685FFF7AA85772340A05930B646E0D
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/i7rWRuwzlkV8xCOhfpRpRle8KzA.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44390
IP address blocks: 80.92.239.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5f:ff:7a:a8:57:72:34:0a:05:93:0b:64:6e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bbad646ec3396457cc423a17e94694657bc2b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:5d:41:38:28:91:1f:57:a4:c7:cb:e3:40:
2d:8f:0d:63:c2:45:07:06:91:65:d1:9b:cf:23:a4:
66:70:8f:5f:03:82:1d:44:8d:89:29:fd:04:a0:b7:
ff:a2:17:7b:3d:9c:55:68:e9:41:c9:4f:b4:f8:99:
bb:3b:50:17:54:c4:ea:de:cb:6e:75:5d:e8:65:09:
ca:e6:fb:33:66:9f:cf:d4:64:3c:3d:0c:7f:9e:f6:
38:4e:f4:d9:8a:bd:c8:fc:7c:a6:d0:e2:15:b9:75:
62:c5:f6:51:04:8c:c3:81:12:37:5c:ef:0e:d4:f1:
13:12:06:dc:99:b8:a6:78:f5:9b:27:9b:f6:65:6e:
d7:90:d3:3b:5b:09:7f:0c:82:9e:a7:92:3e:f6:40:
44:24:d8:fa:b9:9a:d7:58:75:ef:6e:91:dd:73:c1:
10:7c:25:1d:cd:43:73:46:85:c2:aa:51:ab:76:2a:
e9:50:76:00:e5:8d:a9:73:ef:bf:61:ed:a9:c7:5e:
43:6e:ec:0e:d0:92:2b:26:30:a8:23:5b:58:31:d3:
0d:04:a1:b8:b3:23:8f:51:3e:47:29:42:16:bc:8f:
2a:26:24:cf:9e:9e:07:fe:50:f9:a0:16:6a:cc:0e:
77:c6:6f:22:ba:80:c4:31:bc:9f:81:2f:33:07:65:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BA:D6:46:EC:33:96:45:7C:C4:23:A1:7E:94:69:46:57:BC:2B:30
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/i7rWRuwzlkV8xCOhfpRpRle8KzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:78:ba:a5:49:31:b9:8a:b8:73:ca:7f:9b:72:d7:e8:4d:ac:
63:29:04:c5:25:43:cb:b9:2b:fb:19:cd:4c:c2:2a:0e:be:25:
39:ac:0b:c5:e5:56:23:42:22:7b:57:32:d8:73:c2:05:ed:61:
00:21:32:17:c6:eb:5f:2a:b2:76:7d:87:e3:19:f2:73:2c:cd:
6a:99:25:8a:dc:71:52:f1:6a:ac:d1:fc:06:3c:48:ea:8f:b0:
ea:30:cd:3f:d6:ab:65:be:f7:41:90:66:df:57:29:20:65:cf:
c7:e8:03:f1:3f:1f:ad:54:0e:86:84:ac:3e:9d:a1:a6:91:05:
06:db:4a:7f:22:6c:26:8f:1f:9d:13:70:a5:9f:91:90:74:8d:
f2:3c:b8:4e:17:36:e5:da:12:5c:b4:8a:e0:04:49:80:b9:1a:
05:d5:93:07:c0:48:27:15:d2:b9:7f:59:e5:1c:92:91:68:7f:
e3:a8:60:19:0c:86:c4:0f:8d:d8:1d:dd:86:cc:3d:ba:d0:57:
c6:86:f1:5e:2e:5c:e1:83:53:7e:61:e8:08:a4:84:28:cd:13:
9e:08:6b:63:8c:c2:84:cf:ea:a9:29:7a:52:06:b6:36:d0:ad:
6c:38:c1:bb:5d:65:8f:8a:41:ad:5b:18:fb:9a:6b:1a:99:26:
66:4b:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:10 2025 by rpki-client