Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/W13QjiXrftJDe5I4GISO_dSUsyA.roa
File: W13QjiXrftJDe5I4GISO_dSUsyA.roa (raw, json)
Hash identifier: OmpFewYVSiOwmDy2faHYiIokbRxXwpcWFXeLkG/LARo=
Subject key identifier: 5B:5D:D0:8E:25:EB:7E:D2:43:7B:92:38:18:84:8E:FD:D4:94:B3:20
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D7B921BA98AB978ACFE602A89796
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/W13QjiXrftJDe5I4GISO_dSUsyA.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212815
IP address blocks: 80.71.237.0/24 maxlen: 24
80.71.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d7:b9:21:ba:98:ab:97:8a:cf:e6:02:a8:97:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b5dd08e25eb7ed2437b923818848efdd494b320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:43:ff:ca:df:09:e7:a2:1e:2c:8f:6e:b1:
a7:c2:75:0f:33:c6:c0:75:83:9b:b4:32:43:f5:7a:
e9:66:c6:a4:f1:72:ee:0e:45:9b:95:a9:44:a2:53:
ee:2d:f6:79:49:fe:39:5f:1d:f0:1e:81:92:d6:a7:
bc:5d:64:af:e7:b5:41:ad:a6:50:33:16:52:88:99:
0e:c0:04:0a:cb:f9:e6:f8:e6:dd:76:de:16:6d:9a:
a8:70:19:98:6b:3c:0a:29:0b:bf:8b:6c:4e:ce:51:
f4:6d:82:07:42:b9:f8:36:64:f5:49:af:8a:be:80:
1f:f6:1a:3e:ea:58:20:e2:d5:ab:24:2e:6f:6e:0e:
12:af:95:83:d4:66:3a:8f:e1:23:55:15:d2:61:1d:
14:22:c4:2c:ff:06:6c:13:f6:85:29:0e:db:d8:2c:
d9:6a:b1:23:95:db:22:42:33:70:85:5f:86:58:8b:
5f:62:e8:14:e8:a5:63:14:e1:93:a3:79:90:3d:67:
88:f0:67:95:d5:17:a4:e2:31:d4:eb:02:4a:03:be:
93:e5:f3:40:3f:fb:59:a8:42:f4:73:2a:1c:7e:94:
a6:d3:61:bb:38:e5:9e:9f:68:0c:f4:42:b9:65:77:
62:c0:87:68:53:42:64:b4:ee:39:2e:52:f5:d4:8a:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:D0:8E:25:EB:7E:D2:43:7B:92:38:18:84:8E:FD:D4:94:B3:20
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/W13QjiXrftJDe5I4GISO_dSUsyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d7:d8:34:dc:c8:9e:24:0f:b3:79:95:93:02:6a:ee:81:a9:
bc:62:f3:c4:b4:e5:18:7b:64:ab:a7:28:3a:58:c7:cd:87:a7:
29:26:51:03:76:f4:4b:64:2e:c7:7c:2e:e0:53:25:e0:fa:67:
80:5c:8e:21:ac:df:5b:4c:e8:5c:2a:ba:84:12:74:19:e7:9b:
6e:7b:64:eb:89:26:63:d7:6d:ef:8b:b6:7c:0a:b3:be:a1:f4:
32:73:56:b8:4b:99:5b:37:b2:d5:0c:eb:59:1c:a4:1b:bb:b9:
1b:36:b0:6d:69:72:d8:2a:9a:9d:f4:46:68:01:6b:6c:00:0e:
33:67:9d:82:eb:bb:49:4f:10:75:5d:9b:ed:6b:8d:04:d2:f2:
0d:6a:41:5f:08:5c:d6:0a:6c:d5:aa:2b:93:03:02:4a:59:1a:
f0:c2:6d:59:24:16:02:ae:73:33:26:0d:4d:fc:e5:dc:7d:76:
15:63:ff:9b:8d:95:6b:86:02:63:42:08:1e:2e:d9:20:a2:5a:
e0:e7:54:0a:fc:ab:14:99:4d:dd:9e:ea:5c:4e:20:db:c0:22:
ba:e0:59:74:a9:ec:00:1d:8d:df:e4:d3:bb:bf:bb:7d:87:4d:
47:5c:7b:80:d9:e9:ee:a8:eb:aa:47:21:bb:7e:8f:2d:e6:54:
83:cd:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:51 2025 by rpki-client