Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/3Lo8_rqLRADuyUSE9cA3gP_pdyk.roa
File: 3Lo8_rqLRADuyUSE9cA3gP_pdyk.roa (raw, json)
Hash identifier: oWARyOSW5Xo40cRixbfCbpRF5Vk+CUwuVEj7w+mMZzw=
Subject key identifier: DC:BA:3C:FE:BA:8B:44:00:EE:C9:44:84:F5:C0:37:80:FF:E9:77:29
Certificate issuer: /CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Certificate serial: 0185734CC502498A121C48A2822323D5A1E0
Authority key identifier: 7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/3Lo8_rqLRADuyUSE9cA3gP_pdyk.roa
Signing time: Mon 02 Jan 2023 16:24:49 +0000
ROA not before: Mon 02 Jan 2023 16:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 80.76.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:c5:02:49:8a:12:1c:48:a2:82:23:23:d5:a1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Validity
Not Before: Jan 2 16:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcba3cfeba8b4400eec94484f5c03780ffe97729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:f7:52:54:86:e4:29:59:dc:80:ef:29:a8:
76:86:08:eb:72:f1:23:2b:56:49:3a:ed:36:6e:56:
a9:eb:af:09:46:37:3d:c7:ae:61:52:d0:8f:ce:44:
6e:c3:65:99:4a:13:f7:7e:d9:8b:7d:36:9e:51:83:
84:b6:12:55:cd:b7:c5:d7:a7:45:b6:c6:d8:75:60:
4c:ac:e7:3d:81:e4:24:19:81:de:57:fe:fa:7d:da:
bc:a4:ec:c5:f0:40:6c:04:0d:40:56:fc:89:9e:8d:
f0:0d:1b:17:f1:44:0e:0a:cc:41:e2:a8:0b:e5:58:
5c:9d:56:2d:3f:5c:1e:f6:54:aa:4b:37:7b:ed:32:
66:33:36:42:bf:5f:8f:62:c5:13:36:cb:ee:10:3c:
df:18:29:6b:79:c3:ec:53:3e:04:45:f1:4f:0c:a8:
5f:41:77:6b:ee:0e:18:bd:43:28:8c:2d:9e:d9:e3:
71:8b:15:44:a7:91:08:d1:85:eb:dc:45:01:f0:bb:
f6:3d:8a:44:15:b5:70:29:56:a0:7a:05:62:92:69:
11:b1:69:e8:f2:56:11:22:81:51:3f:ed:af:0c:9a:
98:6d:a2:30:32:03:87:8e:a9:bb:46:f0:0b:06:61:
aa:31:e6:db:59:9a:ea:78:86:6b:f0:26:44:01:62:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:3C:FE:BA:8B:44:00:EE:C9:44:84:F5:C0:37:80:FF:E9:77:29
X509v3 Authority Key Identifier:
keyid:7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/3Lo8_rqLRADuyUSE9cA3gP_pdyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/eoOzJxwC3zLbPFH8QKlTg2iDTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.33.0/24
Signature Algorithm: sha256WithRSAEncryption
34:de:dc:3d:5b:da:4f:03:61:16:a4:a2:6f:d3:c2:53:fd:74:
87:d9:c5:5b:3a:a1:49:d3:c3:95:a8:17:db:d7:fc:f7:63:45:
da:60:1c:c0:30:6b:a6:69:41:31:2c:f4:1b:6d:c8:40:c4:33:
40:51:42:9d:46:4a:e3:47:3d:74:3b:5e:1e:38:30:47:3b:84:
d4:35:25:74:a3:cd:d5:d4:9a:91:aa:8d:6b:ad:bc:a2:1a:94:
61:25:6a:7b:1b:63:dc:6e:4d:bb:30:77:71:20:99:33:30:cf:
ec:1b:94:ea:1e:9a:f6:bf:c7:f8:6b:d0:2e:1d:0b:2e:dd:5b:
98:35:90:d8:72:f7:c4:59:cc:2e:0c:0c:59:19:c1:21:87:db:
1b:56:31:8e:6c:94:b1:65:1f:64:ae:bd:8d:1e:b2:d7:57:87:
3a:a6:8b:02:84:1d:1b:d4:91:50:b8:7c:f1:26:07:cc:7e:c5:
b6:be:1b:1c:ad:bf:ae:76:60:f7:b5:9a:22:31:78:07:af:f3:
10:a3:5c:73:1d:48:9f:75:3f:99:01:c5:c9:4d:53:1c:b6:ab:
03:94:fa:e8:ed:17:4c:47:8f:1a:53:d0:ee:27:b8:3b:60:e2:
76:b8:4e:d7:19:4c:ee:b1:46:28:ba:10:8b:95:54:15:4a:59:
b8:e2:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:08 2025 by rpki-client