Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ej3UGJeH-MXATc3afmzTS2n5tzY.roa
File: Ej3UGJeH-MXATc3afmzTS2n5tzY.roa (raw, json)
Hash identifier: /6NBuHzgOHteYZwPQoQQZqqS65Z8J8nkNzKfl3svtZk=
Subject key identifier: 12:3D:D4:18:97:87:F8:C5:C0:4D:CD:DA:7E:6C:D3:4B:69:F9:B7:36
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D2778F2C1EEF4D1936D4C28E03C0
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ej3UGJeH-MXATc3afmzTS2n5tzY.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 80.71.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d2:77:8f:2c:1e:ef:4d:19:36:d4:c2:8e:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=123dd4189787f8c5c04dcdda7e6cd34b69f9b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:71:87:05:48:e1:3b:68:d9:28:66:f2:1a:
c6:ed:b0:56:69:e8:8c:12:cf:01:dd:1f:86:dd:ac:
ca:e4:a6:3c:72:7a:0d:e1:03:dd:fe:e1:9e:aa:f2:
d2:93:b4:9d:1d:79:9f:f6:46:d8:eb:5e:b4:91:5a:
f8:88:a0:c2:94:18:fa:c6:c0:ab:89:65:04:92:f7:
88:ed:2f:6d:5d:81:3f:f4:f1:7c:25:22:2c:ed:db:
e9:aa:69:a7:43:01:94:fb:d4:74:10:c8:c9:c7:a3:
4c:09:40:19:f4:73:84:05:ff:67:d7:5f:eb:81:80:
d3:a1:7b:2f:e9:5f:48:ea:db:f0:ba:5c:0e:79:b9:
15:11:b9:b9:f6:43:9e:96:1b:ee:6d:b5:f3:78:c7:
34:49:cd:c1:61:3a:80:e5:be:e5:b1:dd:b1:e9:64:
70:78:fb:57:27:53:5c:bb:40:b6:fb:66:47:b0:71:
9f:49:56:1c:f1:82:25:9e:cc:2e:05:80:4a:da:6b:
0a:35:f0:85:0f:4b:eb:c7:e3:df:fa:75:8b:37:74:
25:5e:98:82:d9:2c:66:ca:b6:b3:a5:49:1f:25:c0:
e7:43:37:a3:a2:d8:69:af:1f:17:66:29:e3:11:30:
2d:c9:57:be:0f:fb:3c:16:1b:f6:a8:db:8b:31:e8:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:D4:18:97:87:F8:C5:C0:4D:CD:DA:7E:6C:D3:4B:69:F9:B7:36
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ej3UGJeH-MXATc3afmzTS2n5tzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
Signature Algorithm: sha256WithRSAEncryption
65:89:87:3b:24:b8:14:18:50:0c:e3:14:fe:64:cc:5e:36:81:
c8:38:4b:6f:c4:af:37:24:07:9f:8e:10:7d:a3:b0:0e:05:21:
e8:cf:d0:73:82:05:f3:87:b2:8c:1b:08:37:a2:d6:b6:c5:77:
fe:ab:ca:75:65:fb:2c:4f:1f:8e:20:57:7d:dd:11:16:77:df:
e6:89:0b:dc:72:f7:29:89:f2:26:77:d0:47:eb:d2:57:16:2d:
5f:35:28:32:5c:e2:5c:82:f4:fd:0e:9b:0d:c9:31:07:fc:c1:
51:1f:32:5a:17:1f:97:a2:3c:2e:59:96:e6:e0:5d:34:1b:89:
4b:09:13:dc:23:c7:db:a0:10:bc:bf:f5:17:13:58:91:ab:29:
5e:b8:99:b0:95:c9:14:87:28:18:14:14:0f:d0:75:03:f4:be:
a6:11:23:42:49:a0:22:29:f8:5a:98:a8:fb:fe:08:04:c9:89:
b5:05:f0:07:79:02:79:5c:6c:5a:d5:e1:a2:e4:b3:cb:a1:df:
0b:f1:85:28:e5:fc:ce:21:a4:aa:71:4a:3d:c7:4e:b4:8a:35:
b7:34:d5:b0:ff:5e:6c:17:79:c1:d8:f8:d9:fe:36:1f:9b:8f:
46:65:10:c6:18:4c:9c:bd:ca:6c:e0:d5:14:c4:61:32:a4:5e:
ec:46:64:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1tJ3jywe700ZNtTCjgPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjUwMTAxMjE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjNkZDQxODk3ODdmOGM1YzA0ZGNkZGE3ZTZjZDM0YjY5ZjliNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/lxhwVI4Tto2Shm8hrG7bBWaeiM
Es8B3R+G3azK5KY8cnoN4QPd/uGeqvLSk7SdHXmf9kbY6160kVr4iKDClBj6xsCr
iWUEkveI7S9tXYE/9PF8JSIs7dvpqmmnQwGU+9R0EMjJx6NMCUAZ9HOEBf9n11/r
gYDToXsv6V9I6tvwulwOebkVEbm59kOelhvubbXzeMc0Sc3BYTqA5b7lsd2x6WRw
ePtXJ1Ncu0C2+2ZHsHGfSVYc8YIlnswuBYBK2msKNfCFD0vrx+Pf+nWLN3QlXpiC
2SxmyrazpUkfJcDnQzejothprx8XZinjETAtyVe+D/s8Fhv2qNuLMehOqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBI91BiXh/jFwE3N2n5s00tp+bc2MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvRWozVUdKZUgtTVhBVGMzYWZtelRTMm41dHpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfgMA0G
CSqGSIb3DQEBCwUAA4IBAQBliYc7JLgUGFAM4xT+ZMxeNoHIOEtvxK83JAefjhB9
o7AOBSHoz9BzggXzh7KMGwg3ota2xXf+q8p1ZfssTx+OIFd93REWd9/miQvccvcp
ifImd9BH69JXFi1fNSgyXOJcgvT9DpsNyTEH/MFRHzJaFx+XojwuWZbm4F00G4lL
CRPcI8fboBC8v/UXE1iRqyleuJmwlckUhygYFBQP0HUD9L6mESNCSaAiKfhamKj7
/ggEyYm1BfAHeQJ5XGxa1eGi5LPLod8L8YUo5fzOIaSqcUo9x060ijW3NNWw/15s
F3nB2PjZ/jYfm49GZRDGGEycvcps4NUUxGEypF7sRmRm
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:29 2025 by rpki-client