Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/a5iWXlPj_MO2yCOOIotA3vE2BHs.roa
File: a5iWXlPj_MO2yCOOIotA3vE2BHs.roa (raw, json)
Hash identifier: YnkkeQ4TwwSXXDQtqBGFEMTZk220g9eb2dKwmS2iY7c=
Subject key identifier: 6B:98:96:5E:53:E3:FC:C3:B6:C8:23:8E:22:8B:40:DE:F1:36:04:7B
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 12B8CE56
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/a5iWXlPj_MO2yCOOIotA3vE2BHs.roa
Signing time: Thu 17 Feb 2022 14:40:37 +0000
ROA not before: Thu 17 Feb 2022 14:40:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21196
IP address blocks: 80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314101334 (0x12b8ce56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Feb 17 14:40:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b98965e53e3fcc3b6c8238e228b40def136047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ef:25:86:f2:c4:5a:fc:81:e1:c5:89:bd:45:
61:f2:5a:6e:d2:51:8b:08:aa:52:a8:f6:80:60:3d:
b5:85:00:e1:aa:25:f5:67:f4:c5:35:b7:7e:57:b3:
33:c7:93:da:35:51:4a:1d:22:ec:da:df:5d:06:8b:
e3:b0:7b:e7:74:c9:b7:30:1c:5c:7e:80:6c:1a:cd:
66:76:2b:ca:06:9b:60:72:11:f5:82:64:60:3b:66:
6a:b1:bf:bb:91:80:e8:11:91:63:ca:aa:31:92:7c:
f2:b0:45:4b:0a:db:da:54:2d:ed:ad:0c:3f:65:6d:
c0:43:69:4c:bc:91:12:8c:b4:7c:0a:03:f2:5b:2f:
02:cd:13:ef:b9:c9:21:4a:83:54:2e:1c:2d:cc:3e:
78:7c:5d:61:84:d7:96:74:e9:5f:11:7d:7d:d5:e7:
7d:46:13:a4:6c:76:53:f5:a1:52:9c:0c:0b:d5:d2:
27:5a:d8:4e:37:e7:25:16:34:c1:27:7f:48:66:b1:
43:d8:81:46:34:ab:33:15:c6:1a:01:3b:eb:2a:08:
05:74:1a:84:75:27:cb:2a:e0:ff:32:53:77:45:14:
24:99:4a:c2:62:0f:d4:d2:fc:90:88:e5:0c:36:30:
35:85:81:9d:3a:a9:bd:e3:52:f6:ae:7c:22:18:0f:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:98:96:5E:53:E3:FC:C3:B6:C8:23:8E:22:8B:40:DE:F1:36:04:7B
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/a5iWXlPj_MO2yCOOIotA3vE2BHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.172.0/22
Signature Algorithm: sha256WithRSAEncryption
af:6a:09:5d:fb:58:27:d6:67:7e:11:83:f9:ba:30:aa:17:3a:
92:23:42:1c:12:26:b3:81:82:69:35:be:16:88:ad:ed:d3:16:
20:ab:7b:85:50:30:59:03:0d:c9:b7:9a:55:93:f6:7e:6b:40:
89:2b:89:41:ff:8f:b8:0f:fc:93:37:33:c0:12:d8:dc:2f:e6:
86:d5:57:0f:03:56:52:b8:3f:de:b2:ea:15:d8:74:c2:d4:73:
93:0a:a3:73:45:9b:a0:dc:32:d4:dd:7a:a7:14:0a:e7:da:58:
49:76:ea:94:e4:28:2c:cd:9b:2e:f2:ae:dd:64:93:df:dd:5c:
1b:3c:f8:26:b3:c3:23:25:e3:89:24:10:20:2c:92:72:28:0a:
19:38:dd:91:b4:84:cb:70:86:1f:4c:cc:08:20:98:d4:15:23:
d7:fc:e8:f8:ea:52:07:76:fa:5f:7e:7c:a9:87:8a:3b:ca:9c:
8e:74:83:f6:76:04:d4:7b:f5:df:fb:45:1d:ff:67:52:7f:38:
69:84:26:0f:39:cf:fe:21:72:f9:98:c0:42:c4:65:53:63:40:
0c:18:07:6f:d5:1b:85:10:19:1d:a2:84:9f:8d:95:ae:97:58:
45:75:fd:51:5c:3a:79:8f:17:63:32:a9:0b:33:27:5a:48:7b:
b1:d8:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:31:23 2025 by rpki-client