Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa
File: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (raw, json)
Hash identifier: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=
Subject key identifier: 7D:45:A8:83:C7:50:C8:A9:59:98:3C:F7:26:DE:1A:A0:C7:B5:D9:93
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 019426D96909F87C275AAF27E5CA75D4A577
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200287
IP address blocks: 80.243.232.0/22 maxlen: 24
80.243.232.0/24 maxlen: 24
80.243.233.0/24 maxlen: 24
80.243.234.0/24 maxlen: 24
80.243.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:69:09:f8:7c:27:5a:af:27:e5:ca:75:d4:a5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d45a883c750c8a959983cf726de1aa0c7b5d993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:b9:49:a3:27:3a:fc:1d:4b:e2:de:77:5d:
8e:26:61:ca:30:1c:10:88:1f:7e:9b:0e:95:77:e5:
1c:13:00:be:24:69:0c:3c:c0:9b:b1:44:6e:11:d4:
3a:e4:9d:cc:7f:aa:24:d5:a9:11:47:1e:ee:28:16:
2a:e6:94:e0:48:d7:9a:d3:10:85:7d:10:be:07:15:
2d:c2:ad:c0:5d:ef:9b:6a:3b:73:c0:72:df:f0:d9:
7e:e6:03:10:6b:b1:eb:6a:e1:4b:9c:27:39:77:eb:
7d:dd:20:8c:c5:5e:b7:19:61:ca:d3:3a:8c:54:90:
02:76:e3:20:83:26:43:8c:f6:a6:9e:bc:e4:f9:47:
58:1f:96:52:88:5f:f9:46:41:24:e8:5e:fd:7f:42:
21:88:e0:a6:4a:57:67:5f:a6:8c:6f:69:b2:ca:78:
98:65:7c:ed:be:c3:2f:90:f2:fd:ca:6d:3d:e3:4f:
03:a7:b9:b1:03:a0:4c:cc:f6:84:8d:34:0a:6d:34:
3a:a8:cd:b6:13:74:20:b7:a7:48:8a:f9:2d:0b:64:
b9:51:ed:ee:15:5e:48:97:e8:20:af:4a:bf:f4:8d:
c5:9a:5a:e7:85:c2:e0:04:5e:ab:78:94:d0:ae:6b:
7b:6a:82:8b:5b:29:82:1e:50:04:d0:e5:ee:79:5d:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:45:A8:83:C7:50:C8:A9:59:98:3C:F7:26:DE:1A:A0:C7:B5:D9:93
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:a6:02:b8:8a:09:53:fd:c2:15:90:be:73:a6:7a:85:58:86:
86:df:28:de:b0:21:f5:1e:10:b7:49:de:0c:87:b2:93:f8:af:
0f:a1:04:65:51:a9:75:06:e9:41:0f:f6:95:3c:3e:ab:4f:3b:
5c:32:f5:8b:70:3d:34:85:cd:b8:60:93:96:34:e2:36:f6:aa:
c8:16:26:87:20:c7:15:76:8e:97:b8:bc:fa:f0:c9:39:b1:32:
2a:4a:db:27:d7:90:63:c6:06:82:ff:88:42:29:36:c7:e0:8c:
e5:e4:ff:ec:ab:06:64:81:03:b1:47:b8:72:36:55:28:ec:0a:
fc:68:8c:cd:6e:c7:a0:28:1a:57:b0:ed:60:fa:b7:73:42:d2:
24:f2:f6:f1:70:f7:0e:c0:57:a4:7a:8a:7a:92:8e:dc:9b:64:
7e:00:c3:0f:bb:84:2d:3b:7a:8f:12:58:80:9a:45:1d:17:5b:
f2:57:9e:fb:e4:e5:19:65:bd:86:df:3f:b6:9c:fa:52:fc:19:
1b:88:53:50:90:0a:45:16:f0:24:f4:a9:86:da:52:7b:a0:7c:
11:8e:89:f6:60:af:57:95:98:4a:d4:91:25:66:d7:67:2a:35:
98:59:b4:10:33:e7:f5:33:a5:5a:a3:b1:5e:f2:45:eb:cd:c4:
28:d5:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:01 2025 by rpki-client