Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa
File: gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa (raw, json)
Hash identifier: 9CZWByYdcEDtlH6WtC98zaDqoirlCufcqNkD98t2okw=
Subject key identifier: 82:A9:B6:47:E6:57:CA:A5:2E:2E:F0:37:8F:1B:2E:00:98:EB:20:AE
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0194258FA35BB286B007C68ECDAF8B37F787
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59708
IP address blocks: 80.253.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a3:5b:b2:86:b0:07:c6:8e:cd:af:8b:37:f7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82a9b647e657caa52e2ef0378f1b2e0098eb20ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:83:e7:ea:ad:72:43:b1:df:20:e5:1b:4d:
f0:ae:6f:8b:72:d4:87:ed:60:e2:ef:b3:24:c2:b1:
32:79:93:1f:41:29:89:8f:8a:89:6f:43:fb:7e:4f:
ce:b9:a7:d7:87:d9:cf:50:d0:d8:2a:3c:cf:96:3a:
dc:51:9a:a9:4e:9b:68:f3:83:7a:82:e8:8c:54:e2:
b2:4f:cc:3f:35:1d:27:67:83:a6:18:03:a0:e0:3e:
9d:77:f2:7f:51:f7:78:f4:c4:a5:12:45:7e:aa:fc:
4e:82:e2:60:d0:dd:af:ee:7b:dc:d2:46:7b:ca:1a:
f4:b6:2e:0a:d5:da:05:f0:cb:c4:02:54:ab:a2:bb:
82:7c:1b:c4:fd:a1:bc:a9:68:b3:52:4b:f5:68:ce:
97:f5:7d:72:77:54:60:b7:47:c7:dd:22:5d:04:d6:
ce:88:24:4e:f2:0c:25:82:0f:55:6a:da:77:2b:c0:
43:0c:11:4e:d0:ab:27:74:2d:77:d7:7f:52:64:43:
79:b5:6b:64:65:1a:02:1d:fc:1c:42:7a:e1:a6:00:
6e:ba:c4:8c:cd:a3:0f:e1:6e:52:a5:08:2b:22:84:
2c:ad:29:24:8b:f2:92:1b:8a:95:00:76:a7:7b:e3:
d1:af:c1:0b:25:30:cf:7b:a2:d1:b0:9d:d4:3c:63:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:B6:47:E6:57:CA:A5:2E:2E:F0:37:8F:1B:2E:00:98:EB:20:AE
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.157.0/24
Signature Algorithm: sha256WithRSAEncryption
05:87:b9:3c:99:90:26:c1:fd:3e:ee:30:1a:3e:e6:51:bd:88:
92:b0:56:04:8c:75:c9:e3:29:b8:75:eb:6c:9b:c2:76:7e:29:
7e:8c:72:b9:43:45:03:0d:57:52:3e:f1:5f:7f:a8:26:7f:f6:
98:cf:c3:12:63:a1:6b:11:04:99:be:f6:b0:ca:8e:00:c4:6d:
5b:70:2d:fc:5d:bc:5a:18:14:0c:27:7b:29:b3:fa:2b:08:2a:
bd:a6:25:4f:64:6d:61:87:de:82:58:f2:c7:85:b4:07:d3:81:
26:c4:c1:95:61:73:d6:70:d8:3b:46:b4:3b:d1:84:2a:74:53:
4b:f6:58:24:a6:c1:81:95:a2:29:4c:42:85:de:3a:9f:5c:e7:
ca:a0:ef:75:5c:7d:1e:af:da:af:6c:2c:06:64:cb:a1:e7:69:
38:fc:19:b3:96:c3:46:e9:fd:0e:24:07:48:05:a0:2f:0c:3c:
22:02:67:3b:e5:f0:89:09:e6:1a:7c:92:93:27:f7:a2:78:42:
ee:88:3c:9d:0e:fe:79:5b:aa:62:09:a6:7b:4e:0d:58:3c:b2:
5a:0a:de:29:b6:d4:18:34:cb:eb:7c:15:fd:73:cf:c6:55:5b:
87:ec:89:95:74:5a:ea:e2:e7:e9:18:19:59:d6:33:e4:ee:7d:
08:0b:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:35:02 2025 by rpki-client