Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/KV367d6Zsc-zqT-odrHl0DYDJsM.roa
File: KV367d6Zsc-zqT-odrHl0DYDJsM.roa (raw, json)
Hash identifier: FKc2KZrRBCocDmqxqhbBguDKolkUjxKD7WOeyPk9toM=
Subject key identifier: 29:5D:FA:ED:DE:99:B1:CF:B3:A9:3F:A8:76:B1:E5:D0:36:03:26:C3
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0194244527698CC13AFA23F9A666D8AE868B
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/KV367d6Zsc-zqT-odrHl0DYDJsM.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 80.66.87.0/24 maxlen: 24
80.66.89.0/24 maxlen: 24
87.251.77.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.88.0/24 maxlen: 24
87.251.89.0/24 maxlen: 24
193.37.70.0/24 maxlen: 24
193.37.71.0/24 maxlen: 24
194.113.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:27:69:8c:c1:3a:fa:23:f9:a6:66:d8:ae:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=295dfaedde99b1cfb3a93fa876b1e5d0360326c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:50:bd:7e:45:d0:70:0a:9a:57:9d:6d:05:
4c:eb:cc:b0:e0:a8:d6:7e:90:35:4d:32:1c:22:f2:
f9:ca:7c:41:85:05:e4:78:a7:13:a8:e7:21:a8:26:
47:c5:b9:ea:82:15:94:a5:61:4a:1f:67:bf:ee:46:
64:47:e0:57:e3:74:8c:6d:14:64:24:72:ff:4e:e7:
6c:ca:ed:61:32:ce:c7:54:a9:d5:30:ca:16:e3:28:
1e:1e:fc:8c:24:54:cc:41:e6:37:6b:2b:2a:df:2a:
d0:ea:5c:f7:43:a1:68:11:17:98:dd:b5:8f:e2:3d:
00:9a:32:57:86:a1:da:40:8e:d9:01:52:38:36:83:
14:f2:0d:9d:4b:74:ab:8f:d8:a8:56:0d:91:e2:28:
c7:ce:ca:2c:e6:29:5c:66:6e:73:df:56:4d:3c:e4:
63:9d:fc:3d:b9:15:cf:66:2f:fb:bc:e9:a2:a0:9d:
3d:b1:29:99:ec:91:fc:58:cf:d8:86:f8:75:72:96:
3a:55:3f:6f:1f:11:2b:71:c3:70:2d:b1:9c:d0:6e:
4a:c2:bc:f0:51:a2:a3:a0:b1:92:21:c4:39:42:d6:
42:81:77:06:74:26:68:33:b1:81:07:7f:66:91:e8:
40:20:47:fc:44:32:0c:6d:91:96:31:c2:3a:af:10:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5D:FA:ED:DE:99:B1:CF:B3:A9:3F:A8:76:B1:E5:D0:36:03:26:C3
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/KV367d6Zsc-zqT-odrHl0DYDJsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
80.66.89.0/24
87.251.77.0-87.251.78.255
87.251.88.0/23
193.37.70.0/23
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
23:65:ef:7f:6e:d0:53:c1:d8:54:cf:dd:39:19:60:40:d8:41:
c2:fc:85:70:0c:68:c7:c5:ad:4e:db:4e:7d:9b:79:f8:a6:aa:
e3:31:66:cd:b0:68:6d:3f:3e:42:23:e5:64:1d:84:e4:44:52:
23:4b:11:e6:25:75:24:02:86:b1:5e:63:c6:68:86:b2:a8:15:
2c:a6:1f:1f:90:57:36:8e:4a:58:22:75:ca:0e:7e:fa:16:2f:
46:c5:4f:aa:e0:2c:fc:26:fb:11:65:23:21:47:04:3f:4f:93:
bc:2a:ca:5b:97:26:d0:e6:f7:29:48:0c:84:d2:a1:53:6d:67:
e8:54:53:21:3b:fa:a0:49:a0:50:d4:a2:33:f6:d0:07:bc:41:
2d:9e:d3:73:a8:c4:28:05:52:70:d2:90:af:6d:8f:87:fb:7b:
44:0e:89:2c:f9:8d:93:08:14:b7:9c:0e:51:95:19:a6:75:12:
6f:d5:9b:24:3c:b1:b7:54:df:a9:8b:82:63:b9:e6:09:2b:a9:
f5:68:5f:04:01:1a:18:78:30:1a:83:9b:05:a0:85:78:e4:ee:
26:b2:11:ac:1d:be:42:fa:7d:67:f1:fa:7c:13:6f:72:2e:da:
34:b7:34:85:05:d8:65:b3:4f:4c:06:67:4b:42:ec:85:c8:87:
9c:c5:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:41 2025 by rpki-client