Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa
File: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (raw, json)
Hash identifier: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=
Subject key identifier: 78:11:96:1A:CD:83:23:29:1C:00:20:BE:56:6F:00:9B:8F:D9:90:BA
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 01941FFA167AE1D1AEB194C3CA875A616452
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200611
IP address blocks: 80.210.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:16:7a:e1:d1:ae:b1:94:c3:ca:87:5a:61:64:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7811961acd8323291c0020be566f009b8fd990ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:80:5c:81:ad:57:cd:26:d5:2d:c7:cc:32:
95:d6:68:28:41:bd:a3:03:ed:f4:30:97:3d:70:e3:
c2:63:f2:ae:af:50:83:d5:3a:76:c1:2d:c5:f2:e4:
d1:b4:61:15:31:25:66:be:cb:75:be:ca:6a:ec:5c:
15:41:90:0d:b4:61:e2:7f:5e:78:bb:34:6a:ff:9d:
8e:60:e2:85:8e:26:fb:42:24:0f:81:ef:bb:55:b8:
88:1a:f6:84:a9:ec:25:27:2a:ef:61:21:02:6a:aa:
8a:37:55:4a:4b:a2:f2:e0:c0:04:5c:85:1f:7d:c9:
75:a5:8b:b7:c1:d6:53:6e:81:fc:26:e6:18:23:e8:
ae:56:bb:2a:de:23:28:d6:5b:f2:f6:6c:7e:5e:48:
60:aa:66:06:48:e7:55:83:9c:42:c3:82:18:7e:a9:
ff:41:a7:91:ab:a2:8b:a8:a0:bf:fb:fa:21:0e:6d:
87:41:a8:e6:fe:52:b3:65:b9:8e:6a:51:c1:2b:3c:
fd:24:46:a1:cb:b3:6e:2b:52:0d:6f:56:f2:93:da:
d8:23:01:68:0b:bb:f3:1c:e1:f9:01:d8:cc:73:bc:
4d:56:8e:a2:1c:77:3a:a1:17:25:4c:cd:64:fc:1c:
ff:fe:73:74:9e:4c:7d:fc:04:2f:d2:9d:7a:f5:69:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:11:96:1A:CD:83:23:29:1C:00:20:BE:56:6F:00:9B:8F:D9:90:BA
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.210.80.0/20
Signature Algorithm: sha256WithRSAEncryption
87:02:ba:45:58:bc:e0:34:46:2e:b7:49:cc:94:98:7f:5e:d1:
bb:e5:3f:ed:16:1f:ed:69:b0:69:5f:5b:98:da:96:8d:33:95:
27:d6:2e:bb:5e:cd:4d:c1:60:d6:2f:78:0e:34:1f:68:66:66:
3e:39:dc:ff:dd:3a:21:c8:c4:0f:85:43:46:8e:ce:ad:ef:99:
5d:ad:6e:90:60:db:c2:c1:67:7e:39:7d:a7:9e:48:80:8c:d2:
9b:ae:1e:53:5d:a5:12:50:db:f5:d9:f9:1d:7a:2d:b8:56:b2:
07:62:3c:d9:ad:b5:62:54:36:f3:bf:c1:f6:9b:bf:7e:c9:7b:
21:be:d8:f4:8d:21:3b:83:3a:0e:8b:35:81:6a:f4:e5:d0:91:
d0:82:a7:43:e1:b2:9a:65:90:08:b3:a7:37:06:1d:e1:64:58:
2d:a9:5e:0b:d5:e1:5d:39:df:e0:32:ef:c9:1e:df:43:45:c8:
11:83:54:a0:e7:82:b1:50:8e:60:db:b7:d8:7e:35:4c:d9:db:
23:88:fa:03:fd:54:77:7e:c6:68:ff:3c:0a:1a:98:0a:f3:11:
58:53:fa:91:34:1b:ff:da:45:55:b5:e1:30:65:52:1c:30:db:
9a:20:47:f6:99:31:1c:b8:52:b2:de:d1:51:e9:d9:27:c3:96:
d5:e0:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:10 2025 by rpki-client