Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/bMp6LhjX_DQYqzbuh4qqh4UVOHI.roa
File: bMp6LhjX_DQYqzbuh4qqh4UVOHI.roa (raw, json)
Hash identifier: jCA1g3hgiFCuBXGyn+3jtJrn1UnxVU+QNRS9iBmqdrs=
Subject key identifier: 6C:CA:7A:2E:18:D7:FC:34:18:AB:36:EE:87:8A:AA:87:85:15:38:72
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 01954C065B34DA961CF8A55F8245003B8526
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/bMp6LhjX_DQYqzbuh4qqh4UVOHI.roa
Signing time: Fri 28 Feb 2025 10:07:19 +0000
ROA not before: Fri 28 Feb 2025 10:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 80.254.228.0/24 maxlen: 24
185.92.169.0/24 maxlen: 24
185.92.171.0/24 maxlen: 24
2a13:5241::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:06:5b:34:da:96:1c:f8:a5:5f:82:45:00:3b:85:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Feb 28 10:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cca7a2e18d7fc3418ab36ee878aaa8785153872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:2a:aa:76:aa:62:5d:60:db:54:8b:53:7c:
99:7e:57:57:be:70:bc:14:71:f6:ba:13:d4:d4:3c:
94:81:84:a7:f8:da:d1:a4:1c:69:ba:42:14:94:62:
33:4b:d9:23:a1:4c:ca:e4:dd:98:32:70:90:ef:dd:
7e:f1:fe:bf:4f:56:aa:4f:cb:fc:2d:01:19:b9:71:
8f:1c:b2:6a:96:d5:50:1a:e7:a2:fd:ed:00:93:49:
94:ec:ea:61:44:de:be:57:59:a8:b5:64:ab:26:a9:
54:f5:be:d3:bf:42:d1:e1:e1:3f:b1:3e:83:b0:a2:
cc:a6:8f:21:d6:fd:01:2e:f6:ab:5a:0a:12:4a:aa:
d0:eb:da:4d:45:18:7a:e0:77:ed:78:e9:01:e4:d5:
46:6b:09:53:ba:04:1a:61:81:4d:10:5f:27:19:18:
97:ad:e1:aa:d9:24:0d:57:16:96:20:ff:d8:44:a3:
61:ca:9f:ae:79:ef:79:a9:97:af:fe:20:b5:8c:51:
dd:f8:dc:ac:2d:00:02:5c:7a:d4:d6:ea:d0:ea:b4:
21:3a:cd:e1:11:af:5a:3d:14:c2:35:d9:15:77:1f:
93:49:0c:08:04:59:4b:c7:e2:c5:d2:54:fb:d0:30:
d1:2c:0b:14:62:0f:62:a1:ab:0b:00:68:be:c8:97:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CA:7A:2E:18:D7:FC:34:18:AB:36:EE:87:8A:AA:87:85:15:38:72
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/bMp6LhjX_DQYqzbuh4qqh4UVOHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.228.0/24
185.92.169.0/24
185.92.171.0/24
IPv6:
2a13:5241::/32
Signature Algorithm: sha256WithRSAEncryption
d7:3f:19:db:5f:21:9d:9c:82:2f:a4:66:f8:1a:5d:e6:3f:00:
c5:d4:de:50:52:d4:f5:5c:d5:11:75:d6:38:45:25:5f:dc:c5:
82:ac:c5:b9:24:ee:8f:1a:3e:25:45:65:34:da:fc:79:f6:e5:
ae:84:9f:13:84:95:d4:cb:11:b7:e0:4d:9a:aa:96:37:c3:6b:
55:24:1c:26:81:21:bb:66:62:2e:0f:b6:50:b5:69:2a:74:d3:
d7:a0:9f:5c:7f:f8:05:70:a2:e2:f0:0b:d3:58:d9:99:3a:18:
41:85:2b:c9:f1:34:d5:8a:1a:51:fc:2c:b2:47:10:0a:49:e3:
eb:6a:4b:57:72:4f:56:41:94:07:9c:d9:04:ba:63:1d:2d:5a:
79:5d:42:c5:54:b1:c1:2b:d6:fe:d7:f3:be:cd:6c:69:31:d0:
3f:e2:5a:e3:f9:32:cf:2d:1a:5a:63:d5:cc:32:6f:18:46:89:
92:59:ab:fc:19:41:52:fc:32:28:79:e9:f6:d4:7c:71:54:43:
fc:41:77:88:62:47:92:fb:c1:41:4d:85:81:75:7b:30:92:64:
58:11:a2:04:47:b8:ba:de:fc:d7:fb:ee:90:87:bf:27:72:c3:
64:e7:36:f3:09:1b:7a:ca:52:ff:1d:87:c9:3d:9c:92:91:db:
65:b1:13:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:50 2025 by rpki-client