Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/yikB75qCLmOR70Lyl75i3suSq54.roa
File: yikB75qCLmOR70Lyl75i3suSq54.roa (raw, json)
Hash identifier: 6RAQHbYTc4wjn8qsz3QMR9klg79Q+jkBfTxmlxzlVAA=
Subject key identifier: CA:29:01:EF:9A:82:2E:63:91:EF:42:F2:97:BE:62:DE:CB:92:AB:9E
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019424452332121A35DC97EBC8A14433BD66
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/yikB75qCLmOR70Lyl75i3suSq54.roa
Signing time: Wed 01 Jan 2025 23:48:18 +0000
ROA not before: Wed 01 Jan 2025 23:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47256
IP address blocks: 80.66.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:23:32:12:1a:35:dc:97:eb:c8:a1:44:33:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca2901ef9a822e6391ef42f297be62decb92ab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:46:1f:da:72:ab:18:3a:1f:cc:eb:72:b1:
ef:93:8b:e2:98:63:ad:2f:5d:ca:5f:57:b2:83:10:
37:00:ac:28:70:96:f4:fd:63:2c:03:94:db:4d:09:
1f:d4:e4:ac:db:b8:3d:08:20:f0:12:6f:44:7c:ba:
ea:ec:4c:d8:e4:0d:74:e7:fd:8c:db:5e:a0:6b:16:
28:a9:5f:dc:37:ed:e3:05:5d:32:48:3d:9b:67:b5:
a2:02:1b:b9:9b:35:b0:79:a0:7e:5a:17:b9:34:21:
21:6b:9d:49:85:a0:74:7b:b1:f6:c4:cf:ce:94:c8:
08:41:e2:2e:78:91:10:62:5a:81:34:a3:e1:8e:5d:
e3:be:5d:64:6b:10:63:cb:f6:d1:76:00:ba:c2:aa:
4f:56:19:7b:d0:64:dd:a7:c8:2e:d3:a6:16:da:20:
5b:7e:c2:d9:88:1f:3b:74:b7:47:21:e1:03:7d:13:
97:c1:5a:09:a6:93:7f:e8:e1:d3:37:81:f1:8f:e1:
3f:86:00:0f:af:b7:8d:a3:e5:f4:e6:11:44:0d:14:
37:d2:5f:18:ae:7d:9d:fd:c3:f9:f5:1a:e8:e4:8e:
2a:8c:cc:2a:9d:f8:84:03:b6:e3:03:8c:45:a9:4b:
53:61:42:8b:95:fb:85:2e:02:aa:76:04:af:13:46:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:29:01:EF:9A:82:2E:63:91:EF:42:F2:97:BE:62:DE:CB:92:AB:9E
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/yikB75qCLmOR70Lyl75i3suSq54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.70.0/24
Signature Algorithm: sha256WithRSAEncryption
27:08:1c:f9:53:d7:2a:d3:a3:36:b4:f4:b8:fd:a1:e2:9a:98:
99:70:6d:d7:3a:a7:d9:68:48:a8:a4:05:95:79:20:0b:d3:d8:
79:97:0e:27:e2:ad:0e:86:06:bc:3b:bb:bd:21:1e:96:03:ce:
71:75:06:9a:2c:00:cf:0d:80:07:4d:08:27:a4:3a:a5:16:4e:
e9:40:cd:14:05:e4:28:de:32:e8:f2:60:04:bd:94:1f:a2:f5:
5a:8c:8f:03:c8:5e:81:49:2f:cb:18:55:be:53:c7:8f:e4:34:
c9:73:7d:0b:9f:6c:ab:32:d0:f1:0d:25:f6:f7:56:47:72:ff:
79:48:41:f0:4d:ba:f2:b0:5a:77:7d:d2:bd:57:3d:b6:00:a2:
bd:7b:a5:a3:4d:46:69:bc:32:7d:9f:c1:6a:1f:b3:95:70:b3:
e6:d0:8f:96:e3:4c:00:82:ff:e3:a9:54:83:08:fa:f7:4a:a9:
ce:d3:1f:6c:27:10:03:82:26:d6:d2:ae:0f:c9:11:1c:c7:7e:
97:a5:ff:29:f0:dd:d0:47:d6:89:61:49:97:5f:e7:f0:4e:97:
ce:7f:1b:6d:5b:e4:99:fe:27:7d:90:1f:01:06:08:18:b1:31:
39:7d:5c:d1:32:cd:ff:82:23:86:4f:29:e0:0c:10:3d:20:74:
89:4f:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:01:10 2025 by rpki-client