Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/3PhTLGtKaZiAxt1GIcUzpZibTlE.roa
File: 3PhTLGtKaZiAxt1GIcUzpZibTlE.roa (raw, json)
Hash identifier: gGBbI9YHXobZWgTCs+oweClHbgEr7OdxGPXc9pEyNkI=
Subject key identifier: DC:F8:53:2C:6B:4A:69:98:80:C6:DD:46:21:C5:33:A5:98:9B:4E:51
Certificate issuer: /CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Certificate serial: 09575012
Authority key identifier: 7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/3PhTLGtKaZiAxt1GIcUzpZibTlE.roa
Signing time: Fri 27 May 2022 21:16:13 +0000
ROA not before: Fri 27 May 2022 21:16:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 80.76.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156717074 (0x9575012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Validity
Not Before: May 27 21:16:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcf8532c6b4a699880c6dd4621c533a5989b4e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:e8:2f:e5:1e:4e:e3:ff:e2:7d:b3:25:b7:
f0:12:51:ef:83:71:82:d7:71:e2:31:aa:cc:f6:30:
7f:c4:1f:33:7f:02:68:d2:d4:4c:01:af:90:fb:86:
b7:b2:a8:65:de:4d:fd:8a:fa:78:1b:4a:aa:f5:11:
c0:60:2c:4f:fb:86:d3:88:7f:cb:46:46:c6:d7:04:
d9:81:03:ed:03:33:ac:44:f7:38:a3:e5:ae:2a:8b:
a7:27:2a:0f:10:90:4b:45:a4:73:38:0a:3b:04:3e:
c0:ff:74:66:6e:4a:63:5c:35:d3:f9:de:de:fe:96:
08:30:2a:06:a6:67:40:69:83:5d:e2:83:fa:41:ac:
ae:f1:fd:d9:78:0d:99:12:31:b6:01:8c:e0:a4:b5:
53:af:a8:fa:09:42:48:3d:86:60:4b:f7:fa:3b:3b:
2e:43:d2:86:6b:5f:6b:cb:9c:11:45:47:db:a3:99:
d3:f3:fd:92:13:74:d6:70:89:d3:c0:43:a9:5d:4e:
90:22:74:18:ae:83:84:29:41:62:75:9f:7d:18:7b:
3f:9d:d7:c0:cc:fd:bb:8c:b4:5a:60:5f:02:c0:cd:
34:58:df:70:41:d6:73:b4:d7:a2:2c:ef:ff:44:b6:
47:66:eb:7a:e3:53:f1:42:a5:41:d4:33:67:eb:fc:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:53:2C:6B:4A:69:98:80:C6:DD:46:21:C5:33:A5:98:9B:4E:51
X509v3 Authority Key Identifier:
keyid:7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/3PhTLGtKaZiAxt1GIcUzpZibTlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/eoOzJxwC3zLbPFH8QKlTg2iDTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.32.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:69:1b:5c:97:51:e7:68:ba:49:c4:c0:bf:49:b2:6a:fa:66:
6b:f9:3d:1e:86:c3:34:31:12:f2:e1:0f:1d:3a:d1:71:4f:ae:
87:16:f0:bf:0c:01:06:17:3e:a3:bb:28:b0:e2:58:3d:bb:7b:
54:a1:5e:26:a3:60:37:9b:35:75:d6:d5:1f:d5:b7:f5:f8:aa:
b3:28:1a:ac:3c:43:25:ad:c1:17:f0:a8:46:f3:8c:9c:7e:ea:
2a:c3:39:a6:54:2c:a5:57:60:4b:25:02:8e:64:82:46:b9:df:
7f:3d:0d:b5:0a:7a:fc:e3:71:2a:f4:64:bc:0f:ce:c8:3e:d7:
cc:b2:39:6c:93:a0:9c:7e:66:4b:44:07:5c:f0:fc:e2:3c:47:
64:c2:08:2b:5f:4b:a6:89:e6:91:1f:56:94:79:52:79:17:d7:
d9:2c:7c:e4:1d:58:f6:aa:24:57:48:0c:25:f5:24:60:39:e4:
05:71:fb:b6:53:cd:6a:d9:0f:29:0b:e2:c0:5b:29:8a:c7:7c:
0d:ff:6d:8c:df:c2:9e:12:6c:a5:a6:cb:ce:5c:28:27:a7:8a:
98:9d:85:bd:42:ef:13:64:fc:d0:9d:f7:8e:8a:ab:9b:96:54:
63:80:9a:8e:da:92:d6:d2:e1:49:bc:ad:68:98:25:19:a6:17:
11:45:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:07:43 2025 by rpki-client