Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/8I00PdszB0BEA0F7L15RCYSGXrs.roa
File: 8I00PdszB0BEA0F7L15RCYSGXrs.roa (raw, json)
Hash identifier: jIMi5XC40219hEu2jWaX/R/11c/v1KgoG9InqbBDCDw=
Subject key identifier: F0:8D:34:3D:DB:33:07:40:44:03:41:7B:2F:5E:51:09:84:86:5E:BB
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 01942827939492EE7DEE02A8857BB3E6E150
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/8I00PdszB0BEA0F7L15RCYSGXrs.roa
Signing time: Thu 02 Jan 2025 17:54:29 +0000
ROA not before: Thu 02 Jan 2025 17:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394265
IP address blocks: 80.169.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:93:94:92:ee:7d:ee:02:a8:85:7b:b3:e6:e1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f08d343ddb3307404403417b2f5e510984865ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:4e:ce:e3:d4:af:78:60:13:f3:71:24:d6:
b4:43:d0:db:1f:c0:de:f1:61:3e:7c:f9:63:fa:4a:
2f:21:e3:2e:4c:8a:38:c0:56:1d:4f:41:86:5d:c2:
fe:10:ff:8d:ad:db:83:a0:97:69:c7:48:a1:3e:d7:
4f:46:f0:76:86:fa:09:3c:f2:74:0d:05:9d:59:09:
9c:87:4c:a4:0b:f3:37:0c:d2:6a:7a:a9:0a:2b:83:
c7:fe:63:ab:2d:95:76:bf:7c:95:c1:77:30:17:08:
32:bf:57:a0:e4:c9:11:d3:c3:7c:c1:cd:b8:97:dc:
53:7b:54:b7:7c:f4:ab:7b:12:9b:9b:e3:a0:55:05:
d0:79:b2:a6:ab:e5:18:ac:a6:ff:c8:4a:53:b9:de:
01:81:dd:02:04:ce:b8:d8:a8:fb:09:82:c4:b1:93:
b9:c7:74:d9:98:fb:4f:15:9b:3c:f3:85:b5:98:2f:
90:e4:4e:c0:1e:32:ce:f7:c8:55:36:af:60:d4:02:
c5:ae:4e:fe:3d:03:c9:3f:14:e9:ad:5e:65:e6:c6:
f0:75:db:47:f9:0d:68:52:3e:61:7f:6c:a1:13:ca:
5e:2f:43:2f:38:60:4c:1c:50:2c:1f:89:31:50:9e:
0e:4c:f4:ac:f4:78:35:02:50:ca:18:da:ec:32:13:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8D:34:3D:DB:33:07:40:44:03:41:7B:2F:5E:51:09:84:86:5E:BB
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/8I00PdszB0BEA0F7L15RCYSGXrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.169.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3e:3f:f9:a2:3a:7f:69:7d:90:1a:fe:41:9f:26:cf:3b:d3:
a2:5b:c6:fe:60:c9:44:35:ae:10:63:d5:6c:c3:9e:20:f7:0b:
34:eb:76:3a:cc:46:29:82:59:1d:5f:87:31:37:ef:2d:42:03:
6f:08:53:2f:e4:36:5b:18:30:bf:2f:d8:e6:f6:23:b8:c8:f9:
c7:1b:fb:14:9e:db:cf:d9:f6:84:2f:a2:cf:5e:ae:9d:22:4c:
74:db:59:c2:e2:14:c1:bf:34:34:c7:a1:30:88:ef:0c:53:d6:
7f:52:13:22:b6:a8:2b:66:d8:5f:f4:61:11:c4:d3:81:00:64:
59:0e:ab:c6:9a:8d:bf:7c:54:65:ec:df:9e:93:4e:43:a3:51:
13:e4:bd:ed:2e:7e:a6:24:64:34:37:db:af:cd:19:c0:e6:b8:
4d:a6:91:65:77:bb:f3:06:66:de:71:a5:93:a4:30:c0:68:8f:
aa:58:4a:d0:58:35:83:7b:28:94:6f:2a:63:5e:34:57:36:e0:
8b:d7:35:fd:0a:f9:d8:6e:a1:98:8f:9b:25:36:a8:30:29:44:
a6:ed:be:4e:50:48:7a:0f:83:36:fa:32:15:f6:e9:41:dd:3b:
d3:a4:87:3f:71:03:ac:8c:5a:f3:66:40:64:1b:4c:95:55:ac:
6e:5f:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:47 2025 by rpki-client