Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/pMnjJvihHzd-giv1SzFYxia6XA0.roa
File: pMnjJvihHzd-giv1SzFYxia6XA0.roa (raw, json)
Hash identifier: Rj6NRjW0ZMGK5T4yAL/0Un3Waby5+s7V1nP7lwfSeCA=
Subject key identifier: A4:C9:E3:26:F8:A1:1F:37:7E:82:2B:F5:4B:31:58:C6:26:BA:5C:0D
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825C892F83484EE65F7C7C2704D26DC
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/pMnjJvihHzd-giv1SzFYxia6XA0.roa
Signing time: Thu 02 Jan 2025 17:52:32 +0000
ROA not before: Thu 02 Jan 2025 17:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202082
IP address blocks: 80.79.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:c8:92:f8:34:84:ee:65:f7:c7:c2:70:4d:26:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4c9e326f8a11f377e822bf54b3158c626ba5c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a7:8b:8e:6a:b0:be:21:1c:75:5e:4f:96:14:
f2:7d:45:38:8a:f0:3e:99:72:09:b9:e3:6e:93:6a:
b3:f5:8d:82:7d:4e:da:8e:e8:91:17:3d:e4:9a:90:
34:ac:a4:0c:f4:80:0b:47:38:8b:a5:6f:9a:b0:41:
22:fc:57:1a:03:fa:95:46:cd:35:07:32:2f:e0:44:
35:47:ea:e6:ff:1d:54:43:ef:d8:53:0f:db:b1:cd:
ca:44:83:58:9d:f6:64:24:61:c5:95:ee:0f:0a:19:
f2:d8:3f:5c:ad:77:68:bf:4e:a9:43:a0:e4:6a:11:
93:46:4b:6e:d0:0f:fc:ec:a0:37:52:9e:d2:3a:f1:
7c:3f:1e:b3:34:fd:e6:a3:39:4f:58:96:53:2d:b2:
e2:cf:ea:a3:d4:9c:3c:29:5b:95:38:18:83:11:42:
21:8a:be:fd:72:35:df:7b:21:22:0a:30:f2:cd:d2:
f6:ce:2c:27:88:bb:c7:aa:67:2d:05:09:88:96:f2:
7e:99:d8:c7:39:25:bf:0d:ba:14:42:0c:5a:e5:21:
57:df:5b:7e:6f:8e:1b:58:fd:09:47:bf:30:b4:47:
bd:9b:ab:7a:d0:39:72:5c:18:51:b1:b9:97:81:1e:
65:2f:93:ad:22:00:b6:7b:9f:f3:11:2d:77:0c:5e:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C9:E3:26:F8:A1:1F:37:7E:82:2B:F5:4B:31:58:C6:26:BA:5C:0D
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/pMnjJvihHzd-giv1SzFYxia6XA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.249.0/24
Signature Algorithm: sha256WithRSAEncryption
82:14:d9:f2:68:28:23:44:b7:6f:7e:79:70:af:f4:69:6a:99:
76:d4:32:58:14:5f:7b:81:f8:be:4b:b9:33:6f:03:93:57:74:
c3:d9:c8:ea:60:0d:cd:38:d9:d9:87:77:fb:5d:e0:ac:7b:fd:
a9:a6:32:5b:fe:a5:3a:76:f0:d3:8d:97:84:72:af:74:41:0e:
eb:68:1a:3b:12:ce:48:1f:7c:d9:19:d0:8f:5e:64:6a:9f:4e:
6a:cf:51:6d:8c:86:85:86:e3:cd:33:bb:7b:15:91:4c:05:68:
1e:3d:33:f7:ef:fc:82:f1:36:4f:79:08:7e:21:12:17:9e:d5:
f2:52:d3:a9:36:c7:7d:ec:55:5e:c2:40:5a:f6:f0:6a:73:cf:
da:72:7b:fb:fa:63:57:7c:ed:da:8f:2e:c8:1b:96:81:03:03:
4d:08:a9:9c:e9:59:d7:5e:d9:54:39:7d:18:df:e7:97:c1:d2:
bd:d1:a3:1d:9c:70:96:58:7b:df:5d:b3:65:a2:a9:9d:24:c5:
4e:f2:8e:0c:b2:a8:54:8b:ca:3f:67:9c:a8:3d:3e:b6:cd:8c:
21:03:96:d5:40:d6:7c:b2:85:a8:23:dd:44:0a:3e:fc:d6:2d:
eb:3e:e0:a6:d5:5e:e4:a7:d7:2f:3b:a3:85:9a:12:1a:74:77:
bb:85:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:53 2025 by rpki-client