Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/iVrhiN4HZqvbBBMmNv3_p93wuY8.roa
File: iVrhiN4HZqvbBBMmNv3_p93wuY8.roa (raw, json)
Hash identifier: iq0Hw6E7tyAIf8vhX/MT0JSUjhWx7lkU5DdrBCtv3HU=
Subject key identifier: 89:5A:E1:88:DE:07:66:AB:DB:04:13:26:36:FD:FF:A7:DD:F0:B9:8F
Certificate issuer: /CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Certificate serial: 08287CF0
Authority key identifier: 7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/iVrhiN4HZqvbBBMmNv3_p93wuY8.roa
Signing time: Wed 19 Jan 2022 18:39:07 +0000
ROA not before: Wed 19 Jan 2022 18:39:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 80.76.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136871152 (0x8287cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Validity
Not Before: Jan 19 18:39:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=895ae188de0766abdb04132636fdffa7ddf0b98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:c7:3f:25:7e:49:8d:39:77:b8:c1:ca:31:
38:1d:fc:58:89:2a:73:1b:07:31:72:48:40:2c:9c:
e4:90:de:ae:87:b8:e9:df:dd:98:0e:ce:b5:4b:ca:
b2:45:26:ef:77:6e:49:4d:0c:eb:a4:a8:ad:f3:d0:
46:3b:5a:3d:34:ac:fd:6f:de:31:4e:6b:fa:98:18:
30:ef:73:82:bd:40:9a:73:95:38:8b:6d:36:b6:3f:
af:a3:3f:a8:78:c1:2e:4f:f1:9d:76:18:bc:c7:f2:
0f:de:b2:90:85:37:57:6a:47:62:bf:bf:8c:20:a4:
0e:df:9f:03:b2:9b:66:eb:95:ca:54:64:0b:25:06:
de:a3:07:26:7d:fb:4e:36:46:2d:15:bc:b7:ee:65:
4a:c3:b1:d3:0a:ef:b3:f5:80:ba:75:7f:50:a6:b4:
ef:dc:4f:2d:4b:65:d3:42:c4:52:17:bf:73:7a:7b:
85:60:1b:41:ad:70:1d:b3:3d:3b:db:a4:5c:48:7a:
61:fa:d3:35:56:af:a8:a0:c8:cb:59:94:a8:57:f3:
05:82:7a:4f:be:77:f5:30:bc:f3:1f:cf:7e:36:26:
72:80:d2:4b:f7:d6:50:a7:2c:97:18:b9:93:76:e5:
9f:7f:1f:08:8c:54:00:3b:3e:8a:01:40:0f:20:2d:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:E1:88:DE:07:66:AB:DB:04:13:26:36:FD:FF:A7:DD:F0:B9:8F
X509v3 Authority Key Identifier:
keyid:7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/iVrhiN4HZqvbBBMmNv3_p93wuY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/eoOzJxwC3zLbPFH8QKlTg2iDTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:62:81:39:63:cf:7d:b6:a6:75:53:76:c1:e3:5d:33:4c:61:
2e:7e:d5:9a:98:0d:c6:d2:dd:2b:e0:b5:be:e5:39:08:5e:35:
80:07:99:74:02:44:33:f5:cf:b7:6f:21:d1:83:fd:7d:9d:9c:
e9:d5:8b:43:d1:35:9a:63:8e:8e:d9:13:c1:ec:28:09:0f:1c:
3d:be:f0:fa:a3:98:15:5e:de:e9:96:80:34:7b:9a:0f:60:6d:
32:41:72:d8:3f:1b:8b:cd:5f:11:b1:a7:fb:8b:ff:47:cd:fb:
87:29:dc:8e:1b:93:77:ba:af:fc:0c:74:86:d9:2d:d2:0c:8b:
0a:7c:35:88:af:b6:c5:b6:09:be:bd:34:ca:fd:84:23:09:18:
29:64:83:59:5f:7b:d2:10:e6:8e:d9:07:c3:e8:b9:10:7d:5c:
8a:a1:23:8f:0f:c4:33:9a:d8:f6:7a:24:b9:a3:17:94:a6:67:
45:77:ce:98:c2:7d:fc:9e:bf:30:49:dc:01:32:b1:3b:2b:01:
6d:95:45:da:9f:47:13:41:e8:35:2c:5c:84:97:9f:22:a9:0a:
0b:00:d4:6a:9f:ea:0a:95:e0:61:b1:16:45:f0:f4:57:5b:ef:
49:35:7d:5e:b8:da:b6:8b:af:6e:8d:a9:08:e3:80:a8:20:55:
20:7d:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:37 2025 by rpki-client