Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/80uZVWp_iWFE8vdma8FvwSsz-Uo.roa
File: 80uZVWp_iWFE8vdma8FvwSsz-Uo.roa (raw, json)
Hash identifier: pm27AxcsLfVMm1BA5QNNe0QMO134e9SV+S+h9WFlZjs=
Subject key identifier: F3:4B:99:55:6A:7F:89:61:44:F2:F7:66:6B:C1:6F:C1:2B:33:F9:4A
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019423D7D90A67BD3AA37949D39C17BA6D6A
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/80uZVWp_iWFE8vdma8FvwSsz-Uo.roa
Signing time: Wed 01 Jan 2025 21:48:55 +0000
ROA not before: Wed 01 Jan 2025 21:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 128.139.4.0/24 maxlen: 24
128.139.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d9:0a:67:bd:3a:a3:79:49:d3:9c:17:ba:6d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f34b99556a7f896144f2f7666bc16fc12b33f94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:48:43:85:2e:4e:84:33:1d:fc:21:8b:62:
fd:a9:ac:eb:54:68:e1:a9:93:d6:61:c8:42:9b:0c:
d1:4c:c3:70:bc:5c:9c:72:ab:13:1f:c7:88:3a:35:
e9:d3:d9:73:91:7a:de:bc:1b:3f:0c:35:6a:a2:6d:
45:a0:ee:46:cf:82:e5:d6:04:16:55:16:3d:f8:32:
fa:33:d0:38:f5:c9:46:11:ec:5f:b0:a5:bf:93:2c:
21:d4:dc:a3:b5:e3:d9:b4:65:9c:17:bc:4b:5f:33:
8c:e3:a7:57:ae:06:4f:58:6e:cb:60:af:8b:8b:be:
69:70:84:98:6c:d8:4b:ca:92:f2:67:1e:1e:2f:d6:
ec:ca:00:a8:4c:45:16:7f:96:aa:fa:27:5d:2d:cf:
4b:7e:c2:cd:4a:8d:97:d7:d3:05:e5:e1:04:2e:34:
47:62:99:09:25:37:ec:36:59:ae:c1:bd:d7:0e:67:
e5:d3:36:f3:28:4c:d0:71:fc:ec:6c:a6:8e:0b:8f:
0f:31:dc:6b:92:af:1d:58:52:82:54:97:b2:15:71:
2c:64:bb:b2:61:d3:cc:a9:5e:d5:33:95:30:0f:61:
09:d5:6b:73:3e:49:9a:dd:5c:26:28:df:dd:d9:ba:
c2:28:74:3f:36:1c:ea:b3:9f:a8:9b:09:10:cb:55:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4B:99:55:6A:7F:89:61:44:F2:F7:66:6B:C1:6F:C1:2B:33:F9:4A
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/80uZVWp_iWFE8vdma8FvwSsz-Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.4.0/24
128.139.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b8:9a:47:e7:57:9f:46:e0:16:aa:82:6b:97:a0:d0:a8:b2:
e8:ec:ad:6a:cc:81:b4:e1:02:aa:c6:a1:5a:ef:9b:16:4a:96:
2f:55:6a:7d:11:53:9d:ee:87:ed:ac:e7:9d:90:ac:c2:ba:3b:
0b:a1:9e:c1:df:91:ce:86:13:2f:45:ef:b4:f1:cb:89:77:12:
77:bb:49:ca:ce:59:13:28:22:38:b0:42:f9:b2:49:62:4c:bd:
f8:fb:62:cc:04:ab:d8:1a:14:2e:4e:27:54:11:c0:11:12:ac:
f7:04:7a:bf:40:09:81:7b:8b:46:9f:c6:77:9f:2a:a2:44:c5:
f5:d8:87:91:5d:4a:df:46:5a:6a:0c:bd:27:2a:c8:05:61:df:
96:7a:41:04:f0:d6:47:19:8f:8c:eb:07:b9:fa:5f:54:fa:2d:
70:fa:88:1d:4e:70:fd:99:e5:f1:ea:18:05:1a:97:0b:03:5a:
47:94:32:2f:c1:67:de:34:25:ea:ab:98:f2:35:2b:cc:26:92:
b2:f9:04:c3:ba:1f:dd:3f:39:68:26:59:6a:dc:c5:ed:6f:e9:
1a:6e:ae:3d:b2:0e:4c:fc:46:c9:3d:11:ee:6a:63:56:4c:45:
b2:af:68:4e:f5:1d:47:0a:95:1d:f9:fa:25:35:ab:c5:a6:b2:
92:33:5c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:12 2025 by rpki-client