Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pN33nzHnjGxKZv44iybp1-T84SM.roa
File: pN33nzHnjGxKZv44iybp1-T84SM.roa (raw, json)
Hash identifier: uJ70fChN6NCgd5ZUGB9bhsEWhZ/FZNaFJMjbASlflgg=
Subject key identifier: A4:DD:F7:9F:31:E7:8C:6C:4A:66:FE:38:8B:26:E9:D7:E4:FC:E1:23
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0194214419C89D709F5777174448078AF75C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pN33nzHnjGxKZv44iybp1-T84SM.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214727
IP address blocks: 80.242.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:19:c8:9d:70:9f:57:77:17:44:48:07:8a:f7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ddf79f31e78c6c4a66fe388b26e9d7e4fce123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:27:39:d3:22:c1:a4:f0:e5:24:d7:31:b5:
f9:16:e8:33:97:82:b9:19:fc:e0:60:41:eb:d9:59:
8a:97:ae:cc:f5:96:1d:6e:90:e0:aa:fa:b5:e2:9d:
8c:9e:d7:e7:12:8e:24:03:3a:86:64:db:de:eb:f5:
b6:d8:e8:ce:50:6b:67:1f:b5:63:fe:57:15:5f:b4:
1e:36:b7:74:05:94:54:6c:a2:dd:46:38:3e:19:c8:
36:39:03:be:99:f6:f5:bc:32:a1:16:bd:d0:3b:ef:
96:b9:11:04:a4:27:52:93:01:e2:04:3e:28:7e:59:
62:f4:6f:d1:d9:81:30:91:13:b8:71:ea:14:d4:81:
78:0a:ea:8b:6e:20:97:42:07:bf:eb:a2:2c:e6:6b:
ee:00:93:2b:10:ea:74:27:a6:c1:82:b9:c5:c3:09:
2c:15:88:e5:89:c5:69:5b:df:c6:2e:08:a5:61:fe:
5f:bb:34:ef:70:18:3d:b9:2a:a9:be:73:20:5d:fb:
c4:9a:94:1f:33:b9:66:9c:9b:af:65:fb:0a:c5:51:
96:2a:1f:38:60:a9:a1:da:83:60:42:74:17:90:32:
ac:41:a5:a4:31:28:83:a7:20:6a:1b:1a:0f:39:ce:
15:f4:5b:81:65:c9:29:e8:24:29:c9:a1:b9:a9:b4:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DD:F7:9F:31:E7:8C:6C:4A:66:FE:38:8B:26:E9:D7:E4:FC:E1:23
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pN33nzHnjGxKZv44iybp1-T84SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.52.0/24
Signature Algorithm: sha256WithRSAEncryption
79:9d:86:b2:2e:03:62:9e:04:a7:50:9e:e0:04:02:f1:b3:f8:
64:df:cd:de:ae:9d:cb:0b:27:ba:5a:4b:6d:0e:e7:0d:c3:48:
4d:0c:0d:54:f0:6e:7b:b7:8b:f7:7b:94:22:ed:5a:d1:fc:3f:
84:10:d6:27:8c:75:45:b9:12:b6:bc:a3:13:24:0f:6c:33:ee:
23:ed:0d:eb:cb:5e:be:d5:95:45:32:63:8b:60:5d:d3:e3:05:
ca:b9:d6:b8:91:18:96:9b:8b:4b:de:d6:b5:3b:c3:af:84:85:
f8:68:80:38:fa:49:61:4a:c3:4b:5b:45:ca:8c:02:59:86:4f:
9d:ee:01:b3:4f:b0:c4:a8:0a:ca:2b:69:78:f0:8c:26:b1:18:
ac:ba:ef:5b:44:45:88:1e:1a:56:be:97:aa:88:50:bf:e1:ba:
69:40:a9:2e:f1:d9:ca:30:80:d7:3e:c1:c3:71:f0:26:60:cc:
48:36:83:ba:0a:cb:55:3f:16:9a:4c:cd:8b:98:97:78:1c:ea:
15:cb:41:a0:67:6f:5b:6a:f1:0e:80:98:c3:e8:99:be:96:d1:
76:2f:ee:4c:ea:06:fc:05:db:64:d7:e6:2a:85:a8:fa:db:20:
45:cb:8a:6d:87:f8:a2:89:f6:ba:66:88:ab:3f:24:86:fc:44:
34:ed:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:29 2025 by rpki-client