Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/fmzabX1wC9LzCnDTVmQlla1G-ik.roa
File: fmzabX1wC9LzCnDTVmQlla1G-ik.roa (raw, json)
Hash identifier: 5edD7nsA4go10ucsw6zlFnHtoaEROs34laMuf3Q628U=
Subject key identifier: 7E:6C:DA:6D:7D:70:0B:D2:F3:0A:70:D3:56:64:25:95:AD:46:FA:29
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 0194258F1B4F1845885A6B9BE2E3C8279382
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/fmzabX1wC9LzCnDTVmQlla1G-ik.roa
Signing time: Thu 02 Jan 2025 05:48:43 +0000
ROA not before: Thu 02 Jan 2025 05:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.91.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1b:4f:18:45:88:5a:6b:9b:e2:e3:c8:27:93:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 2 05:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e6cda6d7d700bd2f30a70d356642595ad46fa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:bf:58:c9:bd:54:f0:22:72:f3:34:46:9f:
3f:f0:1e:ff:27:bf:7d:9d:06:19:47:6f:b2:5c:b6:
94:b6:ef:45:ed:bc:ef:8c:55:6a:e7:0a:f6:e8:1a:
77:30:7c:25:b0:11:9f:b1:c7:78:dd:4d:ab:6c:eb:
d6:84:ec:d1:3e:8c:1c:f2:c1:08:d8:f0:41:ce:f7:
16:4b:fe:80:65:21:19:7a:65:fa:57:1b:a9:98:92:
28:77:1f:d2:cf:fe:cf:42:30:85:94:90:c1:3e:fa:
ea:3a:e9:a2:14:0c:e8:28:a4:92:4a:eb:c8:16:a8:
35:fe:ca:00:5d:68:87:46:c6:a8:d7:e1:7f:74:aa:
52:72:25:78:e0:25:a0:8c:46:a4:c3:00:fd:ad:e7:
b3:ad:8b:c1:67:b2:7d:62:ff:35:f3:97:a5:bd:06:
77:4f:45:b9:b2:0c:3f:84:5e:b5:60:89:d5:1e:7c:
e5:c3:ea:8e:09:40:8a:fc:69:1e:47:78:3f:1f:75:
c5:ab:83:c1:b0:11:69:f8:36:79:7e:b9:db:0a:a0:
69:11:8a:ad:2a:48:12:3f:39:2f:13:d2:64:a8:c6:
dc:d0:f2:4d:18:65:cd:01:65:a1:3b:d0:47:11:af:
10:e6:c2:9b:17:d1:fc:9d:2e:e8:ef:20:a1:7d:3b:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6C:DA:6D:7D:70:0B:D2:F3:0A:70:D3:56:64:25:95:AD:46:FA:29
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/fmzabX1wC9LzCnDTVmQlla1G-ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.218.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ee:88:e0:c6:a0:28:43:c3:0d:0a:f4:95:5f:91:d4:ee:ee:
5c:d9:6b:54:e5:03:42:43:17:46:77:7d:43:b4:e7:4a:10:51:
14:fa:14:c9:6e:a1:d1:2c:bb:df:73:82:cb:cf:5c:81:a9:8b:
99:d3:2f:74:fc:9a:d7:f0:08:8f:3b:08:18:5b:f6:fc:f9:c0:
22:ae:19:89:5e:ca:70:25:38:3d:dc:2e:df:2c:fc:bf:a6:9f:
ac:47:04:80:e7:00:66:1d:3c:1e:34:22:79:68:73:e2:82:e4:
92:ab:f2:80:1e:4f:72:4f:90:df:38:67:a1:6a:9b:24:ba:23:
47:36:ff:ad:d3:0a:11:5b:d8:35:60:c0:11:a5:64:0f:2b:cc:
62:d3:cd:99:be:07:f8:7b:4f:e7:67:60:b1:a4:f5:65:93:58:
c5:88:95:a8:7e:18:4d:72:d9:56:e1:b9:88:0c:58:6d:d3:97:
63:b2:3a:95:30:2b:15:b2:c7:e7:a4:16:94:99:98:0c:7f:5a:
2b:f2:86:1e:52:ec:23:64:ce:db:ee:60:f5:48:b9:31:98:e9:
a6:fd:3b:83:14:31:8f:de:1c:33:20:8c:ab:e0:3f:74:91:ac:
3d:9a:7f:7d:fa:10:ab:ed:1c:ce:2a:8a:f5:a3:f4:8c:26:93:
c2:b5:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:21 2025 by rpki-client