Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/toDz-eXYoKn5HMf12lxhpwVTSrE.roa
File: toDz-eXYoKn5HMf12lxhpwVTSrE.roa (raw, json)
Hash identifier: BkiVUV2wj8xnyvPRwqBXLfVemqkCOCSfRToYRycbKtc=
Subject key identifier: B6:80:F3:F9:E5:D8:A0:A9:F9:1C:C7:F5:DA:5C:61:A7:05:53:4A:B1
Certificate issuer: /CN=dde54706f1767065092e9e02a44da24b6628e88c
Certificate serial: DE770D
Authority key identifier: DD:E5:47:06:F1:76:70:65:09:2E:9E:02:A4:4D:A2:4B:66:28:E8:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/toDz-eXYoKn5HMf12lxhpwVTSrE.roa
Signing time: Sat 01 Jan 2022 05:56:05 +0000
ROA not before: Sat 01 Jan 2022 05:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207046
IP address blocks: 80.71.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14579469 (0xde770d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde54706f1767065092e9e02a44da24b6628e88c
Validity
Not Before: Jan 1 05:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b680f3f9e5d8a0a9f91cc7f5da5c61a705534ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:55:05:7b:b6:85:46:66:0e:13:45:a2:e8:
dc:2a:4c:7d:d8:60:78:7d:3a:83:75:99:3e:f6:23:
19:10:b3:fd:b2:62:a2:69:5e:7e:46:9d:86:7b:1b:
a3:f1:49:f5:8a:81:c5:72:28:fd:44:fe:13:02:53:
66:03:14:46:85:9a:23:67:15:2c:75:7c:39:35:71:
a9:cd:4a:27:2c:a8:3d:e8:dd:a6:7f:d6:ee:2d:ea:
7a:e9:3f:30:b4:11:fa:f9:fa:cb:76:a4:53:5a:9f:
2f:73:a2:ae:81:3d:33:4e:a7:05:49:af:29:6d:61:
07:da:24:a0:36:91:30:00:4f:6b:cc:05:00:34:5e:
a5:ee:8e:35:a9:52:cd:06:8c:b7:d0:72:f3:7c:aa:
19:2d:01:92:21:79:8a:35:27:6f:f6:20:80:0b:ee:
0b:93:13:68:42:08:5f:6d:03:d7:ed:36:f9:ca:cb:
98:df:6c:03:14:16:97:70:bb:f8:f8:7d:fc:d5:99:
f4:72:45:5c:4a:8f:ca:2d:42:b0:fd:6d:6c:6f:73:
39:73:95:2b:a3:a5:d4:e8:f0:fb:f4:24:9c:19:4c:
67:5a:c8:c8:87:7c:73:47:fd:b0:84:67:7e:f8:6b:
1c:f3:e4:90:db:ee:79:46:71:08:4d:d7:bd:eb:ee:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:F3:F9:E5:D8:A0:A9:F9:1C:C7:F5:DA:5C:61:A7:05:53:4A:B1
X509v3 Authority Key Identifier:
keyid:DD:E5:47:06:F1:76:70:65:09:2E:9E:02:A4:4D:A2:4B:66:28:E8:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/toDz-eXYoKn5HMf12lxhpwVTSrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6c:08:ea:95:62:70:db:94:94:20:fb:31:bc:66:3f:de:20:
32:66:69:94:00:54:e3:18:c3:96:34:94:49:d1:a1:dc:e7:b7:
98:b7:d8:59:d1:2f:89:ba:23:2b:4d:dd:e9:16:b1:3f:25:34:
66:07:51:a8:16:6a:f0:9c:6d:00:9a:d8:97:7b:cb:c5:02:c3:
68:37:72:52:87:9b:2d:70:19:c4:c2:1c:13:4f:86:af:cc:71:
eb:96:e1:b4:71:23:66:75:fa:a6:71:8c:41:86:ef:6d:b2:63:
e5:6b:6a:eb:6b:4f:1f:9f:7a:08:0f:f9:ff:9c:49:7f:1b:51:
e9:bd:eb:a5:47:3c:90:29:90:ab:2d:0c:e6:7d:51:5c:01:af:
d7:2f:a9:6f:48:bf:f2:7e:d7:0b:56:14:ea:60:77:54:05:ab:
5b:0c:67:e8:17:7b:5c:1d:cb:fa:ce:d4:55:5e:92:35:f4:18:
63:92:04:1b:75:15:e9:f6:6e:c8:e2:fb:23:38:48:aa:88:79:
39:6e:cf:b1:fd:f0:2d:b6:2b:9b:f8:f8:18:c1:99:be:13:25:
90:58:17:84:3e:b5:36:00:81:79:98:2f:9f:26:a1:6f:c0:94:
99:ef:da:14:79:bd:ea:4e:9a:63:d0:52:35:0a:49:2b:27:26:
c2:a3:ab:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:00 2025 by rpki-client