Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/0CW8Ncg0GIH7q8-Xhkhb0MHeNtk.roa
File: 0CW8Ncg0GIH7q8-Xhkhb0MHeNtk.roa (raw, json)
Hash identifier: Vx575fuOUXLFuBv6Q+oM0HVyx67/OIdCzexD4LMWTas=
Subject key identifier: D0:25:BC:35:C8:34:18:81:FB:AB:CF:97:86:48:5B:D0:C1:DE:36:D9
Certificate issuer: /CN=cc5e28c24ddf50b3c690b195dd573cdd3f8e269b
Certificate serial: 018CC8DF0CC210CA1E636ADAB6F8E9BED1AC
Authority key identifier: CC:5E:28:C2:4D:DF:50:B3:C6:90:B1:95:DD:57:3C:DD:3F:8E:26:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zF4owk3fULPGkLGV3Vc83T-OJps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/0CW8Ncg0GIH7q8-Xhkhb0MHeNtk.roa
Signing time: Tue 02 Jan 2024 06:31:50 +0000
ROA not before: Tue 02 Jan 2024 06:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 80.68.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:0c:c2:10:ca:1e:63:6a:da:b6:f8:e9:be:d1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5e28c24ddf50b3c690b195dd573cdd3f8e269b
Validity
Not Before: Jan 2 06:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d025bc35c8341881fbabcf9786485bd0c1de36d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:d3:53:b9:ea:8f:27:e7:66:03:37:f8:23:
81:fb:1b:73:53:c6:1e:94:d4:9d:48:5a:94:d7:4f:
e1:5e:98:f8:30:eb:b3:85:a8:cf:9c:ed:d1:af:76:
43:31:5e:38:ef:1b:11:fc:b9:3c:3e:af:82:d3:9f:
6b:21:71:14:1f:49:d2:c5:a8:fc:b8:f9:d8:dd:fb:
51:4b:37:f6:14:ac:a6:68:98:13:3b:85:10:14:29:
7f:bd:29:24:42:f4:09:dc:27:ef:f8:1e:a2:5d:a9:
81:ae:88:33:35:fb:0b:e2:4b:59:05:66:67:63:80:
91:8b:15:a4:5c:fa:81:b9:18:79:09:6a:3a:1d:ce:
e0:4d:59:1a:38:ea:93:27:2c:cc:67:55:0e:14:4e:
b9:e1:0f:aa:90:80:c3:f9:f5:82:34:db:11:60:1c:
e1:e5:3b:69:4a:82:0c:40:ca:5f:76:43:fb:9b:eb:
76:85:a9:67:7b:51:25:72:f3:3d:07:38:bc:a6:be:
06:73:9b:69:8a:bd:44:d5:8d:8d:60:3d:7b:d9:01:
7f:cb:e8:d2:a0:99:23:30:93:eb:22:1b:0c:56:2e:
50:35:a9:2a:52:37:8b:59:84:71:2f:3e:1d:00:64:
be:b4:11:0f:17:77:f7:5f:bb:74:1d:b5:72:6c:8b:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:BC:35:C8:34:18:81:FB:AB:CF:97:86:48:5B:D0:C1:DE:36:D9
X509v3 Authority Key Identifier:
keyid:CC:5E:28:C2:4D:DF:50:B3:C6:90:B1:95:DD:57:3C:DD:3F:8E:26:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zF4owk3fULPGkLGV3Vc83T-OJps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/0CW8Ncg0GIH7q8-Xhkhb0MHeNtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/zF4owk3fULPGkLGV3Vc83T-OJps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fc:dc:b7:20:0c:b3:ee:f9:74:53:84:12:38:70:58:c2:6d:
3b:a0:ff:05:95:7d:3a:ac:12:3c:94:0e:de:60:cb:d4:9e:b0:
4d:52:0b:55:fb:ff:08:a7:51:41:9a:af:79:b2:6c:ac:2b:48:
d6:bc:9e:10:42:8e:8d:e2:df:93:4d:99:c4:6f:ec:e1:e5:d7:
a2:35:a1:e6:2a:3c:12:a2:5e:81:a0:07:3e:1f:9e:f3:9b:ed:
7c:de:90:eb:76:15:81:75:01:59:51:0e:2d:60:49:f4:11:8f:
29:1f:97:d0:fd:93:09:a6:53:81:82:4d:f7:7f:eb:cd:ed:47:
96:78:93:31:f4:3e:b8:27:5a:be:c9:0e:9c:ab:96:b1:0b:36:
cd:08:d0:88:99:3a:5c:c9:da:29:36:2d:f7:a4:aa:f9:18:80:
6d:33:80:c6:9d:79:a8:fd:72:ae:90:24:dc:e5:80:55:81:65:
b8:2d:c6:0a:40:5e:c6:16:38:bc:d8:9d:84:64:41:25:60:37:
a9:b1:c1:06:01:aa:fb:b3:00:7c:c8:e4:41:46:49:12:9a:1f:
69:ee:53:20:0b:0f:37:dd:84:e6:a1:7e:2e:ef:0d:3b:67:1c:
97:88:8a:4d:e8:84:36:9e:35:c3:49:88:82:e6:7a:72:bc:c0:
da:6a:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:29 2025 by rpki-client