Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa
File: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (raw, json)
Hash identifier: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=
Subject key identifier: 4D:62:CC:C5:66:1A:75:43:A3:A5:F5:92:A1:18:DD:CF:88:24:41:54
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 0194228DCCBD80EAF677F2991FDD4CF196ED
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6878
IP address blocks: 80.158.0.0/21 maxlen: 24
80.158.0.0/23 maxlen: 23
80.158.16.0/20 maxlen: 24
80.158.31.0/24 maxlen: 24
80.158.32.0/19 maxlen: 24
80.158.72.0/21 maxlen: 24
80.158.80.0/20 maxlen: 24
80.158.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cc:bd:80:ea:f6:77:f2:99:1f:dd:4c:f1:96:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d62ccc5661a7543a3a5f592a118ddcf88244154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:3b:a8:3f:40:5d:00:0c:66:78:fa:e7:6d:
4e:51:be:d5:7e:e3:46:cd:07:92:95:34:de:d8:51:
19:a4:b8:a5:16:84:c2:e4:bc:fa:a7:40:57:50:90:
8d:00:a8:5e:f3:ea:a4:86:7c:e4:07:f0:89:dd:b1:
a6:78:4d:3e:99:1e:d1:5b:82:9a:3b:9d:db:4f:62:
1c:1f:d0:cd:a1:e7:37:4d:ad:c8:39:f5:6c:d8:2c:
eb:33:87:56:78:35:71:ea:f4:46:f6:5b:f1:d7:1f:
4f:a9:f0:4c:5c:37:b8:53:cc:0a:37:68:a1:ad:0f:
5d:6f:9f:b7:5e:09:44:61:02:67:76:94:8d:a4:a2:
2b:2b:da:3a:42:c5:f9:d3:14:d7:2e:f4:96:98:21:
76:48:b0:75:b2:00:6f:5f:90:7c:4b:dd:14:3b:6c:
dd:40:a0:62:12:b7:dd:5e:b8:2d:d7:88:2c:32:ce:
a9:5a:75:b2:5f:69:74:92:44:aa:8a:f1:9d:a2:0e:
9d:f4:60:85:af:cc:c2:ba:89:1e:57:4b:e8:25:84:
f8:ca:d6:1f:b7:54:10:07:4a:4d:11:3a:3b:cd:25:
30:ac:0f:dd:a7:eb:f7:4d:1b:74:51:1b:51:03:0d:
42:7e:64:51:0e:a2:db:37:69:b1:33:cf:23:cf:45:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:CC:C5:66:1A:75:43:A3:A5:F5:92:A1:18:DD:CF:88:24:41:54
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.158.0.0/21
80.158.16.0-80.158.63.255
80.158.72.0-80.158.127.255
Signature Algorithm: sha256WithRSAEncryption
79:bc:89:b1:76:89:f0:b5:6e:ce:98:9b:fc:38:c8:a8:ca:63:
8c:40:dc:3f:3f:fb:97:ae:95:ea:f9:56:a0:d8:99:ce:3f:fc:
b8:71:7d:bc:7a:fe:e2:42:0e:1c:ee:69:38:b0:90:99:83:7b:
4d:8c:d8:43:2a:80:8a:58:dc:a1:e3:d6:fc:6d:82:fc:d4:bb:
41:85:08:32:9c:fe:61:fa:e4:a2:0b:45:e3:28:c1:f5:f4:6d:
46:1d:d1:8d:d9:04:0a:29:2e:b9:ec:cb:4b:cf:2c:ba:11:b6:
07:9c:be:b2:e1:df:6f:2d:1a:a3:fc:28:fe:ef:f6:f8:69:ad:
bf:c0:5d:27:5f:1e:54:a2:8c:ac:89:93:b6:3d:0d:e4:3f:13:
40:61:c4:c0:aa:07:37:0b:86:32:09:48:52:93:b1:18:93:e7:
4d:97:88:1a:5c:f8:0c:0d:0f:46:ad:ab:73:d3:a5:60:cf:b1:
34:60:94:bd:ac:2b:02:d9:b1:61:ee:35:a6:c0:bf:b1:a8:c7:
e5:e3:d3:ea:55:be:94:d9:8d:9a:e9:2f:cb:86:d5:95:29:2d:
44:ff:4f:89:18:e8:12:c0:92:7d:6b:72:a4:0e:6a:9d:4d:ab:
a5:e9:c2:8f:94:35:fe:4e:5e:f3:94:90:87:a6:2e:c1:61:a2:
e4:fe:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:21:05 2025 by rpki-client