Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/fSYj6ulnFPb_7PHbtptyADSAzrs.roa
File: fSYj6ulnFPb_7PHbtptyADSAzrs.roa (raw, json)
Hash identifier: 8YCJ9W608TjW8sdnXw7GT76eNT9Q9RTVCtdOFj+lrd0=
Subject key identifier: 7D:26:23:EA:E9:67:14:F6:FF:EC:F1:DB:B6:9B:72:00:34:80:CE:BB
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 018D3BE492C3A8DAD4383341507BDEDFF6BB
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/fSYj6ulnFPb_7PHbtptyADSAzrs.roa
Signing time: Wed 24 Jan 2024 14:34:11 +0000
ROA not before: Wed 24 Jan 2024 14:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200603
IP address blocks: 80.244.3.0/24 maxlen: 24
185.79.125.0/24 maxlen: 24
2a13:5740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:e4:92:c3:a8:da:d4:38:33:41:50:7b:de:df:f6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: Jan 24 14:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d2623eae96714f6ffecf1dbb69b72003480cebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:3b:af:3b:58:fa:6f:fb:17:38:f1:24:1c:
09:89:04:a2:19:45:5b:60:71:d3:2f:3f:42:bd:83:
6a:d9:21:fb:e1:3e:5f:3f:42:ea:44:eb:55:6e:f9:
82:c9:5a:0d:c4:3b:5d:92:8a:05:e7:22:56:a6:d2:
cc:2d:cf:4b:d8:bf:e0:14:81:20:4e:e6:0e:01:e5:
77:43:6a:23:3b:6b:40:61:15:99:bb:f6:cf:68:9f:
17:ba:bf:6c:6a:16:ae:65:da:b0:49:f0:67:4c:0f:
81:b2:a2:14:70:42:4b:ca:98:a5:1a:f2:d5:2c:41:
77:c0:7f:26:07:43:04:4e:96:f6:3e:c9:cd:9f:4f:
7a:57:b4:44:f7:ce:99:c9:52:3f:78:b9:7a:ed:07:
6f:69:3e:69:02:f8:e4:8d:03:88:86:6d:76:01:41:
d7:df:38:02:91:7e:83:93:f1:f0:83:88:97:08:e7:
92:1b:ec:6f:18:6d:de:b6:f5:8e:34:3c:83:b4:fd:
0b:41:9c:2e:2d:2a:2c:75:52:90:ee:23:e9:aa:c6:
3c:2a:bf:e4:56:49:ce:4a:e4:dc:35:dd:09:45:53:
86:fa:c8:db:f8:8c:43:1f:40:02:9b:39:04:32:6a:
8c:48:c6:0a:9e:73:39:56:d2:fa:6b:43:17:9a:53:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:26:23:EA:E9:67:14:F6:FF:EC:F1:DB:B6:9B:72:00:34:80:CE:BB
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/fSYj6ulnFPb_7PHbtptyADSAzrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.3.0/24
185.79.125.0/24
IPv6:
2a13:5740::/29
Signature Algorithm: sha256WithRSAEncryption
6d:09:4c:66:09:d8:a0:61:9d:87:b2:01:b5:63:2d:b0:0d:da:
2d:15:b6:41:ea:ec:cb:dd:bc:7c:95:75:73:fc:b1:15:44:8a:
d2:9b:35:c4:10:fd:c7:90:55:49:1c:60:83:08:c3:a1:88:88:
80:c8:78:af:e9:2f:03:2e:59:78:8e:46:9f:b5:27:93:38:db:
14:80:a9:33:19:4b:cb:7d:9c:27:bc:e0:96:fa:da:c9:f8:65:
95:91:14:12:26:b6:cb:8a:a9:43:98:93:79:c8:e7:90:ec:d2:
52:dd:b5:7c:0e:d6:7d:1d:44:e1:f6:d7:88:1f:43:4a:e4:10:
ce:9a:33:00:60:68:20:ce:2e:30:04:94:72:15:ea:57:53:e8:
71:44:eb:be:0a:0b:c4:51:a2:42:7f:cb:5f:5e:be:dc:15:72:
86:7a:72:be:c5:87:58:b3:54:49:de:3d:7b:e5:48:92:9b:fc:
9a:a8:f7:2a:d9:04:e1:97:6c:f4:f8:cb:b1:ee:04:64:b0:ef:
9d:ca:9b:8b:dd:77:04:d5:3b:8d:2b:42:32:04:6f:4c:6c:41:
f6:c2:dc:0a:0a:b3:98:2e:1a:76:5d:fd:4b:7e:9b:da:f5:3f:
96:e5:e7:4d:de:b2:e3:a9:e8:e5:05:66:67:75:e2:82:5f:90:
16:c6:ac:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:26 2025 by rpki-client