Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/bw4Iwz9bOYyFD-xqammwmJHMMa4.roa
File: bw4Iwz9bOYyFD-xqammwmJHMMa4.roa (raw, json)
Hash identifier: pwcE+xi66kROG+p5xDnCwV+2UvenePGTLhmbXAVGhCQ=
Subject key identifier: 6F:0E:08:C3:3F:5B:39:8C:85:0F:EC:6A:6A:69:B0:98:91:CC:31:AE
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6CFA645053E665188EE54C7AD8512
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/bw4Iwz9bOYyFD-xqammwmJHMMa4.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 80.71.237.0/24 maxlen: 24
80.71.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cf:a6:45:05:3e:66:51:88:ee:54:c7:ad:85:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f0e08c33f5b398c850fec6a6a69b09891cc31ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:43:63:b4:01:10:d0:ac:e9:96:b9:49:4d:
a6:58:78:a6:5f:76:24:b8:a8:f2:dc:da:32:f1:81:
3e:2f:13:05:98:ce:df:50:53:d2:8d:7c:54:ff:e2:
44:0f:01:4c:65:b3:16:85:d3:b9:46:0b:6f:5d:40:
79:99:96:19:cf:13:69:61:60:a0:40:00:05:af:a8:
ec:14:38:cc:9c:46:fd:f0:75:14:06:8a:97:8b:7d:
01:86:e4:f5:55:2f:cb:89:ab:33:5c:e8:2c:9c:98:
11:8a:51:e8:d9:44:ec:b7:22:99:3f:ef:9c:39:f5:
25:3d:b8:fa:24:15:08:2f:64:31:6d:1e:46:8c:da:
29:56:0f:8f:01:b9:44:cf:84:a4:b5:70:8a:4c:c6:
88:17:af:4d:e6:8a:27:e4:b3:3a:a5:5f:e5:40:05:
4e:b9:e9:10:ee:ec:cf:7c:2f:5f:00:05:18:73:28:
7b:01:26:cc:4e:0d:e9:fa:5d:89:f4:fb:ec:43:b2:
94:92:49:3f:ba:a4:f1:00:59:25:dc:a2:9e:5b:b8:
9f:da:d4:1a:b7:57:9c:65:e4:a4:44:1a:9e:8c:ef:
e3:d2:a0:88:14:cc:29:aa:61:71:95:13:3e:c3:d0:
65:a7:82:f2:12:8b:23:1c:f7:14:68:ab:e2:72:51:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0E:08:C3:3F:5B:39:8C:85:0F:EC:6A:6A:69:B0:98:91:CC:31:AE
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/bw4Iwz9bOYyFD-xqammwmJHMMa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9e:0b:06:cb:03:e1:14:7a:e7:c0:05:c4:01:b5:fb:e6:8a:
6d:3d:9b:9d:b7:45:07:c7:60:2e:0d:5f:fa:1e:27:b7:1e:dc:
5d:63:ed:5c:b3:7e:b4:3f:47:f7:81:89:82:f6:76:a7:4a:67:
9b:a4:92:25:6f:9e:23:dc:5d:dc:16:13:b5:4e:9b:2f:98:57:
60:61:38:f5:78:6b:27:45:55:53:61:ce:15:78:ad:c2:12:73:
42:50:df:5d:d7:12:46:7f:37:65:73:56:e8:9b:96:5e:37:e3:
6c:c3:b1:a3:10:c8:1e:42:37:5b:a7:36:a5:3e:cb:10:f9:8b:
fb:05:82:a2:c3:89:9a:25:3a:6c:81:4a:c4:e0:85:03:de:9a:
8a:7f:5f:d1:90:5f:76:2f:7e:28:1c:79:f9:90:89:d6:61:6a:
ce:c9:9a:da:ea:8c:34:a6:bb:7d:20:74:12:29:f9:0a:8f:2d:
a2:e5:e0:22:29:dc:2a:87:9c:cb:8e:a2:18:57:29:aa:79:f0:
0e:10:86:81:6b:53:a4:72:e3:ba:a6:ff:cb:f6:2a:bb:b0:c4:
14:0c:38:23:cd:2c:df:12:0f:a9:36:7f:8b:ce:7e:9b:cb:45:
50:0c:23:f2:fa:ec:da:10:fc:cc:be:7d:6d:6e:a2:80:c4:95:
85:8a:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:57 2025 by rpki-client