Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/r-UAYZvL2xwJmtLgtd5KDciVzQ4.roa
File: r-UAYZvL2xwJmtLgtd5KDciVzQ4.roa (raw, json)
Hash identifier: d6Mnj5IbIQ+0OiYgGa81UsSghkT85xLdE95Ndm3NClg=
Subject key identifier: AF:E5:00:61:9B:CB:DB:1C:09:9A:D2:E0:B5:DE:4A:0D:C8:95:CD:0E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C345964F87BD0399F348CA02CA7F1
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/r-UAYZvL2xwJmtLgtd5KDciVzQ4.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62350
IP address blocks: 80.96.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:34:59:64:f8:7b:d0:39:9f:34:8c:a0:2c:a7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afe500619bcbdb1c099ad2e0b5de4a0dc895cd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:81:47:da:bb:23:53:35:63:62:d3:eb:1a:
68:ea:70:be:4c:49:62:a2:bb:e2:7c:5b:b9:c8:f0:
7a:08:26:12:b4:89:fd:54:c0:26:4e:8c:5f:c2:8d:
74:96:e7:a6:cd:cc:84:60:d3:27:e1:ab:ba:b4:c2:
3f:68:05:39:7e:2c:40:c5:15:48:60:d8:17:06:a6:
ea:ea:a3:5d:b1:5a:0f:4e:b9:99:33:e9:26:6f:cc:
2f:5b:6b:a3:fd:99:d7:a7:dd:c4:3c:d9:06:49:0a:
06:d2:b0:6e:8d:59:99:43:e3:22:80:54:f3:41:43:
76:4d:4a:b8:44:4e:76:64:33:2d:fb:0f:c9:98:4c:
29:9e:b8:5e:d1:6c:f4:14:76:ba:fb:90:a1:64:36:
aa:4f:97:20:14:dd:f0:7b:89:8c:a9:2a:df:c8:0a:
48:d0:85:11:28:77:01:e0:a7:d9:ce:ea:f6:e3:52:
b3:be:8b:a5:96:f5:c2:76:4f:a2:fe:da:f4:21:f5:
78:d8:f9:99:9a:c5:d7:34:c6:98:84:3f:4a:88:14:
e7:ab:19:6e:0c:b3:ce:72:1a:18:ba:2b:20:87:d8:
ee:9b:b4:11:ee:7b:49:d1:14:7a:52:08:dd:2a:d4:
4e:bc:b6:8e:e6:c8:41:ed:8e:e9:25:d7:f2:aa:51:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E5:00:61:9B:CB:DB:1C:09:9A:D2:E0:B5:DE:4A:0D:C8:95:CD:0E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/r-UAYZvL2xwJmtLgtd5KDciVzQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.25.0/24
Signature Algorithm: sha256WithRSAEncryption
98:dd:3b:06:74:f1:bd:82:20:5d:5d:b6:b3:20:aa:98:cc:97:
1c:71:bc:db:83:bd:e8:7c:57:96:05:94:ec:d5:84:72:db:67:
2f:21:a6:f6:ed:6c:d2:49:d7:34:34:3c:f1:8d:77:ec:63:c8:
aa:7d:6b:0f:d7:c2:7b:de:2d:83:c7:01:8b:75:fc:64:7c:c0:
d5:f6:0d:eb:7a:6a:c6:ff:57:9a:5a:f7:15:67:7b:7c:62:68:
39:31:ab:8c:93:a7:9c:5a:b7:ad:b6:fb:95:f7:93:a7:34:7c:
91:88:c4:29:55:ee:f1:6e:14:69:ba:09:ba:70:97:b2:ab:32:
cf:bc:25:fd:07:ba:54:07:07:b1:b4:2c:1d:ad:eb:40:f3:e7:
a3:db:8c:0e:2c:4e:8a:0b:f6:ea:65:e6:14:fe:7a:14:8d:bb:
13:2b:f4:c3:ad:0c:bd:7e:0a:9c:4a:84:cc:8f:a4:ef:f8:af:
4d:de:b4:1b:85:1d:f4:c9:12:39:09:22:6f:3b:90:10:4d:0b:
5a:0e:43:93:97:e3:22:f2:ea:61:68:4f:9b:84:b7:6d:5a:75:
b6:c1:12:06:4f:e0:dc:ca:8f:e3:1b:cc:98:66:8d:1c:d1:1e:
f8:d2:46:49:37:8b:60:bb:4a:57:ba:99:ec:25:ea:a1:68:fb:
11:5d:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:03 2025 by rpki-client