Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa
File: 0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa (raw, json)
Hash identifier: PBPGt+jErFfdsCRUJWd80XX9R1FBkaFtE395+CvuKxk=
Subject key identifier: D2:0E:C4:93:E7:78:CD:76:82:BE:A0:CE:CB:F6:1F:47:88:7F:97:C9
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA423AB3240030354A691658B66BD
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29713
IP address blocks: 80.76.44.0/24 maxlen: 24
185.240.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a4:23:ab:32:40:03:03:54:a6:91:65:8b:66:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d20ec493e778cd7682bea0cecbf61f47887f97c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:3f:e8:0c:89:fb:23:a1:41:f8:0f:81:7d:
11:b8:e1:fd:9c:99:ab:17:cf:f9:2c:37:1c:6e:4b:
8b:0a:b5:7b:a3:69:a3:d8:a7:68:b5:ec:06:dc:7e:
6f:92:1d:5b:a7:fe:2c:6a:ef:6d:25:b5:33:c2:32:
65:b4:fd:eb:06:6f:8f:e1:58:bc:ea:92:6f:37:e1:
ec:3c:2f:79:29:1d:d8:87:44:6a:61:ca:98:18:84:
c0:5a:e8:65:a2:aa:3c:2f:36:7b:8c:c6:42:22:8c:
94:9b:4c:01:1f:9e:18:36:34:7b:c1:76:ba:3f:7c:
06:6f:ea:e8:a9:a2:0b:11:5f:a1:df:d9:14:a6:a8:
ec:d0:e7:13:4d:e1:76:60:e8:a9:5b:1f:0e:71:56:
e0:a0:9c:9d:9d:f3:83:17:8b:0e:9a:82:42:16:f4:
b7:e0:78:68:03:cd:a3:1e:f2:66:4c:4f:e6:75:31:
46:9a:0b:39:ae:8a:12:7c:a4:fd:98:67:9b:35:73:
84:c9:3d:ad:54:f6:10:02:c8:ae:9b:8b:c9:35:5e:
a5:4f:0b:35:08:9e:8c:ac:5b:af:6b:5f:fd:81:7e:
1b:3a:96:07:03:43:63:d5:b3:f7:57:80:48:53:f7:
d2:ac:5a:b8:fc:ea:a6:77:36:6e:b7:ae:4c:6f:35:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:C4:93:E7:78:CD:76:82:BE:A0:CE:CB:F6:1F:47:88:7F:97:C9
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0g7Ek-d4zXaCvqDOy_YfR4h_l8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.44.0/24
185.240.87.0/24
Signature Algorithm: sha256WithRSAEncryption
58:39:e5:bd:5d:a1:5c:36:11:21:ab:46:4d:11:96:07:42:36:
a2:23:d3:94:79:b7:6e:82:23:ef:14:62:10:5b:94:a7:38:0e:
6b:1f:fe:6a:90:6b:d5:c1:8c:6d:f8:3d:f0:02:e3:4c:08:27:
10:52:49:a2:41:78:2f:4e:0f:1e:ff:66:93:85:bf:da:98:2b:
fb:8f:e5:d4:17:db:8e:41:44:a0:53:9f:36:19:48:ca:62:08:
e2:26:28:5a:e5:2b:d0:b9:47:a9:43:47:ad:6f:38:88:31:c1:
34:70:16:2b:8b:54:f8:d8:8a:1c:e2:d8:e3:26:70:e0:48:1a:
d9:1f:8c:34:db:e2:20:1c:0e:38:8d:82:b5:20:c5:af:90:54:
9a:8c:96:3f:8a:0a:12:a4:86:97:3f:65:42:53:76:3e:e3:96:
0e:4c:0d:f9:c7:03:6d:d3:56:e7:19:6e:ac:0f:db:95:de:46:
b6:ee:8a:d2:57:e0:ea:bb:3b:43:89:c3:e9:e9:3c:c8:6e:4d:
12:d8:f0:6a:63:db:ef:49:64:3e:46:3e:d1:c8:fa:7e:09:e9:
ca:22:8b:27:19:14:d4:ce:d9:39:ce:34:65:55:87:b7:e9:b8:
7d:1d:47:77:fd:91:b5:cc:4e:31:98:37:74:a8:cc:d5:91:aa:
30:42:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:54 2025 by rpki-client