Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa
File: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (raw, json)
Hash identifier: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=
Subject key identifier: A3:EE:7C:33:43:A8:BF:66:59:CF:E4:65:D5:3C:B0:6B:D5:2F:77:8D
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019420685D81A4A70A4A69DAC8B18DDF56D2
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21390
IP address blocks: 80.92.230.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5d:81:a4:a7:0a:4a:69:da:c8:b1:8d:df:56:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3ee7c3343a8bf6659cfe465d53cb06bd52f778d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:95:f9:5e:ed:d3:44:e9:15:70:68:a5:ed:
60:30:bd:e2:63:7e:b3:3c:8d:6b:bf:04:7c:c9:4a:
33:21:5b:20:54:0e:26:35:ce:d8:8f:65:f6:b3:cb:
0e:17:f3:e9:b2:40:39:c2:0b:03:fe:ad:8f:7b:be:
72:21:7b:5c:fd:35:a4:41:41:60:b5:b4:ae:1e:59:
13:24:75:b7:29:1f:f5:ff:1c:58:6c:9d:13:19:70:
db:1e:11:d4:00:46:82:1a:0b:21:58:89:96:02:e4:
dc:e8:11:53:b4:48:4c:4d:f2:a2:d0:66:57:07:41:
80:ea:c4:6c:cc:b6:b7:ad:2b:c6:30:d5:25:b0:fe:
c4:fd:f2:91:a8:4c:9c:af:28:e1:95:b4:f8:8d:ae:
16:96:5c:83:80:bc:06:aa:d6:d3:ad:4a:f7:68:93:
73:03:69:6f:9e:01:69:95:08:6e:e3:e9:c8:30:9c:
fd:14:29:41:61:4d:ca:f8:86:43:be:07:63:b3:8f:
10:bf:d7:f2:f0:27:40:eb:fe:1b:8b:d6:ae:09:7f:
32:60:fe:ad:1d:42:3f:77:68:cc:1d:69:14:54:14:
04:57:07:b0:0b:9a:26:c2:a5:ac:83:23:4b:cf:b8:
ee:e0:5c:d1:6d:68:54:20:cf:a7:2d:93:23:3e:cf:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:7C:33:43:A8:BF:66:59:CF:E4:65:D5:3C:B0:6B:D5:2F:77:8D
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.230.0/24
Signature Algorithm: sha256WithRSAEncryption
22:9e:41:78:0f:c2:ae:cd:5e:a7:74:23:2c:59:60:ba:b7:1e:
59:2b:a8:44:74:6a:f8:71:a9:b1:2e:17:37:14:cf:ec:8f:23:
77:ce:0b:22:bd:cc:5f:92:09:21:8a:9c:7a:db:a7:d3:77:a6:
f5:ee:0e:5d:bc:a5:0c:16:be:13:52:0a:64:7f:83:53:f8:77:
ee:e2:c0:37:e6:d9:36:1e:17:7e:42:d4:13:94:95:67:1b:bb:
6c:30:d4:e4:88:83:42:5b:cb:87:c2:cb:45:57:b7:55:79:bb:
72:74:51:b8:7b:93:01:9b:c6:d2:7d:fc:a0:f6:4b:10:52:1b:
39:4a:be:d5:4e:d8:f1:7d:22:9d:68:ef:9b:0d:e8:df:ea:7f:
b3:90:14:43:35:3b:36:04:8e:f6:ee:54:ac:5f:f6:bc:b1:e4:
e6:47:09:6b:2d:c8:9c:22:84:75:7c:f3:ed:b1:b4:07:d8:4c:
3b:c3:bf:0d:46:58:a9:6d:11:7e:aa:1c:b5:ba:ed:b7:f1:3e:
c6:c8:43:fd:1b:6c:ae:21:b5:e7:bc:a7:6a:b0:5b:4f:a9:8a:
39:c9:7e:86:c4:55:f6:1c:b1:be:c6:0a:5e:94:7d:5c:21:9a:
a6:63:3a:7c:50:9d:5e:8d:5f:b6:7f:60:37:3c:9f:7a:09:c0:
1f:57:02:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:48 2025 by rpki-client