Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/5yD7BMGOx_QxkEbApVWEDtAyJTc.roa
File: 5yD7BMGOx_QxkEbApVWEDtAyJTc.roa (raw, json)
Hash identifier: 7HUgyfi698gsVlFHfeKtkaA7m5SlO3zRzjiuZrYZF5I=
Subject key identifier: E7:20:FB:04:C1:8E:C7:F4:31:90:46:C0:A5:55:84:0E:D0:32:25:37
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019426D8C10731CF5835BB28697FBED0CDBE
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/5yD7BMGOx_QxkEbApVWEDtAyJTc.roa
Signing time: Thu 02 Jan 2025 11:48:46 +0000
ROA not before: Thu 02 Jan 2025 11:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22351
IP address blocks: 80.73.219.0/24 maxlen: 24
80.73.220.0/24 maxlen: 24
91.232.129.0/24 maxlen: 24
91.232.198.0/24 maxlen: 24
91.232.208.0/24 maxlen: 24
91.232.235.0/24 maxlen: 24
185.87.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:c1:07:31:cf:58:35:bb:28:69:7f:be:d0:cd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jan 2 11:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e720fb04c18ec7f4319046c0a555840ed0322537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:6d:46:5f:c6:73:01:e8:84:a2:03:7b:c6:
d2:4c:1c:6b:57:8a:3c:ec:5e:eb:e7:53:c9:f9:15:
d6:48:a2:44:b8:54:1c:dc:97:c7:49:a7:27:0c:42:
eb:d1:54:41:27:c1:bd:20:72:29:6b:f1:27:ad:f2:
cd:e2:d8:99:1a:4b:8b:4c:f1:84:9e:45:19:40:b0:
cd:91:23:96:43:54:7f:e8:6b:65:78:a7:c7:20:f8:
ea:1a:c1:5b:c1:4a:23:81:29:f4:f1:34:64:e2:a3:
13:b4:7b:da:62:02:ed:1f:00:09:2e:04:cc:ce:bf:
97:22:06:22:37:13:ae:7b:db:da:91:02:78:71:dd:
09:a0:99:87:2a:33:46:75:bc:88:8f:5d:0d:88:24:
d7:86:41:e8:d3:0c:0e:8b:50:b0:af:17:73:6a:e4:
24:79:ab:04:90:ef:d5:80:58:d3:b8:d9:94:c5:16:
00:86:6c:29:18:5d:49:2a:bb:d3:3d:72:74:b7:4f:
ed:cf:f4:f7:1d:dc:53:4e:08:d3:41:6e:99:77:4d:
b1:01:f8:5c:f8:e9:18:e8:d1:37:6d:e9:5d:db:13:
91:96:ea:e5:63:d3:a4:b8:e2:bc:a6:36:1a:21:21:
a8:21:c9:ac:45:d8:5b:cc:14:dd:55:a4:09:69:54:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:FB:04:C1:8E:C7:F4:31:90:46:C0:A5:55:84:0E:D0:32:25:37
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/5yD7BMGOx_QxkEbApVWEDtAyJTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.219.0-80.73.220.255
91.232.129.0/24
91.232.198.0/24
91.232.208.0/24
91.232.235.0/24
185.87.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:97:8c:a6:35:d3:7e:ef:98:42:64:a2:3c:12:f2:1b:00:64:
db:82:61:24:f1:03:a8:27:f3:08:8a:46:42:62:0c:f2:a8:90:
e1:3f:5c:6a:96:ba:2b:a5:ef:61:66:49:57:0f:5a:d4:c2:6f:
b1:ee:d3:8c:20:af:fd:f5:06:2f:b9:2f:8e:e5:70:ca:71:0f:
c8:65:a6:ef:a3:aa:74:7a:27:d7:cb:bb:97:57:3e:84:f4:d6:
ff:9a:3f:c6:89:67:ae:05:0a:0d:7c:e3:0a:d7:df:03:6f:13:
c2:ad:06:b8:9c:3f:aa:6c:d6:d5:66:b1:2d:e7:d5:bf:a8:dc:
9a:9f:87:7d:d2:d8:df:5f:a4:54:ca:fc:5d:97:b7:f6:77:e9:
87:bd:9e:6a:a5:e3:1e:c9:ca:20:ff:5d:23:07:07:62:1e:56:
91:26:5f:b6:00:78:62:1a:be:74:13:e7:91:57:96:bc:e9:05:
a2:64:dd:f2:a6:06:4e:b2:67:16:ad:cb:b4:53:6d:ec:9f:34:
2a:23:ce:e8:99:17:be:45:34:da:3b:1a:18:c9:5b:2b:08:5a:
78:93:3a:31:33:ab:53:cb:76:8d:46:42:23:0f:a8:d5:68:b1:
90:95:39:7c:81:83:33:f7:77:bd:0a:08:1c:76:a6:9a:db:1e:
e4:4a:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:18 2025 by rpki-client