Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/RTkmkNiaF4qMZtlUnnCXs8j2Uz4.roa
File: RTkmkNiaF4qMZtlUnnCXs8j2Uz4.roa (raw, json)
Hash identifier: vl+4xCPXpGUni/jcI0T4WydcImVmhjMnOzOiGTD/SYU=
Subject key identifier: 45:39:26:90:D8:9A:17:8A:8C:66:D9:54:9E:70:97:B3:C8:F6:53:3E
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 0194258F569AA4CBAF6F7B966374F4B06E0F
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/RTkmkNiaF4qMZtlUnnCXs8j2Uz4.roa
Signing time: Thu 02 Jan 2025 05:48:58 +0000
ROA not before: Thu 02 Jan 2025 05:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198504
IP address blocks: 80.84.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:56:9a:a4:cb:af:6f:7b:96:63:74:f4:b0:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Jan 2 05:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45392690d89a178a8c66d9549e7097b3c8f6533e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:54:b4:ac:a1:50:7c:f5:17:37:e8:41:e6:
e5:82:21:24:b6:f6:6f:26:4a:52:a5:b7:2f:e4:f8:
c9:80:c5:55:de:ba:b1:bc:cb:87:e7:92:b8:33:b1:
73:a0:f0:e4:56:4a:e3:3d:fe:09:e9:c8:dd:dc:8f:
64:b1:93:e6:59:0d:55:02:b2:1b:67:79:20:70:63:
10:25:40:aa:3b:a6:8f:8a:63:71:b4:7c:d2:f6:c1:
6d:33:c8:99:ca:ba:88:3d:d5:7b:89:9f:7a:aa:3c:
5a:09:a0:27:6b:30:1f:11:57:5d:c0:5d:81:19:3d:
aa:12:92:99:d5:44:48:8b:6a:67:a6:87:ab:ec:5c:
35:ad:5f:78:9d:09:67:b1:ae:5f:1b:fd:0e:db:18:
40:85:e7:72:ea:ad:aa:7b:ca:f5:e5:66:b1:89:dd:
c5:5b:78:e3:a1:2c:19:a7:bb:11:52:cb:49:f2:26:
b7:68:6a:cd:e7:20:ee:7a:a2:27:1e:e3:39:e1:83:
a3:a5:46:0c:02:4c:52:ca:38:cf:55:4a:53:f4:28:
3a:8c:fb:03:91:45:75:bb:ab:7c:1b:00:32:73:dd:
31:f7:a8:6a:d1:c7:7a:c9:78:b3:12:cb:a0:c0:59:
07:61:60:09:e9:5c:08:c4:ee:e4:99:6d:d9:e4:75:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:39:26:90:D8:9A:17:8A:8C:66:D9:54:9E:70:97:B3:C8:F6:53:3E
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/RTkmkNiaF4qMZtlUnnCXs8j2Uz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.147.0/24
Signature Algorithm: sha256WithRSAEncryption
47:48:5e:32:6c:ae:bb:e8:60:ee:11:15:80:5b:b1:8d:8b:2d:
a1:9e:81:7c:a4:d2:47:a5:7a:b2:11:28:d0:7c:c6:3b:87:97:
59:d1:b6:c7:aa:03:f9:07:9f:ca:af:91:c3:ec:0d:ba:22:19:
b1:4f:0c:c9:4f:2f:d8:04:87:24:46:ef:06:7a:13:c4:01:6a:
c6:87:49:b6:f6:b9:51:98:a4:40:77:e8:49:28:66:23:30:fb:
d5:4d:c5:44:d7:48:59:cc:c7:d8:f0:e1:7d:f0:9d:e6:35:64:
3c:6b:3f:75:72:6d:b1:e9:61:d5:72:de:17:c8:54:7d:44:e5:
84:0b:a2:cd:70:4e:62:47:96:2a:bb:71:73:e0:cb:e6:47:7b:
82:fb:78:04:79:a7:4c:6b:ff:3d:61:b1:61:ce:22:53:7b:54:
1b:b8:6e:ff:0a:6c:31:ec:7e:c2:14:83:e1:26:c0:4f:9a:99:
ae:ef:2b:98:69:0f:89:c8:a4:25:6e:ec:e5:c7:18:1d:c2:86:
39:22:6c:1f:43:87:b8:5a:88:f6:fa:a9:1d:97:41:16:37:b7:
e5:41:1f:8c:b5:72:92:72:af:1f:7b:05:d8:aa:56:0f:53:35:
02:4f:f8:08:1f:1e:ff:83:8a:3b:f4:15:f6:8e:87:71:86:ef:
17:4d:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:26 2025 by rpki-client