Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/1-9kyTG57lW5pauShjAbSgqx7ELA.roa
File: 1-9kyTG57lW5pauShjAbSgqx7ELA.roa (raw, json)
Hash identifier: yqYBQ/TJzQNk1+uZ7N56AeKifi1WJfBnexFUg+0LLyM=
Subject key identifier: FB:D9:32:4C:6E:7B:95:6E:69:6A:E4:A1:8C:06:D2:82:AC:7B:10:B0
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0195B43D49E630EFB7FF18785DE85E108A42
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/1-9kyTG57lW5pauShjAbSgqx7ELA.roa
Signing time: Thu 20 Mar 2025 15:47:50 +0000
ROA not before: Thu 20 Mar 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213010
IP address blocks: 80.66.76.0/24 maxlen: 24
80.66.88.0/24 maxlen: 24
87.251.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:3d:49:e6:30:ef:b7:ff:18:78:5d:e8:5e:10:8a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Mar 20 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbd9324c6e7b956e696ae4a18c06d282ac7b10b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:6d:22:ba:95:bd:93:2e:0f:17:6b:8f:78:
06:39:1c:9e:50:da:0e:b6:7e:59:b4:97:bb:50:24:
d8:7d:56:e5:bb:99:b2:8a:a6:68:68:6d:8d:c9:98:
d4:d4:bc:39:03:77:44:40:ac:f2:37:a1:fe:ab:6c:
c3:58:91:dc:99:37:a1:76:62:15:6c:ad:d9:5f:dd:
e3:9a:18:8f:d3:9f:f9:16:b6:5a:40:3f:c2:4b:06:
f9:99:26:7a:9a:cb:f2:33:06:e1:cb:33:42:14:85:
e6:84:1f:84:99:06:d3:02:d4:1e:7f:76:62:a5:f5:
ab:59:f4:ed:bc:d3:a0:f5:a3:47:d5:e1:78:1c:4c:
e6:db:6e:bf:5b:c7:1a:29:d6:b6:12:96:88:3c:2a:
1b:8b:45:4d:ac:69:aa:0d:f6:cf:60:30:b0:62:e6:
a6:ed:18:b5:c5:48:cb:eb:85:47:36:d8:ba:30:71:
43:64:7f:0e:2c:bf:b9:b1:62:ce:97:81:2f:b4:60:
ce:79:5c:b5:f9:9d:02:37:55:57:3b:91:61:f7:b8:
b7:65:91:80:d8:76:94:7b:00:20:49:91:49:53:83:
c3:fd:e8:f1:93:c9:32:e4:be:67:e4:32:1d:da:f9:
ca:3d:b9:da:71:d5:98:f9:db:ea:0e:db:b7:7f:08:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D9:32:4C:6E:7B:95:6E:69:6A:E4:A1:8C:06:D2:82:AC:7B:10:B0
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/1-9kyTG57lW5pauShjAbSgqx7ELA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.76.0/24
80.66.88.0/24
87.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:08:38:3a:62:0c:9c:40:9a:a1:d2:2a:01:4a:77:c3:42:6a:
72:52:58:08:5d:83:09:eb:ea:4b:ae:3f:fc:ea:8f:23:2a:c0:
6c:38:3f:31:ab:cb:ba:36:5e:b2:85:40:6b:84:5a:26:99:08:
7c:59:a6:e3:b4:7c:58:8e:43:87:1b:8f:97:cf:cf:87:05:b5:
ed:b6:1e:98:ae:8a:6d:7f:2e:c7:75:79:45:3b:44:b4:5f:59:
2a:aa:aa:0b:62:b7:ff:01:de:58:d1:e8:3e:37:cf:9b:5e:32:
a3:24:bb:e0:3d:30:88:36:59:9d:fc:e4:65:c8:cf:00:fd:a0:
8e:0b:55:07:3c:f1:c7:fa:fd:d0:7f:e6:ac:88:dd:a0:f5:66:
94:a4:b4:30:c5:ea:a1:25:e1:d7:83:5a:8f:64:b1:de:5a:1a:
f4:46:1f:9f:51:d6:1a:43:b4:a6:ce:65:8b:31:27:14:0a:73:
b9:02:a3:29:75:dc:43:00:cf:e6:bd:d8:76:75:14:54:e6:c0:
07:83:85:75:19:58:d3:d6:6c:5c:81:7d:b3:e4:e4:7a:5b:db:
1f:25:27:4f:f5:24:52:80:f4:89:97:ef:7d:47:53:0b:43:ef:
f2:fc:a9:08:f3:10:c2:b2:7b:7c:70:46:e1:44:56:5f:1f:10:
00:a2:9e:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:15 2025 by rpki-client