Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/bgxF5jAnvYRWmZ6e5MiUKFa2uGU.roa
File: bgxF5jAnvYRWmZ6e5MiUKFa2uGU.roa (raw, json)
Hash identifier: 7fdvaggldOH8opbA0Kt5gAvs55o5INK+X2aRcH3Q8ss=
Subject key identifier: 6E:0C:45:E6:30:27:BD:84:56:99:9E:9E:E4:C8:94:28:56:B6:B8:65
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0194266C1D0A96BD4423F6659E288256672A
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/bgxF5jAnvYRWmZ6e5MiUKFa2uGU.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59605
IP address blocks: 80.231.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1d:0a:96:bd:44:23:f6:65:9e:28:82:56:67:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e0c45e63027bd8456999e9ee4c8942856b6b865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:d6:f7:2e:9c:9e:17:04:15:94:6d:cf:f7:
f8:07:15:26:e7:22:3f:00:94:0e:dc:83:e2:02:ee:
9b:88:01:6e:2c:04:95:d4:f7:f4:86:c8:9b:85:b4:
f0:57:22:e0:70:da:c4:8e:6c:9e:70:99:c1:0e:58:
c3:61:2b:22:c8:22:03:f6:15:4e:ed:4a:9d:2f:b9:
64:87:b7:ba:2b:7d:57:78:09:6c:90:df:0a:b3:e0:
83:ac:55:21:2c:41:7f:ea:3d:94:44:fa:2f:36:47:
6e:81:64:00:fb:e2:bd:9d:79:37:65:48:55:a4:09:
c9:86:9f:43:f7:43:e4:4e:b3:61:ac:c0:e1:02:68:
05:56:c4:ce:1d:d4:78:f1:85:0a:fe:c8:a3:dc:d5:
56:43:07:c7:07:c2:bd:ae:16:39:79:d5:25:ff:7d:
99:cb:1d:74:63:f6:21:a8:32:29:78:b3:fc:b9:60:
a1:e1:e0:4f:c9:21:db:65:12:6f:90:3e:ee:05:ab:
42:92:74:65:6b:18:70:45:21:ad:4f:f6:7a:c0:b0:
c8:44:fb:41:d1:8a:01:50:57:22:ad:6e:0f:60:77:
1d:7f:8d:30:4c:1f:81:36:a0:ca:06:c7:63:31:64:
de:c1:20:f8:0f:a8:b8:1e:b1:ca:ea:fd:de:0c:d3:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:45:E6:30:27:BD:84:56:99:9E:9E:E4:C8:94:28:56:B6:B8:65
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/bgxF5jAnvYRWmZ6e5MiUKFa2uGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:84:f7:c9:66:2d:a3:8f:83:78:44:1c:56:de:54:5f:02:32:
20:60:24:2c:62:e3:a4:34:8e:12:68:1c:80:ce:3f:f2:a6:eb:
f0:6a:bd:c9:a2:38:8d:05:fa:21:7f:1c:67:89:7b:5a:c7:5e:
9d:d4:3e:07:b5:b7:1b:d7:93:ef:3f:42:65:d1:83:df:52:96:
da:d8:8b:f4:9e:99:43:87:7e:ca:fa:f6:64:13:8f:28:05:ef:
8d:11:08:62:60:d8:02:0f:f3:75:d8:e6:2f:2e:15:bd:e1:e5:
52:78:e5:7e:c0:68:24:45:e5:72:4f:38:5d:80:7a:41:bc:d1:
f0:0d:48:d1:70:5b:54:4f:94:20:be:2a:a7:d5:0e:a2:17:d0:
11:06:eb:c8:de:20:b7:b8:43:82:c1:f2:4e:0c:8d:ed:bc:e2:
af:4b:70:42:f1:e6:2a:7a:54:fa:2f:90:a6:0d:05:57:6a:bd:
96:2d:51:27:90:14:40:45:46:4d:3d:5b:f0:d9:83:39:95:13:
28:8e:0c:d2:16:5d:09:cf:82:52:7e:83:54:d7:fb:20:77:6c:
81:76:bf:b9:88:9d:74:86:20:e8:e1:f1:c9:e8:63:87:51:25:
1a:bb:18:d7:c3:19:43:b3:4d:69:32:d1:a2:9c:6a:c9:39:d8:
29:e4:00:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:11:26 2025 by rpki-client