Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/ZMHgBF6_kXHsbtGxidOgPnulsOI.roa
File: ZMHgBF6_kXHsbtGxidOgPnulsOI.roa (raw, json)
Hash identifier: 2MvcWM7LYuDCn9kAec8ezprwF0U0kxpQp7kgRtfVW9k=
Subject key identifier: 64:C1:E0:04:5E:BF:91:71:EC:6E:D1:B1:89:D3:A0:3E:7B:A5:B0:E2
Certificate issuer: /CN=960bffd0d0fb5b68f0871738520dcf42284cfa38
Certificate serial: E1F744
Authority key identifier: 96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/ZMHgBF6_kXHsbtGxidOgPnulsOI.roa
Signing time: Sat 01 Jan 2022 11:53:49 +0000
ROA not before: Sat 01 Jan 2022 11:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 80.71.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14808900 (0xe1f744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960bffd0d0fb5b68f0871738520dcf42284cfa38
Validity
Not Before: Jan 1 11:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64c1e0045ebf9171ec6ed1b189d3a03e7ba5b0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:d4:1a:0e:2a:bf:25:2c:33:0b:1d:0f:19:
4e:b5:a7:a2:e4:42:cb:86:06:66:b6:21:1d:0c:e3:
f4:35:ed:fe:49:e2:d8:1c:c0:62:92:ee:27:c3:24:
3a:32:ee:b3:21:d2:f5:2f:c1:11:fa:7a:88:38:73:
f8:a0:7c:a6:7a:ce:67:a6:62:89:4e:a3:48:bd:ed:
45:4a:da:90:a0:8c:aa:c7:27:a7:34:f4:d5:f2:a5:
15:26:1b:ce:94:b5:9b:5c:cf:02:8d:9a:87:fe:0f:
53:86:4d:01:ae:c1:45:f5:9b:4d:a0:f5:a1:6f:6d:
16:8d:79:e9:86:c8:a0:05:d8:2b:fc:b2:91:0b:43:
fa:35:ef:ea:d6:de:91:83:98:fa:e6:fd:c4:29:f3:
8e:37:96:a5:72:21:ec:8d:4c:65:84:e3:22:a3:2c:
a5:86:05:73:ab:d7:6a:65:1a:86:ea:24:db:a7:7d:
25:49:be:70:66:b5:f3:da:4a:a5:1f:a9:7a:13:db:
69:82:07:1b:66:82:c9:b9:b7:1c:75:92:73:16:3f:
b9:74:c7:0a:4d:fd:fc:26:82:cf:2d:dd:3d:33:a3:
2a:2a:db:ed:2b:e8:24:12:7e:5d:cf:74:9a:9d:49:
55:ab:3f:5f:2e:37:37:c6:13:6b:69:84:3b:ce:ae:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:E0:04:5E:BF:91:71:EC:6E:D1:B1:89:D3:A0:3E:7B:A5:B0:E2
X509v3 Authority Key Identifier:
keyid:96:0B:FF:D0:D0:FB:5B:68:F0:87:17:38:52:0D:CF:42:28:4C:FA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgv_0ND7W2jwhxc4Ug3PQihM-jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/ZMHgBF6_kXHsbtGxidOgPnulsOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/278826-3d5c-427a-814f-8ee2f6178595/1/lgv_0ND7W2jwhxc4Ug3PQihM-jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.150.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2a:10:2b:0d:25:e4:d1:5f:65:23:ff:0f:fb:39:d2:b0:80:
22:5b:9a:c9:0a:ff:af:0e:b5:5a:f6:7e:5f:b7:07:67:33:e7:
05:c7:b5:fe:fd:ae:c5:a1:1d:13:2d:9b:29:4d:70:c7:4c:42:
94:86:86:03:7b:9e:06:83:a3:fd:18:8e:89:2e:b2:b3:fe:3e:
05:f8:c7:7c:4f:69:00:66:63:04:5a:2c:17:0a:33:1e:2c:53:
01:1b:32:9c:cb:c7:d7:f5:d1:a5:90:16:73:17:a7:21:f4:30:
e9:ed:68:b0:63:3a:ae:89:8c:a9:8c:e2:05:00:7e:79:1b:f0:
73:f2:ae:17:e9:46:df:87:e9:5b:f7:f2:67:44:fa:43:04:c7:
bf:75:bc:cf:82:8f:b0:8e:ef:44:29:5d:98:6f:62:42:9f:51:
00:e6:ee:e3:e0:85:87:1d:75:e8:fd:cf:ca:eb:70:ab:a1:a9:
58:5c:92:dc:3e:5b:39:fe:cc:61:d5:e8:8a:30:11:ed:55:45:
40:89:df:f2:e2:d7:bc:6b:f8:de:52:d5:d2:fb:5e:26:74:53:
93:6a:d5:22:ab:a0:25:b3:17:7d:94:45:46:8a:52:96:77:d7:
3f:93:63:6c:a5:94:c1:84:8a:4b:f1:93:91:c3:cf:7f:ff:e9:
c9:04:ec:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:06:58 2025 by rpki-client