Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/q4mxRw2cAHFj9M7Ih5d-g_-dD-s.roa
File: q4mxRw2cAHFj9M7Ih5d-g_-dD-s.roa (raw, json)
Hash identifier: 8Y6K+beCDjCkbb41/Xu0GZqKC19CcyaH+HxETt6eMGQ=
Subject key identifier: AB:89:B1:47:0D:9C:00:71:63:F4:CE:C8:87:97:7E:83:FF:9D:0F:EB
Certificate issuer: /CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Certificate serial: 01941FFA952CB0D55EEE563A43BE723F89D0
Authority key identifier: 08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/q4mxRw2cAHFj9M7Ih5d-g_-dD-s.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 80.91.208.0/24 maxlen: 24
2a09:5880::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:95:2c:b0:d5:5e:ee:56:3a:43:be:72:3f:89:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab89b1470d9c007163f4cec887977e83ff9d0feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:64:e1:99:08:52:d1:69:16:d9:9d:10:b0:
d4:4c:ff:38:5b:af:ff:8d:39:3c:8c:51:28:e8:ff:
22:f7:01:1d:70:60:55:83:2f:99:d2:14:49:21:34:
30:ca:32:b5:6d:3d:70:d3:76:29:24:a4:33:4e:73:
4f:ab:f3:c2:bd:e9:c4:58:91:37:f5:00:31:b5:f4:
59:e3:56:21:42:62:22:e6:4d:d0:74:ba:b6:f6:6d:
d1:82:89:b5:c2:45:3f:a9:d3:1f:f7:ae:14:f8:c6:
b1:f6:87:87:d1:5c:61:0a:92:ab:8e:9a:f6:6e:8c:
ba:b1:29:63:8a:da:a0:90:26:9e:c2:07:2c:64:98:
81:e4:6f:8f:d4:53:5f:c3:1c:13:ce:66:60:b8:cd:
91:90:e2:9d:aa:2b:7b:87:15:a8:93:81:a2:ba:e4:
b1:42:12:14:f6:56:33:6b:b4:ea:84:4e:05:4e:04:
c8:2d:9a:9f:97:55:c4:27:0e:10:d4:fb:40:43:d9:
29:38:59:ec:5b:d8:1c:be:b6:1c:36:f7:e8:91:50:
62:fa:4e:91:e6:c7:2e:30:de:79:16:34:d3:91:8b:
89:1a:58:8b:bc:09:1a:f9:cc:8b:5e:6f:d7:a6:7d:
50:60:63:4b:9f:4f:2b:15:24:15:9b:6f:29:b1:5f:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:89:B1:47:0D:9C:00:71:63:F4:CE:C8:87:97:7E:83:FF:9D:0F:EB
X509v3 Authority Key Identifier:
keyid:08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/q4mxRw2cAHFj9M7Ih5d-g_-dD-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.208.0/24
IPv6:
2a09:5880::/29
Signature Algorithm: sha256WithRSAEncryption
0c:3b:94:26:e1:c2:f6:96:75:02:5b:8e:ea:0d:fd:8c:28:c2:
2a:24:ea:07:4a:a6:90:63:28:3f:db:cb:f2:0d:8e:72:c2:53:
cb:c9:44:4e:8f:ca:4e:f7:c7:aa:37:e6:3d:b4:c9:6b:db:5b:
f6:fb:bb:f8:3d:b3:fe:5f:47:5d:f9:66:62:7e:34:92:ff:43:
b4:82:c1:b5:5d:00:9f:d8:f8:35:55:09:8b:44:e4:da:8b:27:
0b:99:11:c0:5b:9b:c7:be:00:61:41:8e:e7:17:2e:a5:80:0c:
23:20:71:21:f8:bd:57:80:28:81:e1:89:b0:13:72:a6:00:73:
30:b2:f8:ad:53:00:23:90:64:7c:8a:c9:03:f0:31:8a:5d:5d:
36:c9:3b:e7:ec:0c:b8:43:bc:38:6f:4c:29:b6:f2:d1:fb:e0:
89:f5:92:43:b2:5a:45:81:42:c9:8f:5f:60:c0:40:9d:60:02:
75:3c:5a:69:dc:d4:32:29:b7:76:ac:ab:67:57:4a:25:d9:b1:
b1:b4:c1:5e:1a:b4:fc:db:e9:69:83:fb:02:35:dd:34:67:33:
91:6b:e2:60:b3:d2:75:db:3d:d5:d3:f3:55:5d:75:10:aa:39:
3e:08:64:33:07:ba:80:47:68:5f:f9:af:15:63:d3:76:9d:70:
6a:21:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:41:57 2025 by rpki-client