Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/UsnOps4iYKo9rD3FtKruOL5Xm6Q.roa
File: UsnOps4iYKo9rD3FtKruOL5Xm6Q.roa (raw, json)
Hash identifier: a6IC7PSHVCYfs8kk2B91gCN0mYaLHVRRAFPKfGq1o+U=
Subject key identifier: 52:C9:CE:A6:CE:22:60:AA:3D:AC:3D:C5:B4:AA:EE:38:BE:57:9B:A4
Certificate issuer: /CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Certificate serial: 018263588A6E7F702E442E0BFEF093A0BB12
Authority key identifier: 7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/UsnOps4iYKo9rD3FtKruOL5Xm6Q.roa
Signing time: Wed 03 Aug 2022 10:55:23 +0000
ROA not before: Wed 03 Aug 2022 10:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30456
IP address blocks: 80.76.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:58:8a:6e:7f:70:2e:44:2e:0b:fe:f0:93:a0:bb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Validity
Not Before: Aug 3 10:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52c9cea6ce2260aa3dac3dc5b4aaee38be579ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:73:2d:17:e4:c7:7e:96:cf:ec:6e:ff:ed:
a1:3e:14:4f:fb:c3:29:9a:83:cf:78:af:c2:3c:53:
f9:2a:e6:9e:04:e3:af:ff:ca:0a:b8:36:26:f2:04:
7c:78:16:48:7a:9a:68:00:92:67:45:c3:6a:cd:e4:
b7:83:6a:96:fa:07:8d:c9:50:d5:0e:60:8e:a0:ee:
73:57:e9:fa:a6:b9:1e:ed:88:dc:be:be:a9:1d:9e:
38:27:02:69:ae:14:a9:10:72:40:36:01:5c:7e:f5:
9b:52:74:d4:fa:ec:1e:56:88:e9:f4:ef:63:08:6a:
57:32:68:5f:1c:90:64:c7:5d:f5:fd:0e:7d:2f:b6:
a7:87:4d:78:89:e6:97:aa:4b:39:a0:7d:b4:fd:78:
7f:7c:41:25:3c:93:e1:81:3b:90:9d:1e:2c:56:82:
64:60:90:76:e6:3a:ed:95:08:a1:b7:7c:fe:c7:e8:
c1:f5:12:f6:57:1d:a9:8d:33:e3:9a:aa:87:20:e2:
f4:92:6c:65:16:0a:c6:20:b4:28:5d:5a:6a:b2:dd:
43:e7:56:b9:7a:6e:e5:2c:23:b2:75:a0:49:cb:b2:
b2:dc:c5:e3:15:08:db:12:35:c5:d4:20:df:42:51:
e7:31:0c:2f:34:34:1b:00:32:2b:ef:92:7b:e2:6c:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:CE:A6:CE:22:60:AA:3D:AC:3D:C5:B4:AA:EE:38:BE:57:9B:A4
X509v3 Authority Key Identifier:
keyid:7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/UsnOps4iYKo9rD3FtKruOL5Xm6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/eoOzJxwC3zLbPFH8QKlTg2iDTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ce:25:86:9e:d4:8f:be:b9:9d:d0:42:35:58:31:b8:1e:85:
81:c8:37:f7:14:a5:b4:57:ea:05:a1:f5:aa:84:4c:77:18:e9:
ad:f5:eb:61:6e:42:b5:ba:01:15:1c:a1:db:62:b7:a1:0d:85:
18:1c:b8:22:b9:de:1e:3a:d5:2d:4b:79:01:17:45:ca:3c:4a:
6f:e9:6f:0c:89:1c:ec:f1:63:93:d9:bf:fc:9f:64:14:9c:70:
e9:60:ec:df:04:0f:74:24:16:50:a1:6d:93:36:f7:ae:b6:7d:
7a:89:71:66:5e:61:36:be:ff:e1:40:ea:2c:8f:83:f0:af:d3:
aa:28:19:92:6e:83:17:ab:4e:b9:00:08:f0:43:57:eb:6c:94:
38:2c:19:f6:88:7f:9d:1d:fa:d2:dd:66:2e:a7:18:d9:a1:26:
58:01:3e:a7:a2:9a:f9:e0:57:48:8d:2d:c1:6f:b1:dc:c7:98:
74:82:f8:64:52:96:d9:bf:ce:b1:9a:c0:80:0a:d6:3b:e4:04:
10:e8:2d:4d:4d:2e:6e:ff:85:6c:f2:7c:19:31:ac:24:76:78:
82:ac:df:63:32:b0:44:05:74:87:12:a2:db:2e:73:29:03:22:
62:41:05:6f:46:5e:83:3f:b8:10:e8:22:80:fc:3c:3d:cd:72:
08:1e:93:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:37 2025 by rpki-client