Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa
File: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (raw, json)
Hash identifier: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=
Subject key identifier: 7F:FD:60:D9:9F:CE:E4:08:8B:DF:25:BA:99:CC:94:12:C5:E7:55:0F
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 01942067F96663442B1EC2E0CFB6890551C7
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133499
IP address blocks: 80.240.116.0/22 maxlen: 32
80.240.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f9:66:63:44:2b:1e:c2:e0:cf:b6:89:05:51:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ffd60d99fcee4088bdf25ba99cc9412c5e7550f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:fb:2b:2c:9f:6d:f5:b1:f0:78:43:a5:c7:
9e:aa:41:1e:ca:73:17:2d:53:f6:5c:95:ef:7b:5b:
cd:52:b7:12:c4:4d:9d:0b:0d:f8:26:0c:f5:3d:44:
bf:25:89:23:3a:cf:1e:60:ae:1d:0b:f5:16:53:6e:
b7:57:3e:6c:be:79:92:ab:56:4c:c2:d3:07:be:f7:
f7:96:98:54:ec:08:44:70:50:e2:aa:64:ff:e9:6c:
8e:6a:58:1a:a2:27:66:b5:1b:d6:69:4e:1f:56:fc:
bd:61:8c:44:95:9d:e3:4e:be:84:9c:de:f2:1a:04:
87:13:b5:f3:59:ad:bb:d3:a6:1a:5f:3e:82:39:c9:
ae:d9:80:3d:f4:da:bc:8a:25:f6:c3:c1:e1:f6:dc:
e6:55:b8:92:09:03:80:fd:92:e0:3a:c8:52:b5:d6:
66:96:fb:1f:ea:5b:3f:f7:a6:1f:b2:f0:06:07:ec:
d1:66:38:93:5b:91:51:3a:61:3d:48:a8:10:58:44:
58:3b:6b:b7:53:3d:cd:8b:7b:5c:09:bf:67:4a:05:
6c:01:43:55:61:66:b0:e6:e8:c2:b4:da:3a:e9:b0:
17:15:1f:7b:14:fd:fc:03:2e:8e:be:17:d0:8c:49:
1c:fe:a9:23:cf:a9:2f:75:f8:07:05:00:d5:9f:99:
f8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:60:D9:9F:CE:E4:08:8B:DF:25:BA:99:CC:94:12:C5:E7:55:0F
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.116.0-80.240.123.255
Signature Algorithm: sha256WithRSAEncryption
42:99:5f:e5:4c:3b:c1:04:1c:b2:13:8d:4d:a1:2e:1a:f9:45:
0f:4b:e7:d6:49:7d:36:4a:95:b5:04:bd:d8:9f:68:ec:31:ab:
91:c2:32:7f:37:34:7f:fd:da:b2:d8:13:36:3a:bd:dc:c2:b1:
01:40:c0:cc:00:ca:91:d0:66:9a:b9:df:87:fa:fc:33:75:5a:
0f:31:89:50:3f:66:9f:4d:d5:b4:84:94:ec:db:55:de:87:ea:
73:2e:85:8d:10:f4:c0:a7:99:35:c0:9e:91:f7:4a:6d:5e:83:
f4:a6:39:3e:16:bd:ed:26:1a:e1:c2:63:67:e4:62:ed:85:3a:
52:e8:fc:56:1f:48:bd:69:b4:39:f3:c2:35:64:a8:8e:c0:9c:
7e:e6:2c:c6:74:f1:32:2a:33:d3:b8:44:57:f6:53:da:da:6f:
ce:1e:c3:23:e6:6a:28:69:11:be:df:75:be:e6:93:7a:55:69:
97:ba:89:8e:c3:c1:74:7c:7e:3b:4a:46:2d:d5:16:94:79:d4:
15:b0:d8:9e:81:a4:fe:9d:e3:77:eb:0a:91:7c:55:bb:d1:e0:
29:66:28:f0:cb:b9:b1:59:ee:ca:e3:2b:e0:b1:18:c5:9b:e4:
09:03:8f:5a:ca:56:0b:a1:f9:05:61:60:20:01:5e:8f:31:37:
65:77:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:58:01 2025 by rpki-client