Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/zIH5sPlMx70fyP1Az3Csaj7WyTI.roa
File: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (raw, json)
Hash identifier: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=
Subject key identifier: CC:81:F9:B0:F9:4C:C7:BD:1F:C8:FD:40:CF:70:AC:6A:3E:D6:C9:32
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 0194228DA5E3EF5B300F34CB8DBFE1D86E1A
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/zIH5sPlMx70fyP1Az3Csaj7WyTI.roa
Signing time: Wed 01 Jan 2025 15:48:15 +0000
ROA not before: Wed 01 Jan 2025 15:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3276
IP address blocks: 80.79.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a5:e3:ef:5b:30:0f:34:cb:8d:bf:e1:d8:6e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 1 15:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc81f9b0f94cc7bd1fc8fd40cf70ac6a3ed6c932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:1d:76:34:66:5f:8b:6c:6e:2d:92:54:07:
03:cb:b9:5d:e0:88:ef:5f:a6:11:17:53:59:73:f7:
0a:79:ab:b1:31:83:09:11:4a:62:81:0f:b0:51:d2:
b5:33:a5:3a:c8:b7:80:4f:d2:6a:a9:73:d2:63:48:
f9:b4:05:1d:29:dd:f2:04:d3:4f:34:d2:f1:6a:cb:
4c:7a:75:e3:96:8f:46:38:74:2e:bc:39:09:1f:bf:
3a:8a:ad:5d:66:ce:ba:b5:68:4e:2b:7c:51:08:eb:
65:cb:95:74:a6:3a:42:84:8d:94:6e:b8:1b:8b:19:
25:1c:77:21:ff:1d:58:8d:00:7d:0a:68:4e:bd:d7:
b7:c5:22:3e:c0:53:f8:28:4c:2c:af:f7:38:cc:e4:
94:85:c9:5b:8d:5f:4e:3b:60:1d:2f:e6:5b:ae:02:
47:8e:24:6d:64:ef:4e:1b:2a:99:47:dc:25:47:f6:
bd:de:41:4e:13:d6:95:1c:0e:0f:80:2c:c6:37:67:
99:bd:a4:5f:57:11:dd:3e:bf:36:11:64:b1:92:ea:
db:65:df:50:e6:10:a9:76:ad:5b:f5:9f:d0:f2:58:
d7:a5:66:44:a4:33:4c:61:e1:3b:a5:28:7e:0e:38:
eb:f2:32:c7:f0:f9:62:e7:17:61:65:35:72:11:e3:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:F9:B0:F9:4C:C7:BD:1F:C8:FD:40:CF:70:AC:6A:3E:D6:C9:32
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/zIH5sPlMx70fyP1Az3Csaj7WyTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.77.0/24
Signature Algorithm: sha256WithRSAEncryption
45:59:5c:9a:0f:1e:ec:91:6f:28:d6:49:14:63:ec:0e:48:d4:
e4:0c:b0:3d:a4:0b:ce:27:3c:34:7a:b2:08:3d:c2:e2:82:3a:
2f:24:a4:f2:61:0a:3a:3a:eb:d3:04:8e:bf:29:d1:8d:af:e3:
54:11:4e:38:6f:a3:7f:5a:78:6a:9e:b3:8e:6a:25:6c:cf:c6:
8d:c0:97:95:3d:38:89:dc:ea:06:9e:8a:92:ef:3d:26:b1:d7:
df:df:10:35:10:ff:22:d1:ca:5e:40:e7:aa:77:33:1e:67:35:
fe:85:30:80:16:69:cd:45:cb:25:f0:87:7b:bb:9e:fd:fd:41:
09:39:15:19:fb:00:7c:0a:5e:97:29:d9:45:49:23:f4:17:2a:
fc:de:8f:b1:76:f8:c3:70:4c:7d:0b:59:3d:6d:51:61:4f:ab:
ee:8d:8e:53:2b:53:4b:6b:07:3c:6c:30:b0:0e:e4:06:b5:7f:
ca:05:d8:75:82:24:f4:69:1b:d5:83:74:ec:c8:7f:39:5f:8e:
85:22:f9:9f:4f:d2:e5:5b:b2:86:40:26:a4:d3:51:5a:cb:32:
c2:a7:bc:af:ce:a5:ec:19:05:67:24:20:8c:7d:17:f7:45:02:
29:b4:a7:d3:af:bc:b7:d9:19:ea:00:b6:bc:48:02:6e:d3:46:
b1:3e:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:42 2025 by rpki-client