Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/X3XOO0AA9IHJ9r_HFf1MSS-1CqY.roa
File: X3XOO0AA9IHJ9r_HFf1MSS-1CqY.roa (raw, json)
Hash identifier: afey9L/7D5Csx5TfkUjNnWgtxnVSz0PUg7mETuZAo3s=
Subject key identifier: 5F:75:CE:3B:40:00:F4:81:C9:F6:BF:C7:15:FD:4C:49:2F:B5:0A:A6
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F0D333EE35ABC352714FA6D788A0
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/X3XOO0AA9IHJ9r_HFf1MSS-1CqY.roa
Signing time: Thu 02 Jan 2025 01:48:14 +0000
ROA not before: Thu 02 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48798
IP address blocks: 80.81.60.0/24 maxlen: 24
85.254.172.0/24 maxlen: 24
85.254.182.0/24 maxlen: 24
85.254.183.0/24 maxlen: 24
185.176.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f0:d3:33:ee:35:ab:c3:52:71:4f:a6:d7:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f75ce3b4000f481c9f6bfc715fd4c492fb50aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:2a:c9:10:12:6a:92:b1:ec:c7:32:0a:a4:
91:eb:ad:4d:74:fe:59:ee:34:06:6a:6f:23:e2:ec:
ee:8a:ed:e3:74:1a:23:17:6c:24:90:94:83:a4:5e:
bf:6b:73:ce:e1:de:b7:e9:bc:6a:63:f6:f3:3c:43:
a5:93:e5:ac:ce:84:90:7d:2d:5f:06:d0:57:77:3b:
54:ee:f0:6f:d2:d8:80:5a:66:79:bc:9f:e0:4b:67:
2e:3e:77:a7:f6:07:02:20:ad:3e:81:e6:1e:9a:d3:
44:07:50:08:d5:26:03:cf:b8:55:86:1e:c4:77:32:
44:02:ec:42:ac:07:ca:10:fe:be:2e:99:cd:4e:c0:
9e:41:8b:16:32:b2:39:24:1c:09:bc:f0:f3:c5:26:
79:64:f5:d2:88:16:bf:4a:2c:3f:e5:5b:0e:7a:6b:
77:d4:69:fd:36:cc:7d:19:be:5a:a1:28:57:0f:14:
10:4b:94:3c:c7:0e:18:ca:1b:64:84:81:40:0f:c3:
3f:96:4a:81:b9:50:e3:2c:d2:5d:2d:bf:c3:e2:31:
89:6c:79:ed:ed:b9:13:f5:27:21:f5:9b:5c:dc:8e:
81:79:3d:5d:51:f5:9d:99:09:f8:c9:5e:ee:fd:e9:
35:4c:5a:17:e4:75:3f:7d:b0:cd:0c:22:f3:51:3e:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:75:CE:3B:40:00:F4:81:C9:F6:BF:C7:15:FD:4C:49:2F:B5:0A:A6
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/X3XOO0AA9IHJ9r_HFf1MSS-1CqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.60.0/24
85.254.172.0/24
85.254.182.0/23
185.176.117.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f7:f1:b1:8f:4a:08:6d:78:ca:70:2e:87:80:17:e2:8d:a1:
0a:b7:65:92:9b:bf:56:9b:05:d6:58:fd:23:9e:6d:dd:8a:63:
14:9a:2a:7c:40:39:14:10:dc:28:7c:71:ce:3e:3d:fe:43:c1:
01:5a:3f:e4:59:da:5f:b6:a6:9d:31:36:ec:43:b5:72:28:e5:
eb:47:ab:5a:37:06:de:e2:69:43:a5:c4:39:b8:12:26:06:9e:
2f:a7:f5:48:4a:18:6d:c0:3a:af:71:f8:8e:09:f8:fb:74:73:
49:ee:63:96:c3:f4:f3:00:ab:17:2b:24:11:33:31:41:e1:a1:
d9:99:fb:38:77:7c:35:b1:18:60:7f:a5:98:5d:b9:47:93:55:
36:4f:58:60:f7:ed:1b:91:cc:1e:1b:67:6f:34:be:87:f5:d5:
77:53:1f:fa:ef:db:0f:d3:10:ae:b7:c8:76:26:08:63:09:9a:
44:13:2d:da:74:75:82:13:88:49:5f:d9:33:49:62:3e:4d:da:
1a:14:21:39:f2:0a:c4:fd:28:6c:6e:6e:bb:ba:3d:9a:26:e1:
b8:8f:89:0b:8f:a0:a0:8f:a3:a6:82:fa:a6:bb:1e:28:43:85:
f0:43:47:3c:be:06:c1:15:a7:74:3a:53:ed:38:a1:90:86:59:
8f:d7:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:58 2025 by rpki-client