Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/2yA59QtsMWk9pMkqZsRhCUNRv5s.roa
File: 2yA59QtsMWk9pMkqZsRhCUNRv5s.roa (raw, json)
Hash identifier: 3lhj+8t7WakD0taOb/n8+n5eS8DbEqnleZ93py5eK2o=
Subject key identifier: DB:20:39:F5:0B:6C:31:69:3D:A4:C9:2A:66:C4:61:09:43:51:BF:9B
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0194244528302B6BAE8CA1A204FCF3F4BB3C
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/2yA59QtsMWk9pMkqZsRhCUNRv5s.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206980
IP address blocks: 80.66.71.0/24 maxlen: 24
80.66.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:28:30:2b:6b:ae:8c:a1:a2:04:fc:f3:f4:bb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db2039f50b6c31693da4c92a66c461094351bf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:c2:af:52:40:98:04:21:50:81:9c:43:61:
cf:48:94:f1:3a:5a:5b:85:6d:31:b5:97:10:1f:ea:
bf:2b:14:87:ea:c0:3e:85:ce:2e:3c:40:4a:87:db:
57:88:33:7e:e1:18:1b:b0:50:95:8a:e1:5f:3f:5a:
8c:f8:32:c8:38:e2:92:50:76:1a:8b:b3:22:15:13:
b6:ae:a1:ab:4d:57:02:f9:62:66:c5:b3:0c:36:02:
03:02:50:d6:05:98:26:14:33:04:b1:5f:28:36:d3:
11:95:d3:c7:43:8e:67:74:86:f3:5e:f0:dc:71:ad:
2d:0a:6f:22:af:1a:96:4d:83:73:77:66:f2:5d:81:
f7:3a:1e:d7:b6:cb:c0:59:91:22:d7:69:13:85:4c:
f3:d1:db:e8:a6:7d:c6:ea:bb:3c:ac:26:63:1a:13:
17:3c:01:b7:7b:52:be:5f:c9:53:13:ed:ca:10:21:
3f:ad:5b:0b:da:8b:85:9e:46:a9:86:3d:1a:7a:65:
59:58:0f:80:82:86:a6:c3:3b:88:79:25:78:7a:48:
63:24:86:ae:67:1d:ac:9d:b7:02:19:f6:c5:1f:e7:
4e:0e:0a:ad:98:33:57:57:a3:9e:10:f5:e0:50:dd:
a7:1d:de:a1:68:3f:4b:8d:29:98:d6:9e:ef:fd:a8:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:39:F5:0B:6C:31:69:3D:A4:C9:2A:66:C4:61:09:43:51:BF:9B
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/2yA59QtsMWk9pMkqZsRhCUNRv5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.71.0/24
80.66.82.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b1:eb:71:02:fa:69:77:80:14:3b:56:73:2e:0d:1a:4a:1a:
bf:db:b1:b5:72:48:6f:d4:05:be:5a:72:b2:07:27:3f:de:62:
1e:45:39:87:12:c3:21:61:c4:27:f0:58:a8:4f:e0:90:cb:9a:
a4:ad:75:a6:10:c8:3e:37:df:22:c2:56:84:45:40:e7:0a:e5:
2e:be:ae:bf:8b:0f:b8:9f:e3:2d:be:cd:3f:e6:2b:94:28:2e:
fb:bc:43:5d:96:0f:01:f3:e7:db:99:ff:b8:0b:36:dd:2b:d7:
ee:25:d2:a5:61:75:6a:30:8c:84:bb:b1:85:f1:59:e2:f5:64:
71:35:af:2b:06:be:4c:0b:3f:83:4c:93:9f:3b:56:2f:08:46:
fa:da:0e:fe:1d:ef:08:b3:1d:15:b2:5c:c0:52:06:da:f9:f9:
25:1e:a9:4e:9c:99:ab:1b:a2:e5:9a:ba:2c:6d:72:54:45:20:
6b:65:23:f5:c8:97:03:41:a4:ff:a5:6c:38:5b:76:80:c1:14:
ca:bc:1c:14:29:85:fa:27:53:d9:ba:fb:d7:db:25:f0:2a:e2:
3a:22:91:48:60:69:84:c2:50:23:e8:ce:42:46:91:9c:33:7d:
a9:d9:91:74:2a:f2:2f:01:fe:a3:56:77:55:75:6e:c6:6b:cc:
dc:cc:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:08:39 2025 by rpki-client