Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/p4Q0ZWXygkpptrQEmtS_Bw91Odg.roa
File: p4Q0ZWXygkpptrQEmtS_Bw91Odg.roa (raw, json)
Hash identifier: KN/px2M4FS3q/Gjwtem6LX8LpVU5wBBix90QClJknPc=
Subject key identifier: A7:84:34:65:65:F2:82:4A:69:B6:B4:04:9A:D4:BF:07:0F:75:39:D8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C3A59C8351BEAF9EBF605F7A2D181
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/p4Q0ZWXygkpptrQEmtS_Bw91Odg.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204972
IP address blocks: 80.96.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3a:59:c8:35:1b:ea:f9:eb:f6:05:f7:a2:d1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a784346565f2824a69b6b4049ad4bf070f7539d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:35:8e:04:41:31:91:17:24:d8:7c:d1:20:
6c:24:0d:a2:50:4f:ae:a1:f5:5e:b6:cd:2f:b3:9c:
3e:00:e7:35:04:2b:99:99:32:06:a1:7a:a2:07:bd:
b8:a9:5b:54:73:77:22:57:61:d3:10:9d:89:7d:a6:
9f:89:8e:91:d1:f7:d6:45:21:4b:6c:3f:8e:b2:25:
b9:d2:04:42:1d:2b:ec:be:a3:94:8e:e1:09:25:f2:
6e:72:9d:35:e2:50:97:ba:1a:da:6e:3d:06:29:d6:
3c:4e:75:55:30:c8:ca:b0:7b:66:d7:9c:dd:a1:bf:
df:7e:16:7a:0d:02:b3:16:55:83:71:dc:fd:d7:6e:
9b:58:a5:87:7a:25:59:83:60:c8:fb:1b:ba:b6:b3:
6a:d8:db:f2:89:5d:9e:52:82:7e:17:ed:31:26:ba:
4a:9e:c4:01:86:11:4a:9c:77:c4:cb:a4:b2:ba:c6:
4c:b1:65:c3:66:69:e7:fa:b5:68:50:be:9a:4a:ce:
ba:59:72:60:5c:f8:4e:13:ab:64:b8:a7:c8:6b:43:
d2:ff:ad:1e:ae:74:ba:8a:f0:9a:8e:bb:60:5d:01:
99:9c:13:fd:5b:cd:04:58:f2:1b:46:71:82:18:a7:
48:63:81:a1:c6:83:bc:14:0a:e7:22:6d:6b:93:61:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:84:34:65:65:F2:82:4A:69:B6:B4:04:9A:D4:BF:07:0F:75:39:D8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/p4Q0ZWXygkpptrQEmtS_Bw91Odg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f6:df:76:98:f5:51:54:cd:97:09:af:48:31:17:2c:2b:e1:
62:0f:f3:9d:97:68:da:68:78:ac:c3:6d:0a:4b:08:15:7e:ce:
ca:6e:7b:e1:1c:0c:0c:ca:ec:8a:a5:3d:a7:27:f5:e1:bd:45:
59:e9:d1:ed:fb:dc:0c:02:94:5e:94:2a:5d:3d:0b:a1:c9:d3:
5f:f7:a2:dc:39:35:76:cf:a1:b1:fc:c3:e4:cf:bd:3b:c1:d2:
9c:cc:a3:0f:b1:db:63:ec:13:13:20:aa:4c:d4:d0:70:c1:af:
0d:3e:1e:ce:da:dd:9b:81:62:d5:0f:d2:d0:d1:92:85:6d:18:
24:2c:82:7d:10:e7:af:9a:d5:3d:30:a4:49:1b:cf:16:31:b3:
94:55:90:96:22:6d:f7:9f:38:9c:88:b4:c1:46:56:49:d9:fc:
b2:d3:90:b3:2b:21:4d:cf:ac:d0:65:8b:51:44:38:ca:8c:d2:
2b:7e:1b:1c:25:f8:c6:0b:20:58:2e:45:72:56:4e:73:4c:bc:
fd:aa:fe:f3:cf:1d:48:11:c4:10:23:ff:19:f7:f4:0a:42:ab:
41:02:1a:a0:33:56:61:19:8a:74:23:d3:d1:6c:e5:7a:72:e5:
b2:25:3b:9a:23:d7:8b:0e:6c:15:92:06:68:47:5d:97:fd:1f:
a9:1b:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:20 2025 by rpki-client