Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/izzda_b49n8VH5xnpsuwduB4aNs.roa
File: izzda_b49n8VH5xnpsuwduB4aNs.roa (raw, json)
Hash identifier: t3eYoZ+wTdOYjA/Uoce+EpOQq8cLEJ3mkQiQBWY/VyA=
Subject key identifier: 8B:3C:DD:6B:F6:F8:F6:7F:15:1F:9C:67:A6:CB:B0:76:E0:78:68:DB
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 0185728C84F5396AB72FEA36ACE8CAD33149
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/izzda_b49n8VH5xnpsuwduB4aNs.roa
Signing time: Mon 02 Jan 2023 12:54:49 +0000
ROA not before: Mon 02 Jan 2023 12:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204059
IP address blocks: 80.67.181.0/24 maxlen: 24
80.67.191.0/24 maxlen: 24
2001:913:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:84:f5:39:6a:b7:2f:ea:36:ac:e8:ca:d3:31:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 12:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b3cdd6bf6f8f67f151f9c67a6cbb076e07868db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:e1:db:4b:bb:d5:bc:44:06:95:d0:e8:11:
26:44:96:21:72:ab:b1:04:1d:04:fb:c1:a7:22:f6:
7d:9f:9d:08:04:a9:ef:ca:89:fb:f2:c4:dc:4f:d0:
f5:8a:0a:15:26:db:82:d1:67:17:01:38:10:a2:57:
63:6c:5d:6c:a9:b1:33:04:59:13:ee:00:af:87:bd:
5e:d1:15:5f:48:be:a6:b8:c0:bc:97:d0:17:a2:bc:
22:c5:a8:ff:fc:88:90:5d:16:3e:6a:ea:75:44:74:
b7:ed:08:8e:b8:31:c6:40:79:e1:74:5d:2a:66:4b:
48:a8:69:a5:2f:9c:7f:2b:76:45:ab:fe:0c:20:1f:
5d:bd:d8:79:4c:4f:63:f8:b6:13:60:43:d6:43:00:
c5:3d:7d:c3:06:2a:a0:ab:28:1a:98:c9:a3:31:48:
4f:8f:5f:1e:7d:e7:a2:00:5c:b5:bb:ff:2e:72:3d:
72:37:af:d3:7f:13:4c:5b:e4:7e:e6:50:da:a7:a2:
79:a2:2e:e0:0a:5b:97:af:c1:3f:8a:9c:e8:1f:dc:
87:d1:d2:2c:94:ab:c1:58:a5:c5:de:7a:74:74:be:
2f:d7:18:2a:d8:0c:34:55:06:40:71:96:e7:d4:0a:
63:a2:bb:9b:2f:63:0e:0d:15:d6:a0:fa:69:6b:0b:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3C:DD:6B:F6:F8:F6:7F:15:1F:9C:67:A6:CB:B0:76:E0:78:68:DB
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/izzda_b49n8VH5xnpsuwduB4aNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.181.0/24
80.67.191.0/24
IPv6:
2001:913:1000::/36
Signature Algorithm: sha256WithRSAEncryption
ab:ce:05:8a:4b:8d:b3:8b:89:2b:3f:5d:cd:e2:f5:5c:65:d2:
95:b9:da:ab:20:59:10:1b:6a:22:9a:39:ba:e4:d6:c4:60:c2:
75:08:bf:8b:99:58:62:22:75:4d:aa:ec:48:6b:6d:d3:c6:10:
ca:48:65:e5:24:93:97:30:67:dc:0e:c4:bd:5d:11:4c:8c:4a:
ad:c7:c7:5f:8f:63:78:87:97:0f:0f:3d:d1:38:1b:24:b1:da:
ea:5e:8e:88:14:67:92:96:da:a8:4d:b0:d9:93:78:41:a3:52:
b3:c0:95:0f:0b:c2:e2:55:42:7a:6b:1b:08:19:00:f7:84:c8:
df:be:42:92:47:e4:59:fa:d5:ac:ef:2c:7c:7f:25:b7:35:f1:
0b:91:a0:f4:46:9c:6d:dd:68:bc:46:68:bc:3c:da:0e:12:97:
c6:df:93:31:cc:fc:e2:87:62:6e:c0:87:9a:7d:69:0c:2f:c8:
98:a3:a4:23:9e:8a:e8:6a:ce:d8:c9:cb:df:f1:e0:98:9d:e7:
5f:03:da:c9:94:16:64:81:89:d9:0d:4a:36:17:8b:fb:c1:66:
72:d8:e2:e2:39:64:1a:b5:16:32:1b:ad:1d:c8:fb:ab:94:41:
38:08:5a:15:e4:1e:e2:f9:04:7c:f3:c8:f4:bb:31:84:c1:15:
3b:90:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:56:04 2025 by rpki-client