Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/YrZdH5pglRx66b5p9JGRz_SyZts.roa
File: YrZdH5pglRx66b5p9JGRz_SyZts.roa (raw, json)
Hash identifier: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=
Subject key identifier: 62:B6:5D:1F:9A:60:95:1C:7A:E9:BE:69:F4:91:91:CF:F4:B2:66:DB
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019426D8A51AD7A9A3E08A4D799C03C09002
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/YrZdH5pglRx66b5p9JGRz_SyZts.roa
Signing time: Thu 02 Jan 2025 11:48:39 +0000
ROA not before: Thu 02 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207816
IP address blocks: 80.67.166.0/24 maxlen: 24
2001:913:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a5:1a:d7:a9:a3:e0:8a:4d:79:9c:03:c0:90:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62b65d1f9a60951c7ae9be69f49191cff4b266db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:11:69:3f:8f:8c:cd:8d:de:b7:25:62:82:
da:26:7a:9b:e2:e6:06:63:a0:5b:fe:0f:ab:2f:ff:
05:52:43:59:80:ff:b5:5c:68:e7:c0:6a:f4:78:ec:
24:4e:9d:1a:25:68:41:d6:eb:20:b6:b6:63:98:78:
e4:04:04:fa:4e:eb:94:76:cb:2b:a7:14:a1:81:1e:
49:12:8b:46:c8:9e:e6:77:06:51:95:10:73:90:bd:
d8:25:01:8e:13:62:34:b2:1b:40:2f:9f:f4:ea:8f:
0f:57:c7:27:39:a9:4d:86:36:09:f9:d5:d0:3f:9f:
97:0d:db:d9:b7:87:5d:90:ed:8b:3f:d8:c5:a8:fc:
7b:15:73:86:39:29:8c:d1:bb:c3:05:62:62:04:80:
a4:a9:5b:01:a8:5a:d3:fa:85:07:af:ca:97:12:b4:
b5:7e:30:17:8d:e8:76:47:56:fe:ef:26:5e:6f:76:
dc:52:75:01:05:55:cf:b9:fe:0f:ed:5c:9a:bb:b3:
f4:15:b6:10:7b:4d:ca:60:e0:8b:cb:14:ad:01:cb:
4d:a9:77:05:11:99:3d:6d:02:e9:9b:55:a3:12:72:
e8:3a:07:0a:89:38:2b:24:08:bd:59:76:ff:01:90:
ca:a6:bc:7b:73:f8:13:0c:be:82:ac:d6:06:56:10:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:5D:1F:9A:60:95:1C:7A:E9:BE:69:F4:91:91:CF:F4:B2:66:DB
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/YrZdH5pglRx66b5p9JGRz_SyZts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.166.0/24
IPv6:
2001:913:7000::/36
Signature Algorithm: sha256WithRSAEncryption
35:ea:81:7d:d7:26:19:b3:46:d4:03:a5:85:5a:59:c4:ab:07:
2c:b8:0a:10:62:2c:37:f6:55:da:f2:ff:50:20:6f:b6:d1:d0:
7d:a4:15:ab:7d:b7:9f:c4:c1:66:4a:42:ff:e1:1e:86:ac:10:
3d:1a:82:6a:af:84:32:a2:a7:18:4b:ac:cf:b2:85:60:21:29:
25:9f:6b:b5:5a:10:0d:e5:8a:3d:2b:56:f8:19:ef:65:8d:76:
1d:4a:32:8d:95:29:0b:ef:72:ff:31:63:8d:1c:f1:ab:e2:07:
96:a6:5e:46:35:a4:a2:5c:d1:af:e8:17:ed:e1:1a:57:12:16:
b5:be:d5:ce:44:2a:8f:5d:df:d9:7b:45:45:4c:81:95:e1:5b:
dc:5c:67:f6:ce:02:f2:49:af:f3:a8:7e:93:c3:50:47:ad:f6:
50:37:5e:e9:f6:46:93:ee:34:6a:f3:04:cb:d4:05:61:24:90:
a6:19:a2:87:da:93:b7:98:c4:4f:b4:82:3e:d0:68:4e:57:72:
b9:47:be:6c:8d:f5:cc:2e:bc:42:cb:76:79:95:94:90:28:4b:
0f:cc:e8:bd:c1:ac:ae:5f:fd:95:12:7b:82:bc:b5:ea:9a:5a:
77:a0:6b:0a:04:9e:4b:4b:ed:79:aa:70:98:3a:41:42:e2:5b:
6c:db:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:09 2025 by rpki-client