Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/ACiqieIPAhLSf6RqVY5NdoP5o8A.roa
File: ACiqieIPAhLSf6RqVY5NdoP5o8A.roa (raw, json)
Hash identifier: kg/meGAKl1Vmjig7R4Q9w5HwJ9L2zYyHRC/hrIJPxxU=
Subject key identifier: 00:28:AA:89:E2:0F:02:12:D2:7F:A4:6A:55:8E:4D:76:83:F9:A3:C0
Certificate issuer: /CN=70f8b2dbb03cecc4f214564709149614c48d7085
Certificate serial: D79C50
Authority key identifier: 70:F8:B2:DB:B0:3C:EC:C4:F2:14:56:47:09:14:96:14:C4:8D:70:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPiy27A87MTyFFZHCRSWFMSNcIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/ACiqieIPAhLSf6RqVY5NdoP5o8A.roa
Signing time: Thu 05 May 2022 13:27:42 +0000
ROA not before: Thu 05 May 2022 13:27:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 80.68.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14130256 (0xd79c50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f8b2dbb03cecc4f214564709149614c48d7085
Validity
Not Before: May 5 13:27:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0028aa89e20f0212d27fa46a558e4d7683f9a3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:79:dc:f6:30:93:af:d1:cd:25:c5:56:1c:
ca:ef:3c:c6:cc:2c:64:11:d9:6e:d4:28:2d:5d:a8:
a0:30:03:c4:d0:3c:43:dc:f2:5a:f3:c1:9d:ca:39:
61:b4:62:20:9b:2a:93:24:e7:de:52:fb:fe:43:c1:
52:ce:1e:e9:a6:1f:cb:cb:ee:8f:0b:cf:7f:d3:78:
0a:7e:c6:da:70:56:54:3e:3e:bf:54:28:72:17:62:
fe:bd:7e:c1:4c:25:f2:15:ca:28:e4:99:c9:47:a3:
cf:2c:bb:51:13:67:63:48:de:34:89:34:8c:07:7a:
04:99:b8:e9:2f:6e:7b:61:8b:ea:c1:15:eb:50:d3:
46:ee:47:72:5d:97:31:81:25:dd:95:77:53:69:b0:
c0:fc:f6:ee:55:b0:0e:a1:0f:72:1d:15:ce:0b:3a:
f8:c5:9d:de:ac:31:1d:16:ff:04:1d:b9:1b:b7:fe:
d4:0b:ab:11:01:b2:44:57:3d:82:31:bc:0d:05:07:
79:a3:1d:60:7c:f3:2e:92:21:5b:c9:9b:27:c4:d5:
c5:8b:7f:62:d0:c8:58:51:59:73:16:b4:69:74:cc:
8c:f6:03:97:07:e7:7a:fb:df:67:74:a4:36:ac:5b:
3c:69:12:02:c5:e0:26:5d:8c:cd:52:b3:e2:fd:f3:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:28:AA:89:E2:0F:02:12:D2:7F:A4:6A:55:8E:4D:76:83:F9:A3:C0
X509v3 Authority Key Identifier:
keyid:70:F8:B2:DB:B0:3C:EC:C4:F2:14:56:47:09:14:96:14:C4:8D:70:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPiy27A87MTyFFZHCRSWFMSNcIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/ACiqieIPAhLSf6RqVY5NdoP5o8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/cPiy27A87MTyFFZHCRSWFMSNcIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e2:84:55:a9:f7:ce:f0:79:27:f0:c5:ea:3a:d4:3e:d3:3f:
29:86:e1:0f:0e:e7:77:2c:12:7b:37:62:18:4c:e5:e4:73:47:
b1:05:20:23:f7:0d:ff:86:de:d6:c9:59:b2:bc:71:37:73:11:
ab:b8:11:2b:f7:e2:34:84:10:e8:a2:19:f1:d7:b5:5a:64:d8:
6c:55:2a:cd:ee:73:5e:22:18:91:b2:aa:6f:79:f9:35:5d:95:
ed:7b:5e:16:d6:e3:90:c0:fb:26:6b:99:50:af:7a:60:51:1a:
8c:4d:05:2a:d5:b9:48:cc:be:a3:80:b6:b4:0d:d2:68:71:4f:
4a:ff:05:fc:54:59:35:61:ee:31:e3:b4:f3:2b:66:f6:4c:0a:
32:4f:92:08:81:01:2f:ca:6e:eb:47:f1:ec:fc:cd:eb:f6:8a:
3b:3d:ee:c3:c2:1c:4f:0c:a2:28:a4:48:9b:3c:14:f6:cf:f4:
7a:05:f5:20:79:ed:62:0d:fd:94:67:5a:dc:e7:95:78:90:fd:
09:c2:ae:f4:8d:5b:cf:be:59:cb:6b:dc:66:16:b7:d5:bb:0a:
32:4b:81:b8:f5:ba:9d:16:6d:ee:93:2b:8e:5d:d2:93:6a:7b:
06:74:16:87:37:ef:a1:f1:d5:6a:34:6e:4c:b2:c8:a2:62:be:
e7:40:28:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:48:31 2025 by rpki-client