Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/hZOTpFRy13nYnktswcCNkeUCTr8.roa
File: hZOTpFRy13nYnktswcCNkeUCTr8.roa (raw, json)
Hash identifier: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=
Subject key identifier: 85:93:93:A4:54:72:D7:79:D8:9E:4B:6C:C1:C0:8D:91:E5:02:4E:BF
Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial: 01941F8C771CCCE266936E052C59339760CF
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/hZOTpFRy13nYnktswcCNkeUCTr8.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38478
IP address blocks: 80.91.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:1c:cc:e2:66:93:6e:05:2c:59:33:97:60:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859393a45472d779d89e4b6cc1c08d91e5024ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:37:f4:73:a0:7d:b5:f9:5e:ee:01:51:f8:
12:06:9e:ce:6c:63:d0:6f:67:1f:8f:3e:c1:f9:0a:
d3:2e:91:24:02:b0:dc:0b:7e:32:1f:38:b1:c1:e2:
6c:72:65:aa:bc:d7:43:f2:6f:f5:4c:36:c3:46:ae:
68:d5:a4:12:7b:e0:cf:aa:14:6a:40:43:e5:39:4a:
ad:42:9c:d9:8e:d7:18:03:50:b9:c6:56:7d:66:ba:
40:38:4c:1b:98:8d:2b:3d:92:0f:0b:2e:bd:fc:20:
37:3a:93:72:ca:44:3b:54:0e:69:d6:cc:3a:33:71:
e8:eb:4a:8e:46:ea:d1:92:38:fc:d4:92:5a:a5:c6:
84:e5:5c:f2:b3:08:ee:94:c8:3c:6b:26:69:95:e4:
10:86:ea:17:8b:59:29:3d:ad:da:11:6b:8e:91:1f:
81:8c:3a:64:3c:42:1a:86:f8:aa:2c:43:7e:29:19:
a1:02:f6:88:5f:66:a3:d6:55:79:6d:a3:e4:0b:55:
7b:40:ad:58:d1:22:26:d1:1a:9d:4f:b2:3a:73:8e:
3d:79:74:0b:ac:2f:4d:a5:89:16:f1:79:87:c5:64:
71:85:89:2f:6d:5e:70:14:cf:45:83:5e:0b:4b:a5:
53:6e:6f:6b:1f:29:9d:74:fa:01:70:ae:aa:d0:46:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:93:A4:54:72:D7:79:D8:9E:4B:6C:C1:C0:8D:91:E5:02:4E:BF
X509v3 Authority Key Identifier:
keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/hZOTpFRy13nYnktswcCNkeUCTr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c8:93:e3:45:9d:21:df:4b:ac:fe:f8:1f:f2:b8:92:db:a1:
ff:b3:9f:49:9a:61:71:18:c8:67:56:b6:d3:9c:18:c8:83:37:
7e:bd:f5:16:a9:fa:db:39:d2:ef:65:97:18:0e:e8:85:38:78:
0d:c3:77:e0:0a:8f:46:71:10:d1:4c:95:9f:ed:77:d3:61:07:
2e:98:cb:72:9e:25:49:d1:73:75:27:80:91:63:a1:55:97:a0:
49:db:34:49:cc:8a:1e:56:e1:0e:3f:40:01:50:0b:cf:23:23:
64:55:06:d6:f6:98:fb:97:cc:82:ec:79:3c:34:12:dd:d6:4e:
af:50:ce:67:c2:0b:4d:c6:57:31:02:8f:f3:8d:e3:e6:b7:b4:
59:0e:98:29:ef:19:7d:18:ca:19:3d:01:a8:ba:a6:d6:ac:14:
8e:b2:bf:a5:74:dc:39:f0:79:f8:44:d4:2b:35:8b:e9:47:cb:
b5:14:49:74:d8:7f:e3:89:d8:f0:97:1d:98:f4:52:59:71:93:
af:f4:af:6d:ce:08:e9:60:5a:25:90:d9:14:1b:9c:b0:5d:5b:
3a:eb:b4:64:62:49:5d:16:87:cf:88:68:0b:cb:37:36:26:1a:
ba:43:6f:3d:77:84:54:d3:d0:c5:08:83:65:85:dd:6c:28:28:
e4:1a:f2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:03:49 2025 by rpki-client