Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/5Mam-Pg9a629tSWFczaVxFg4D58.roa
File: 5Mam-Pg9a629tSWFczaVxFg4D58.roa (raw, json)
Hash identifier: uI87FyR3KvBIESOCI6aSMEI2WoHQnyL7wu0aXhj5lC4=
Subject key identifier: E4:C6:A6:F8:F8:3D:6B:AD:BD:B5:25:85:73:36:95:C4:58:38:0F:9F
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019424452ADD5FBA17D7855468C7EDDBA98D
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/5Mam-Pg9a629tSWFczaVxFg4D58.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211849
IP address blocks: 80.66.75.0/24 maxlen: 24
80.66.77.0/24 maxlen: 24
87.251.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2a:dd:5f:ba:17:d7:85:54:68:c7:ed:db:a9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c6a6f8f83d6badbdb52585733695c458380f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:72:b1:2e:24:77:1a:c6:58:28:0d:98:09:36:
a2:c1:2c:d3:f1:e6:3c:3c:cd:b4:56:c9:2e:a8:b3:
b8:a2:57:43:63:a1:bb:3a:9e:ca:60:91:e9:07:3f:
2f:48:a2:80:4d:8b:b9:8f:03:61:f8:97:67:46:af:
74:2d:01:dd:70:80:86:c4:e8:45:6c:aa:c7:2d:f0:
91:df:49:9b:a2:fc:b1:3f:00:a4:bd:7a:99:cf:2f:
23:bd:94:39:cb:84:13:a2:03:ae:cd:ce:cb:99:41:
d5:74:2b:27:07:43:c8:0c:24:c1:c8:d0:2d:84:4d:
15:3e:43:86:ca:1e:c6:d7:fd:35:9c:65:bd:17:fd:
e2:f2:c3:40:7a:16:52:54:5c:7c:53:32:e0:f7:d0:
f6:74:3d:3a:76:ca:1d:8c:ee:55:ba:c4:38:28:a2:
17:ce:cd:e5:8a:0f:09:78:12:9a:78:c7:6c:d4:bb:
2a:1d:3b:01:c5:27:fd:30:71:64:b7:5f:39:4f:aa:
9c:e6:93:55:36:5c:b8:7a:d0:fb:d9:99:fc:73:f0:
66:c3:a8:c3:22:bb:13:1a:8d:41:34:7f:d6:ac:74:
92:69:2f:67:0c:95:c2:ab:75:fa:8e:13:95:2a:60:
91:f3:f8:18:ac:60:1c:10:07:27:f9:a2:87:d0:15:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C6:A6:F8:F8:3D:6B:AD:BD:B5:25:85:73:36:95:C4:58:38:0F:9F
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/5Mam-Pg9a629tSWFczaVxFg4D58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.75.0/24
80.66.77.0/24
87.251.79.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1f:cf:93:f4:dc:16:00:a8:cd:df:37:d2:20:96:23:8d:98:
7c:14:3f:27:e2:aa:87:c1:6a:bf:c6:c2:67:55:99:e2:e8:f8:
15:4b:9a:76:d5:68:f5:fb:4e:ab:d3:72:ea:2a:09:45:40:d7:
da:e9:b9:fa:75:1e:3d:a4:f0:e1:49:41:d9:76:4e:cc:e0:1e:
d7:04:31:4d:3c:80:f3:3e:d9:a1:16:80:e7:94:19:a3:a7:41:
49:f7:40:7c:f1:1f:36:c3:30:d6:21:b2:d4:d4:ec:8d:85:0b:
fe:57:98:fe:91:d9:b4:47:5b:c4:b3:9c:e4:14:f7:a6:1f:ed:
18:8a:98:92:92:34:32:c1:e4:19:8c:c1:40:1e:ae:6c:21:e9:
38:3c:a1:65:f7:05:c5:36:36:6d:85:4c:b9:09:fa:aa:9a:8a:
97:07:b9:c5:62:0a:3a:f9:05:93:2f:58:f7:cd:55:78:12:b9:
00:0f:82:b2:ac:4a:3f:67:7b:33:b2:1b:ba:39:a3:21:2a:67:
86:46:63:54:b0:1f:0f:3f:ea:e7:05:a2:66:38:68:55:4c:d1:
e0:1d:f1:fd:60:e1:7d:fe:e6:b4:52:2e:dd:b3:b0:98:f9:f1:
82:19:87:87:c4:bf:62:2f:7a:4d:42:1b:25:9f:e0:3b:12:e6:
b0:83:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:01:07 2025 by rpki-client