Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa
File: 2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa (raw, json)
Hash identifier: 7pIfh2Q654qMx1AmZFUCn+BOOHgc4UU06A+k+bghDdg=
Subject key identifier: D9:76:4D:25:D4:7D:21:EA:74:63:0B:1E:A3:CF:BC:88:93:01:F1:38
Certificate issuer: /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial: 01941FFA25FD0003C290682E03517246C59E
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 80.75.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:25:fd:00:03:c2:90:68:2e:03:51:72:46:c5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9764d25d47d21ea74630b1ea3cfbc889301f138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:75:5b:19:ab:51:b3:9c:7a:53:51:29:3e:d5:
6e:de:9a:e2:8d:39:25:a9:84:dd:eb:af:fb:59:26:
89:c9:3b:b7:3b:5f:c0:61:8c:77:6e:c0:21:ff:66:
ea:87:b9:41:38:61:05:3b:f9:3d:03:7c:a8:e9:1b:
77:67:d8:69:33:c2:8f:6e:82:f4:e4:4c:91:67:57:
08:c6:6e:6a:12:0d:a4:73:12:d7:3d:f4:82:19:aa:
89:23:24:f9:54:0e:92:1a:d8:b5:e4:df:ab:aa:88:
a2:39:32:17:86:a2:91:c4:23:a1:82:51:6d:da:67:
b8:4b:ee:ad:27:e4:2b:6c:bd:6a:d9:c2:1c:73:b1:
a0:1c:1c:76:31:06:14:0c:ce:bf:9a:6a:5e:a3:b0:
46:68:cf:6e:1e:17:22:74:2e:f2:5d:28:95:70:05:
24:b8:35:10:74:1c:51:67:0c:35:40:76:0d:52:91:
f2:e6:cb:16:6e:f9:47:e6:00:ad:ca:53:d4:2d:a7:
58:32:10:d9:e7:55:13:f4:9e:b2:19:92:02:64:b4:
e6:81:51:39:55:11:a3:22:72:a4:02:1a:40:5c:a9:
4d:61:f9:08:0a:82:89:11:b7:03:8e:e4:14:95:8e:
7a:1c:7c:7e:69:8d:78:9d:7e:4f:ad:f9:40:e8:37:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:76:4D:25:D4:7D:21:EA:74:63:0B:1E:A3:CF:BC:88:93:01:F1:38
X509v3 Authority Key Identifier:
keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:df:23:fe:8d:b6:f5:52:47:21:6c:30:67:b7:2e:83:22:21:
f3:b0:d6:26:a4:6c:52:f5:8d:f0:a1:8a:dc:c0:04:51:68:20:
94:97:50:9d:e6:8e:64:84:e2:5f:53:5a:e2:37:05:28:2c:31:
b4:9b:c5:c8:e3:32:13:49:26:d9:4c:6a:34:b1:d9:3b:bb:4c:
f4:38:1c:76:01:9a:21:4d:5b:c3:4e:be:3a:b7:00:c6:4f:97:
1f:ca:08:d9:88:97:aa:2f:d9:ba:c4:28:11:c1:d5:29:c6:a1:
0f:cd:70:be:d2:21:6c:4b:5c:d9:40:b0:c1:f3:50:e7:a8:29:
0b:db:07:6a:92:cf:05:d2:e1:fb:e3:4d:c0:8f:74:8d:8c:08:
d4:aa:0f:be:d4:19:47:8c:b6:16:b6:1d:15:ff:d7:f7:f3:72:
a3:4d:6f:1c:f8:a9:a5:ce:8b:87:17:fd:c3:c8:1b:15:4f:3e:
98:86:e0:aa:4e:9d:cc:0d:c7:35:1e:cf:a1:c3:7e:b2:fe:3e:
d9:5a:26:4d:61:0a:00:7c:5b:ab:cf:44:9c:b6:11:91:d6:b3:
21:e6:3b:89:fd:12:db:51:f5:49:84:f2:05:da:84:db:95:7a:
8e:37:05:63:b4:d8:86:5e:a4:a1:63:87:04:36:1f:15:d6:a4:
d4:b9:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:02:09 2025 by rpki-client