Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vMuPv15czUN3TyQjsF6vfToUN84.roa
File: vMuPv15czUN3TyQjsF6vfToUN84.roa (raw, json)
Hash identifier: z4fYQjlVjkuFyievVhhGkwXvN23Mi1wn1+WiCtl5UkU=
Subject key identifier: BC:CB:8F:BF:5E:5C:CD:43:77:4F:24:23:B0:5E:AF:7D:3A:14:37:CE
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0194244526290DC3204C1F3A95AB9E1FB899
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vMuPv15czUN3TyQjsF6vfToUN84.roa
Signing time: Wed 01 Jan 2025 23:48:18 +0000
ROA not before: Wed 01 Jan 2025 23:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 80.66.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:26:29:0d:c3:20:4c:1f:3a:95:ab:9e:1f:b8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bccb8fbf5e5ccd43774f2423b05eaf7d3a1437ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:1d:69:3f:3c:de:7a:cd:43:de:43:bc:50:
05:2a:cf:da:4f:41:d8:71:d0:96:f0:67:52:81:a7:
fa:be:db:29:c9:ab:97:82:5e:16:a9:f7:65:c6:e6:
69:2e:b5:08:60:e3:69:8c:2b:7a:df:18:58:da:14:
48:08:7d:87:38:cd:ae:f2:a7:f2:ab:28:3e:fb:89:
fd:2f:d5:e8:97:88:78:35:80:9a:b5:3e:88:3b:99:
6c:54:36:b5:c9:a2:7e:63:be:5d:c7:1c:a9:49:39:
93:95:4f:36:9b:08:e2:33:36:4f:2c:c0:c0:79:dc:
7e:c3:dd:2b:b7:83:f0:db:61:51:2a:96:0a:17:80:
0b:02:62:b7:14:fa:8f:aa:b5:e5:c7:15:aa:f9:11:
88:b6:e9:85:69:04:41:75:87:6a:4b:80:56:d6:d4:
a3:b8:09:eb:02:67:47:41:4d:3c:85:88:3c:b9:80:
d2:18:11:87:0f:d4:05:75:6a:30:ea:46:fc:31:32:
3f:6d:ed:08:07:ca:5c:87:6f:8c:fb:fd:ee:4b:5c:
3d:c4:48:87:b9:5b:b7:42:ef:ac:6a:89:0d:f5:2c:
50:97:34:01:5b:11:06:25:1e:97:c3:69:f9:c6:13:
5c:1e:08:6a:74:57:cd:4a:08:b2:75:32:4f:e2:25:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CB:8F:BF:5E:5C:CD:43:77:4F:24:23:B0:5E:AF:7D:3A:14:37:CE
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vMuPv15czUN3TyQjsF6vfToUN84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.84.0/24
Signature Algorithm: sha256WithRSAEncryption
95:94:57:d1:57:76:ca:e3:36:19:64:19:21:c3:06:31:92:8a:
27:52:0c:d9:3a:ba:f4:68:56:26:0c:73:eb:e9:00:d1:95:4b:
79:ec:d4:58:88:d9:58:5c:dd:27:16:57:1e:35:b2:15:be:07:
da:af:10:d2:4d:18:26:a3:6f:3e:79:3e:85:f1:78:9d:2e:0b:
64:68:0e:ee:04:a4:7d:50:30:ff:31:a0:6b:81:7f:5e:1c:ff:
fd:81:70:21:ea:02:ab:96:27:45:c3:2f:c0:4c:7c:c6:ba:00:
67:42:c3:3c:8e:0f:4f:87:48:4b:88:01:1e:21:27:59:b3:c5:
d7:1e:c3:ea:3b:25:ee:d1:5e:ac:06:f7:1d:f4:7b:7d:16:c7:
16:90:91:d8:4c:5e:a7:9d:9e:c1:66:5a:34:05:d8:5c:3e:93:
60:26:f0:44:20:f9:8f:e8:a8:60:b7:8e:31:10:3e:81:d7:4b:
62:74:5d:cd:cf:2d:5c:d1:5b:f6:85:b3:90:74:6a:85:01:3b:
eb:b6:e9:8f:7b:b2:37:2d:5a:e9:73:f7:69:5f:2e:c9:f4:20:
98:72:d5:ff:9d:ea:cd:44:e1:21:35:0d:f7:aa:30:8d:af:9c:
bb:7d:45:07:ab:47:95:87:e5:a2:91:70:b1:5f:b1:db:ae:9b:
98:ae:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:39:44 2025 by rpki-client