Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/0_OjcrNhtyr0s5_bJUkD8pGLgnM.roa
File: 0_OjcrNhtyr0s5_bJUkD8pGLgnM.roa (raw, json)
Hash identifier: X1Jy4DzINB1nWI37uRDEG9JSOWaqgSKmrsD2P/grQ20=
Subject key identifier: D3:F3:A3:72:B3:61:B7:2A:F4:B3:9F:DB:25:49:03:F2:91:8B:82:73
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019425FBF3C8C17DFCB3FC4238459F26291B
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/0_OjcrNhtyr0s5_bJUkD8pGLgnM.roa
Signing time: Thu 02 Jan 2025 07:47:36 +0000
ROA not before: Thu 02 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 80.64.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f3:c8:c1:7d:fc:b3:fc:42:38:45:9f:26:29:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Jan 2 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3f3a372b361b72af4b39fdb254903f2918b8273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:b4:9c:9e:36:89:4e:4e:ac:74:fa:ad:bf:
53:2e:26:f0:22:e1:57:74:32:c6:aa:68:74:12:38:
a7:e5:cc:8f:82:cc:17:0d:59:ef:d7:e2:86:1c:62:
22:81:d8:8b:db:e6:10:04:67:29:98:70:25:89:c4:
0d:19:5c:d0:e2:d4:cc:42:85:5b:b3:af:65:c8:95:
de:da:df:56:4a:c4:b9:44:35:1b:49:1e:b0:97:88:
43:0b:d4:e7:46:ed:ff:d1:9b:2f:30:1d:ff:e4:f7:
19:a9:14:88:05:1c:85:5d:e7:71:71:b6:65:d1:f3:
af:8f:5e:6a:d3:df:48:74:1e:4b:67:bf:8f:79:4a:
b7:bc:92:97:9c:61:93:62:9e:5b:f9:73:d3:d7:a8:
93:61:a7:f9:d5:bf:32:46:ba:cd:c9:ea:56:b5:0b:
ea:9a:b5:65:04:5a:58:40:be:d8:1c:ca:c0:08:b5:
7f:00:16:f3:0a:f2:6c:d9:c0:52:92:54:b3:bc:ce:
09:bf:dd:c6:08:6c:29:c6:1a:d9:a8:27:8b:5f:51:
41:76:f0:02:ce:b6:7f:ba:7e:a2:49:cd:68:2c:99:
a6:2f:1c:f9:97:2f:cc:a4:bf:ea:21:7c:36:b7:9e:
89:4c:93:1d:8a:bc:58:1b:53:9e:dc:07:70:9a:39:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:A3:72:B3:61:B7:2A:F4:B3:9F:DB:25:49:03:F2:91:8B:82:73
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/0_OjcrNhtyr0s5_bJUkD8pGLgnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:65:92:e8:af:5d:5d:47:60:c7:25:63:2d:b3:30:60:00:dc:
c6:f1:8c:4e:86:08:81:b7:b3:7d:a2:9f:e7:65:0a:6b:4d:cc:
55:1e:71:60:ea:32:39:05:23:c4:e7:b5:68:34:87:1d:86:88:
ec:63:8b:48:bf:de:e3:f9:23:b5:85:5f:c3:c4:97:78:d8:12:
6f:cd:42:06:51:0e:30:6a:d4:9b:47:d1:19:05:d5:e4:c7:9e:
c6:e6:c3:40:6f:ad:fd:63:fb:3d:57:df:dc:8f:68:c9:4c:e2:
07:9c:6f:66:6e:b6:a4:80:f9:fb:6b:5c:c5:06:05:a0:d8:e5:
5a:65:4d:be:fe:c3:22:38:06:7e:80:36:bd:e9:b0:b3:e9:85:
97:27:52:ea:09:17:01:67:b8:c7:f9:12:de:14:8f:42:b5:33:
cf:ed:2f:6a:8f:2f:5e:5a:02:7f:0c:31:06:49:99:a1:08:a6:
14:75:33:98:57:17:a4:76:2c:b8:59:66:20:e3:0e:7b:c9:6a:
e7:b5:1e:a0:03:69:2c:65:9c:78:62:dc:02:6f:d0:b3:10:45:
fb:e0:6d:bc:85:6f:00:a3:ef:72:ac:38:1c:ab:08:2a:b2:89:
23:7b:cc:04:80:0b:70:97:ec:6f:18:77:84:2d:35:09:3a:54:
52:7a:94:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl+/PIwX38s/xCOEWfJikbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm
NTU3OGIwHhcNMjUwMTAyMDc0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2YzYTM3MmIzNjFiNzJhZjRiMzlmZGIyNTQ5MDNmMjkxOGI4MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOe0nJ42iU5OrHT6rb9TLibwIuFX
dDLGqmh0Ejin5cyPgswXDVnv1+KGHGIigdiL2+YQBGcpmHAlicQNGVzQ4tTMQoVb
s69lyJXe2t9WSsS5RDUbSR6wl4hDC9TnRu3/0ZsvMB3/5PcZqRSIBRyFXedxcbZl
0fOvj15q099IdB5LZ7+PeUq3vJKXnGGTYp5b+XPT16iTYaf51b8yRrrNyepWtQvq
mrVlBFpYQL7YHMrACLV/ABbzCvJs2cBSklSzvM4Jv93GCGwpxhrZqCeLX1FBdvAC
zrZ/un6iSc1oLJmmLxz5ly/MpL/qIXw2t56JTJMdirxYG1Oe3Adwmjn5pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNPzo3KzYbcq9LOf2yVJA/KRi4JzMB8GA1UdIwQY
MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt
YTc2M2RmM2FlZTZkLzEvMF9PamNyTmh0eXIwczVfYkpVa0Q4cEdMZ25NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk
LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEDeMA0G
CSqGSIb3DQEBCwUAA4IBAQCeZZLor11dR2DHJWMtszBgANzG8YxOhgiBt7N9op/n
ZQprTcxVHnFg6jI5BSPE57VoNIcdhojsY4tIv97j+SO1hV/DxJd42BJvzUIGUQ4w
atSbR9EZBdXkx57G5sNAb639Y/s9V9/cj2jJTOIHnG9mbrakgPn7a1zFBgWg2OVa
ZU2+/sMiOAZ+gDa96bCz6YWXJ1LqCRcBZ7jH+RLeFI9CtTPP7S9qjy9eWgJ/DDEG
SZmhCKYUdTOYVxekdiy4WWYg4w57yWrntR6gA2ksZZx4YtwCb9CzEEX74G28hW8A
o+9yrDgcqwgqsokje8wEgAtwl+xvGHeELTUJOlRSepTV
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:04 2025 by rpki-client