Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/xJs9bo-w5TvWpljc1sQfqueBbtQ.roa
File: xJs9bo-w5TvWpljc1sQfqueBbtQ.roa (raw, json)
Hash identifier: TAtPCmil9M2Rr0khwcHfGhF81jVdFJvO7+4kHsp/Iv8=
Subject key identifier: C4:9B:3D:6E:8F:B0:E5:3B:D6:A6:58:DC:D6:C4:1F:AA:E7:81:6E:D4
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01942445279BCDFFA031808CE664018ED14E
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/xJs9bo-w5TvWpljc1sQfqueBbtQ.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201671
IP address blocks: 80.66.87.0/24 maxlen: 24
193.37.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:27:9b:cd:ff:a0:31:80:8c:e6:64:01:8e:d1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c49b3d6e8fb0e53bd6a658dcd6c41faae7816ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:81:fe:dc:90:cd:8e:c4:da:8d:fd:26:ae:
35:24:a7:73:19:d5:ab:cf:c3:b5:57:61:c1:25:9d:
17:35:0c:e0:7a:ac:f4:0e:89:7a:cf:5f:a5:b7:96:
0f:1e:a1:e4:f1:33:a1:0c:ee:dc:27:d9:b0:9b:68:
7d:7e:bd:ce:82:fd:fc:84:9f:d6:44:fe:54:53:ac:
2e:18:93:e1:11:06:d2:9b:62:60:af:7c:d2:a4:72:
54:24:be:67:d4:fd:42:5a:d6:2a:36:27:39:15:cb:
99:44:ac:5f:f6:00:34:26:3c:af:59:58:71:11:68:
b8:a6:34:b0:47:f8:0e:e6:e7:37:69:8e:13:70:86:
a0:82:ed:89:7e:e5:52:3c:6d:d7:48:db:90:8a:16:
1a:68:c1:eb:b1:83:5d:8a:23:56:ca:5d:31:cc:cd:
12:76:5b:74:30:a0:71:37:bc:46:dc:fa:0b:8e:04:
31:a1:1a:1a:5f:46:b8:77:9b:c6:97:b0:a6:0d:94:
60:45:6d:b0:3b:ed:2e:8d:1a:90:37:43:7e:bf:cb:
88:97:bf:c6:78:5b:9d:a2:dc:cd:f0:9e:07:5c:c4:
d4:27:97:75:be:de:49:f9:13:d9:e2:c2:78:64:be:
62:e3:a0:6c:d5:be:63:6b:74:7a:a7:4c:cb:f0:ab:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:3D:6E:8F:B0:E5:3B:D6:A6:58:DC:D6:C4:1F:AA:E7:81:6E:D4
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/xJs9bo-w5TvWpljc1sQfqueBbtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
193.37.71.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5f:cd:15:1a:a4:63:8e:a6:16:c3:ac:2d:f9:a9:69:ee:12:
80:52:26:ff:89:e0:40:71:4d:14:b2:53:4d:12:9a:85:13:fe:
a4:c3:5b:fa:97:34:1a:63:91:34:95:2b:31:50:86:1f:ad:26:
4c:bf:cb:0c:4b:a9:f6:4c:42:d2:86:33:27:61:3d:e6:e0:88:
a5:db:09:93:df:8d:43:48:e6:11:80:db:19:6f:2e:20:64:18:
86:da:b5:bb:96:24:ec:d0:58:ae:b2:d4:8f:70:0f:eb:e7:dc:
40:58:ad:2d:e9:1e:34:36:b6:61:a0:a6:60:ba:47:8b:a8:1a:
14:28:09:00:2b:a8:7b:6d:13:01:21:8b:d0:ac:5d:6b:8d:dc:
27:a0:0b:5b:ff:bd:75:4d:da:87:44:b0:11:13:ce:dd:3d:97:
16:c1:d9:95:05:e8:f6:2b:a0:0d:0c:88:4e:42:b8:76:26:d7:
ac:7a:e3:f1:b1:42:19:71:1f:7b:48:22:60:66:90:aa:0f:81:
e3:3b:f0:4c:db:48:b5:52:20:6b:6c:bc:0d:96:61:5b:bd:81:
09:df:f7:d9:22:68:60:24:4f:e5:e5:fb:ef:82:8f:79:f3:2c:
c2:21:4d:13:57:8a:e7:d6:68:5e:8f:ba:54:ee:f7:cb:fb:85:
02:d1:71:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:50 2025 by rpki-client