Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/gME6WYXqpGU0ZPxHu4NQIhZoi1o.roa
File: gME6WYXqpGU0ZPxHu4NQIhZoi1o.roa (raw, json)
Hash identifier: 7jqGsBvHI16X1WtOl6iqx5JtPxrtC06IU6o3P9VoPZk=
Subject key identifier: 80:C1:3A:59:85:EA:A4:65:34:64:FC:47:BB:83:50:22:16:68:8B:5A
Certificate issuer: /CN=70f8b2dbb03cecc4f214564709149614c48d7085
Certificate serial: 018572CCD2D8FF999635015594A8694A8874
Authority key identifier: 70:F8:B2:DB:B0:3C:EC:C4:F2:14:56:47:09:14:96:14:C4:8D:70:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPiy27A87MTyFFZHCRSWFMSNcIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/gME6WYXqpGU0ZPxHu4NQIhZoi1o.roa
Signing time: Mon 02 Jan 2023 14:05:03 +0000
ROA not before: Mon 02 Jan 2023 14:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 80.68.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:d2:d8:ff:99:96:35:01:55:94:a8:69:4a:88:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f8b2dbb03cecc4f214564709149614c48d7085
Validity
Not Before: Jan 2 14:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80c13a5985eaa4653464fc47bb83502216688b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:6f:e0:3e:eb:2f:fd:85:0f:7e:cd:29:da:
38:6c:a6:0b:8e:b2:26:55:be:28:a9:86:c9:55:a2:
46:8b:aa:8f:d2:fc:9f:4d:bc:b7:37:be:68:9f:fd:
17:5b:79:4b:b5:9f:af:22:2c:1d:af:df:51:f6:e3:
eb:70:10:29:ce:81:52:0d:3e:9b:d4:82:47:12:38:
a3:e1:1d:e2:ef:5b:b3:dc:13:57:86:7c:ff:b6:53:
13:c7:39:0c:6d:06:fd:b4:c6:01:98:a8:44:ea:1f:
a9:c5:93:0a:4f:21:3f:d5:68:c6:9e:be:4f:71:32:
14:c7:f7:89:0e:20:d5:ca:4c:d8:9c:ca:62:44:32:
66:4b:6e:01:71:ae:55:6c:66:aa:70:f9:75:75:88:
14:e5:52:f1:17:4a:34:ec:a8:90:47:2b:cf:e4:5d:
8f:34:02:ca:88:76:c6:7b:51:67:bf:90:5e:89:72:
0b:5b:44:cf:57:97:dc:84:04:f3:c4:10:34:3f:49:
92:ee:ac:e4:88:07:9f:bd:e2:e1:a3:89:2a:bc:f2:
bb:01:81:22:f1:64:57:52:5c:42:23:3e:4a:bd:1f:
29:9b:15:11:cc:4d:e7:0d:a6:21:97:5a:03:84:d6:
09:78:f4:ae:58:86:0f:af:26:91:a3:82:f9:bd:e7:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:3A:59:85:EA:A4:65:34:64:FC:47:BB:83:50:22:16:68:8B:5A
X509v3 Authority Key Identifier:
keyid:70:F8:B2:DB:B0:3C:EC:C4:F2:14:56:47:09:14:96:14:C4:8D:70:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPiy27A87MTyFFZHCRSWFMSNcIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/gME6WYXqpGU0ZPxHu4NQIhZoi1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/2f45cf-1eb2-4339-ad33-c0566af62e98/1/cPiy27A87MTyFFZHCRSWFMSNcIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e4:5d:7c:92:eb:46:ea:06:c0:ef:71:49:5a:a6:0c:27:7c:
86:45:26:f6:45:5d:42:96:4b:97:1b:91:74:32:53:ab:23:57:
3c:65:37:a0:52:9d:06:db:e8:23:db:4b:4c:85:73:08:67:9c:
1c:23:4e:9e:d2:4d:68:73:6b:d2:50:29:93:3b:f3:09:39:9f:
12:db:71:6d:be:8c:bd:14:e5:f8:72:00:82:18:35:7d:3f:09:
12:be:15:85:4d:92:b1:84:05:68:82:26:56:c1:e7:47:06:d5:
15:ad:c9:50:b2:f0:30:72:78:6e:2f:80:16:d7:29:2f:c6:29:
3d:88:f4:f8:80:2e:ec:b2:74:5c:92:4b:d8:11:ba:82:fa:bc:
f2:53:0e:b0:1d:33:f0:26:c0:de:9e:1a:a1:20:26:3d:61:d1:
7b:7f:72:49:14:1b:41:a7:c6:af:ca:ed:4d:1b:a2:ce:f3:11:
d4:c9:16:4b:43:5f:6a:cc:2b:c1:bc:30:c7:1c:8d:b1:85:fd:
24:0a:e4:b0:18:cb:f5:d9:9b:7c:e1:f2:34:96:ce:6c:0c:d3:
0b:de:a2:a1:5d:cb:02:ad:7d:de:ae:d1:99:16:48:6e:19:07:
7f:e4:35:e9:4e:20:11:e3:2d:38:b6:a3:6b:64:99:9f:53:64:
a8:05:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:33 2025 by rpki-client