Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/2u4njDydU7-Rcig5OJImMYx9OLw.roa
File: 2u4njDydU7-Rcig5OJImMYx9OLw.roa (raw, json)
Hash identifier: 6ab6ORH1hwmmoOO4nH6O+Fp0gIJBVMChvlTPQ+VDX4I=
Subject key identifier: DA:EE:27:8C:3C:9D:53:BF:91:72:28:39:38:92:26:31:8C:7D:38:BC
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 019078CF70D31D31D6130CB655B4691AC19B
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/2u4njDydU7-Rcig5OJImMYx9OLw.roa
Signing time: Wed 03 Jul 2024 13:36:18 +0000
ROA not before: Wed 03 Jul 2024 13:36:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.91.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:cf:70:d3:1d:31:d6:13:0c:b6:55:b4:69:1a:c1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jul 3 13:36:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daee278c3c9d53bf91722839389226318c7d38bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:37:98:c8:c9:c6:f3:e2:85:2d:99:41:7a:
94:6a:13:5b:2e:90:c2:01:a2:77:46:d2:18:b1:31:
05:f7:4e:48:d9:eb:42:a7:02:84:a8:a1:59:78:92:
ef:5b:fa:f1:8b:15:9b:bd:ee:2e:3f:d2:b1:49:92:
51:6c:6e:21:70:81:43:7c:12:12:cf:3d:58:73:1b:
5a:d1:c0:77:14:d7:b8:61:45:dc:86:aa:ee:d3:b6:
31:11:1e:c3:d3:e5:11:b7:f2:ad:54:dd:97:7c:08:
3a:38:0a:50:ab:b3:88:fe:6e:52:e0:cb:a0:2f:03:
f5:3f:9a:6c:b9:e0:46:bd:31:8d:95:d7:b3:a4:88:
2c:7c:c7:85:96:04:07:7f:29:cf:dc:b6:de:aa:b9:
4f:80:7f:58:fd:23:3b:c1:94:27:0b:0d:00:39:54:
89:6d:4f:db:42:ee:3a:c8:95:08:6c:b3:d7:93:6d:
17:6c:f6:51:4b:ed:4e:fe:e8:ee:bd:73:30:82:a9:
45:38:ad:80:0e:85:3a:c7:fc:e0:19:ec:16:37:f3:
3f:65:c1:d5:7a:c7:9a:b2:b4:a9:74:8f:db:fb:1a:
1a:50:3c:9b:5b:28:31:8a:2b:d0:70:c1:dd:a1:09:
ba:4e:da:35:84:30:7c:95:8f:02:90:55:86:50:43:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EE:27:8C:3C:9D:53:BF:91:72:28:39:38:92:26:31:8C:7D:38:BC
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/2u4njDydU7-Rcig5OJImMYx9OLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.218.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1d:c4:c3:ee:cf:1c:eb:dc:7d:5a:9a:d7:dd:94:d0:07:7d:
60:4f:62:5e:2c:d4:b9:8a:5c:42:fb:d0:d0:96:c5:3c:6a:f0:
6b:73:48:e6:3e:dd:cb:62:71:b0:61:c6:d3:db:3b:97:70:80:
dc:18:6c:ad:c7:3d:e7:d4:42:62:da:55:7f:6d:d0:6e:12:86:
ab:6a:6e:06:86:68:f7:c4:97:68:74:9e:96:29:43:16:e6:1d:
95:1f:1a:a0:53:12:72:e8:46:ae:26:09:08:68:07:26:96:8b:
3f:47:ec:c7:4d:2a:01:64:d7:53:6a:e4:39:e9:91:b4:69:35:
64:bc:40:31:32:42:b5:9a:8f:d5:d0:b0:26:ab:19:82:10:0e:
e1:dc:9e:76:00:02:e2:27:ab:b5:d6:6c:76:f4:fd:ca:e2:c6:
b1:37:21:b0:ba:8e:31:38:92:6e:d3:fa:ff:77:36:e9:06:d3:
79:07:c7:f7:f3:3b:40:f8:81:67:47:a0:dd:c7:31:20:64:06:
8c:f6:29:78:76:01:9e:5c:18:09:9a:8b:2c:6b:40:1b:18:d6:
1b:9a:fe:72:39:4d:6c:ff:40:be:52:00:15:33:c5:26:cb:a0:
63:6f:b8:17:5f:15:4f:93:b6:7b:cf:c2:d5:45:94:01:bd:3e:
3e:57:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:41 2025 by rpki-client