Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/S5K9sZSxJuICsnYh9DHsHhGYg9w.roa
File: S5K9sZSxJuICsnYh9DHsHhGYg9w.roa (raw, json)
Hash identifier: aaqMsXzi9m0Tt1MG99Oy7OnBJX3zKsmFv/eQfpWMk2I=
Subject key identifier: 4B:92:BD:B1:94:B1:26:E2:02:B2:76:21:F4:31:EC:1E:11:98:83:DC
Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial: 0194228E126D020C2679FBBAB2CE1719D10F
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/S5K9sZSxJuICsnYh9DHsHhGYg9w.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35074
IP address blocks: 80.89.176.0/24 maxlen: 24
80.89.177.0/24 maxlen: 24
80.89.178.0/24 maxlen: 24
80.89.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:12:6d:02:0c:26:79:fb:ba:b2:ce:17:19:d1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b92bdb194b126e202b27621f431ec1e119883dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:8e:b4:53:ac:24:5e:c5:c2:86:a9:ac:45:
d5:d5:1d:8e:92:39:0d:63:6e:b8:0b:f8:da:f5:25:
46:28:cd:26:8d:31:8a:49:6a:8a:ca:fc:bb:81:14:
63:95:9d:9b:99:5f:63:48:45:22:05:05:5c:49:e7:
20:f7:f6:5e:b4:c6:c5:77:84:63:41:94:8a:03:7d:
94:47:94:b6:05:e9:fd:0e:53:f0:cb:93:86:23:a5:
4e:77:c3:b8:48:96:7e:c6:ea:01:c2:b8:c9:c9:1a:
63:43:ed:f1:07:63:ea:dd:9a:81:05:5e:41:3c:ba:
61:65:4d:16:99:50:05:6f:ba:f6:24:d5:00:e1:eb:
08:d9:70:f1:c2:76:8f:58:89:21:52:6e:64:5c:d7:
c7:50:2a:f9:57:d6:9a:25:50:e3:e9:1a:e2:f8:4b:
a6:ae:8b:00:7d:1d:4a:86:c5:79:a3:79:12:26:30:
2d:f4:23:c3:63:92:67:58:17:c7:59:0f:79:82:bb:
df:8b:34:79:cc:8f:a3:91:77:80:c9:9b:5d:4b:5b:
ff:8c:67:4e:b9:11:9f:4d:6e:6c:d0:d3:e1:74:b1:
4d:8e:d2:b7:21:bd:f2:9e:78:ae:5a:0c:bc:d7:ba:
21:58:f1:46:80:d5:7e:a4:fc:c1:d6:28:ad:3a:2c:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:92:BD:B1:94:B1:26:E2:02:B2:76:21:F4:31:EC:1E:11:98:83:DC
X509v3 Authority Key Identifier:
keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/S5K9sZSxJuICsnYh9DHsHhGYg9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:ab:a9:1d:bc:07:e3:63:53:1b:30:f6:94:7b:8e:df:7c:6d:
cc:d5:50:c3:64:5a:9b:89:af:27:70:14:95:e3:54:42:cf:4b:
e8:5b:54:d7:56:c9:55:8b:65:f4:9c:31:e9:14:07:c3:5a:4c:
2d:11:50:f6:d4:b6:fd:5f:f9:46:f8:1b:43:14:61:28:60:e9:
cb:65:50:31:1e:ee:28:be:75:ab:a2:9f:4e:d8:e3:2f:b1:e2:
90:23:99:a9:27:93:6a:79:f1:85:09:83:64:bd:cc:1e:15:65:
75:57:e9:d0:39:c2:f2:83:09:1f:e9:a2:3d:3f:fa:3d:c7:22:
cb:15:01:6b:1f:b7:5d:c0:99:3e:62:2e:bd:7b:c9:1d:54:3e:
d2:80:05:f3:c8:fc:8c:1b:f9:6b:42:8e:66:a5:24:0e:23:f1:
79:d2:88:3f:31:15:6d:1e:c2:c5:d5:63:a5:74:23:32:c8:4e:
cf:80:c5:ee:2e:de:dc:c4:13:0b:02:e4:ab:56:07:eb:13:c5:
e2:13:a7:3b:dc:7c:e2:e2:4f:f9:53:b5:4e:81:59:5b:08:20:
5e:05:6f:a7:32:24:77:9a:e3:40:1f:7c:a1:f5:a9:bc:a2:98:
ad:b3:e4:02:0b:59:d0:81:9e:65:55:7e:e8:19:c2:e5:94:57:
38:ef:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:57 2025 by rpki-client