Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/e50PKaKFcaW3uGMNUchzpEB18-M.roa
File: e50PKaKFcaW3uGMNUchzpEB18-M.roa (raw, json)
Hash identifier: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=
Subject key identifier: 7B:9D:0F:29:A2:85:71:A5:B7:B8:63:0D:51:C8:73:A4:40:75:F3:E3
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019425217EC915A94564B7D7F3997FFD2648
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/e50PKaKFcaW3uGMNUchzpEB18-M.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206680
IP address blocks: 80.72.22.0/23 maxlen: 32
2a00:8740:700::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7e:c9:15:a9:45:64:b7:d7:f3:99:7f:fd:26:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b9d0f29a28571a5b7b8630d51c873a44075f3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:68:37:8f:4b:79:9b:77:80:4a:17:89:37:
c3:f3:86:54:0c:fb:b4:cf:74:7a:ee:46:43:a2:97:
dd:57:be:db:1b:c8:6f:e2:21:5b:b2:e5:90:9a:ab:
b0:78:ea:7e:7f:b3:26:c9:05:5e:a4:15:73:cd:51:
fb:b9:82:9d:27:2f:97:f1:9e:ef:34:ff:cb:2f:6d:
0e:12:61:e2:82:62:44:76:ac:a9:43:af:d8:b7:b6:
f6:d0:1c:ba:09:88:b4:a5:2a:66:8b:a7:e8:43:4a:
c7:c5:fb:26:c6:48:e9:06:e1:8f:67:56:35:6c:4d:
1e:72:ab:72:ae:9a:63:99:8f:d3:9f:00:73:c7:ba:
67:ce:d3:e8:2b:c4:18:22:98:30:5e:65:9f:85:16:
95:07:75:84:e3:2c:5e:e1:5a:04:99:20:cd:68:b7:
5d:52:f6:6a:e5:73:72:e5:48:3c:d9:51:6a:a0:90:
d4:37:a5:f5:82:19:4d:3a:a2:b5:47:02:cd:79:c0:
f7:0a:7a:99:39:cf:18:df:ca:5b:0e:b8:ee:43:82:
3f:14:e6:0c:6b:bb:ce:ee:32:97:41:09:c6:81:c8:
6d:5f:04:bb:32:63:dc:9d:8f:14:54:ca:0a:7b:cd:
2d:38:8b:b3:08:40:64:fb:7d:69:86:ac:51:38:23:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9D:0F:29:A2:85:71:A5:B7:B8:63:0D:51:C8:73:A4:40:75:F3:E3
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/e50PKaKFcaW3uGMNUchzpEB18-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.22.0/23
IPv6:
2a00:8740:700::/40
Signature Algorithm: sha256WithRSAEncryption
21:48:8b:b1:4c:20:7e:0c:7e:93:ab:57:14:7b:1d:11:4f:70:
4b:a5:e5:e9:2e:8f:00:e0:ac:97:c9:64:1a:9d:ce:50:60:eb:
f8:3c:62:7d:eb:3c:96:c5:7b:9a:e1:59:16:22:d5:04:4e:77:
87:0d:88:71:11:6f:49:4a:1c:5e:f0:48:18:22:33:2b:f4:11:
97:38:29:c3:dc:08:3c:8e:1b:d6:8a:66:52:d8:25:80:d3:6f:
e4:5a:9e:71:69:52:b7:d0:79:c8:19:1d:b5:6f:89:48:be:0a:
21:e7:df:32:ae:7e:fc:12:81:df:f9:e0:d0:35:ca:45:24:ed:
62:da:9d:d1:b7:56:e1:42:ee:d9:d4:b3:8f:fd:15:da:21:30:
de:89:ab:e6:df:b2:75:22:ac:28:1f:62:46:42:85:cc:e5:45:
9d:8a:ea:5e:2e:f8:b3:70:bd:7e:90:95:66:52:67:16:0b:95:
74:09:a0:48:ac:fb:8b:fd:8e:27:c4:b2:78:67:c9:d4:03:50:
84:d2:81:a1:fa:68:84:5c:5c:26:c4:a6:3c:f7:89:aa:46:a1:
4e:1e:86:4f:41:f6:10:d4:4e:81:ca:26:35:97:35:72:96:0e:
72:59:27:0a:40:aa:0a:b8:32:1c:42:9d:f3:df:e5:67:3e:7a:
de:b7:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:10 2025 by rpki-client