Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/jEDgNY90eysDT0Y1G-THT17h3-Q.roa
File: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (raw, json)
Hash identifier: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=
Subject key identifier: 8C:40:E0:35:8F:74:7B:2B:03:4F:46:35:1B:E4:C7:4F:5E:E1:DF:E4
Certificate issuer: /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial: 0194228E3F5073E17450EB2F83B052541533
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/jEDgNY90eysDT0Y1G-THT17h3-Q.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19762
IP address blocks: 80.244.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3f:50:73:e1:74:50:eb:2f:83:b0:52:54:15:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c40e0358f747b2b034f46351be4c74f5ee1dfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:bc:17:3a:99:0a:26:d8:c6:ac:52:c2:cd:
b4:87:39:51:58:27:9e:66:2a:0b:a2:de:22:bd:6b:
4d:c2:1a:7e:ac:ac:d6:a7:a4:b5:fc:7a:7e:11:99:
b0:14:c5:eb:13:8e:da:9a:9c:f1:e4:8a:ee:0f:19:
34:c9:4a:26:39:bc:e6:fe:38:91:70:10:cd:98:bd:
41:e0:9e:6a:28:cb:61:41:c5:d7:68:c9:85:5a:51:
5f:75:89:1c:07:9e:08:cd:77:5e:1d:50:fb:4b:26:
2c:3c:e6:0a:e1:54:a5:6c:07:4b:dc:b0:bf:d5:60:
8f:15:c2:18:5b:da:68:40:d5:ca:79:ec:b2:d5:61:
da:03:d8:87:34:39:65:e8:92:8d:78:85:97:8e:c9:
29:fb:5b:2b:b2:29:50:1c:d7:83:ab:3d:f8:ae:c6:
90:78:fa:15:a7:a8:eb:5f:92:8e:3e:aa:58:3b:bd:
ba:55:e1:37:55:11:4a:e9:26:83:42:8b:a5:3e:72:
de:f5:2c:da:9e:22:c1:17:4b:13:bf:74:f0:20:02:
b8:43:f5:35:0c:cd:36:ff:5e:40:95:ab:d3:f8:6a:
c5:09:fa:d0:d4:d2:4f:76:fb:45:08:4f:64:0a:3e:
a3:e3:41:99:e8:3d:45:b0:8d:b9:7b:c7:d8:73:7e:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:E0:35:8F:74:7B:2B:03:4F:46:35:1B:E4:C7:4F:5E:E1:DF:E4
X509v3 Authority Key Identifier:
keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/jEDgNY90eysDT0Y1G-THT17h3-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2a:73:f0:61:12:7d:6d:c9:9a:5d:57:7c:e7:4e:82:59:87:
20:d5:89:92:36:9a:f8:47:9b:8d:bb:82:a8:c2:db:b2:97:ad:
6e:54:54:4d:0d:05:49:0e:0e:3f:7d:ad:a6:b7:b3:27:95:9a:
b5:d7:c4:c1:64:93:37:f2:c5:85:62:e5:a1:cc:96:6f:98:41:
21:c6:3f:24:dc:ab:f7:09:fe:76:2c:8b:cd:6b:fc:9b:07:cf:
3e:03:f9:83:1e:87:46:e0:55:3f:e0:7f:46:5f:a5:eb:bf:07:
83:67:dd:3b:7e:b6:c7:d6:da:28:41:db:a1:74:5e:b6:e2:20:
9d:f0:b3:ae:31:00:8c:70:62:fe:6f:be:76:96:43:90:dd:eb:
84:95:35:af:0a:5d:d0:ed:11:00:c5:06:e1:2a:85:c1:49:d4:
09:cf:7a:d2:e1:d2:1b:b3:24:f0:a8:19:91:5f:88:87:a7:81:
c0:5e:f3:55:a9:0d:76:ef:49:7c:cd:ca:88:ab:c3:98:0e:19:
aa:0a:2d:06:1f:df:7b:87:d4:62:9c:90:a5:16:d0:75:65:52:
d1:d3:80:3e:bd:78:31:91:48:89:fa:70:56:31:ec:dd:87:a1:
c4:03:1e:1d:1a:85:6d:50:e8:74:98:2f:ed:35:fe:55:8f:ad:
db:0e:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:43:50 2025 by rpki-client