Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa
File: 1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa (raw, json)
Hash identifier: YOIx0vdDTm8aI5i6BKD8DQMTRGZfl2c7wVpH1Ojrc4w=
Subject key identifier: D5:41:41:EC:27:02:0E:4B:C0:85:29:7B:04:1E:1F:C8:A5:C5:86:56
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01942220007492ADE07F9BCEEE60AFD9B74D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51280
IP address blocks: 212.80.25.0/24 maxlen: 24
212.80.26.0/23 maxlen: 24
212.80.26.0/24 maxlen: 24
212.80.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:00:74:92:ad:e0:7f:9b:ce:ee:60:af:d9:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d54141ec27020e4bc085297b041e1fc8a5c58656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:4d:8b:90:cd:5f:d8:33:ee:e8:9c:bc:0e:
5d:52:7c:3b:38:e9:50:72:1a:a9:76:0a:d8:c0:e8:
05:64:8a:a3:6d:e4:ef:8a:cc:46:f0:60:eb:ee:07:
72:50:af:ce:7b:df:e0:ed:86:b5:12:af:aa:d8:45:
85:ec:d2:0b:c0:3b:83:70:c3:5f:d5:61:36:bc:25:
b6:c8:68:4a:b5:ed:68:ee:08:84:cd:e5:50:68:de:
86:83:cf:9e:40:f6:8b:29:e6:0b:9a:d0:fa:42:06:
a5:a0:7c:8d:d0:d7:83:20:52:79:f3:85:fd:b6:b2:
1d:78:db:03:d5:dc:9a:f2:7d:3f:9d:8b:57:3f:0e:
dc:9d:3c:20:00:ed:f8:14:cf:a1:a0:86:fc:b7:f4:
20:7a:67:04:e2:e5:d9:eb:03:aa:f8:fc:f1:41:2a:
85:2d:15:89:4a:8d:33:a2:05:5c:c2:02:5d:6b:2b:
83:a2:bf:0d:44:8a:f7:a4:db:70:ef:bd:c0:4f:83:
ba:1c:70:2b:63:90:49:57:7d:ca:0d:5f:df:0c:c4:
b7:37:61:44:10:d6:60:fc:2a:97:77:c8:b7:7c:83:
c9:0e:03:fa:b5:b4:04:cb:dd:22:3a:f6:c4:b2:8b:
d3:92:0b:87:53:ac:6f:86:9e:be:a3:d4:09:85:d3:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:41:EC:27:02:0E:4B:C0:85:29:7B:04:1E:1F:C8:A5:C5:86:56
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.25.0-212.80.27.255
Signature Algorithm: sha256WithRSAEncryption
25:50:24:eb:9d:14:7e:6e:f0:ed:5d:59:df:af:e8:7e:1f:b1:
bf:e7:90:76:a9:15:94:9f:24:8c:77:76:10:b7:39:9d:8d:20:
fa:7c:d9:3f:8e:63:e0:6d:63:26:f9:f8:fa:b7:a3:f5:80:e4:
f5:23:99:bb:a6:86:06:f1:42:2f:96:50:1d:13:14:f4:b5:d1:
71:c2:a5:63:80:2d:30:e2:a2:cb:a0:fa:3a:24:a2:ad:35:70:
02:06:ae:01:3b:44:f7:64:fd:8b:dd:21:52:9f:1e:3b:6b:46:
c9:86:57:67:c4:f4:b5:52:e6:3a:6e:36:9c:e3:8b:d7:15:5a:
15:b5:61:31:68:e1:a1:9d:1a:df:9f:43:81:f0:f4:45:cb:6d:
da:d2:57:b0:a7:0a:c2:5e:d0:f2:60:01:19:65:1e:03:d6:a5:
02:68:31:7a:bc:c2:43:55:e4:eb:01:c8:69:ec:2d:86:3b:05:
e6:cf:85:23:61:07:09:e7:a7:ee:2b:94:d3:51:2a:a1:c6:32:
aa:4a:56:9a:37:46:cc:d2:1f:06:56:83:9a:ea:61:ee:79:dd:
a0:90:8d:02:83:bc:c3:35:33:44:3a:fb:c3:4a:00:7d:e7:83:
91:1a:7e:b9:ed:30:88:dd:5e:c0:f6:1b:59:75:f1:31:d4:35:
88:70:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:01 2025 by rpki-client