Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/8LyQu6M29k1339l_CEp2NXxrXCM.roa
File: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (raw, json)
Hash identifier: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=
Subject key identifier: F0:BC:90:BB:A3:36:F6:4D:77:DF:D9:7F:08:4A:76:35:7C:6B:5C:23
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 01942068089D68DB3D7153A717819B5A1588
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/8LyQu6M29k1339l_CEp2NXxrXCM.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21364
IP address blocks: 80.245.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:08:9d:68:db:3d:71:53:a7:17:81:9b:5a:15:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0bc90bba336f64d77dfd97f084a76357c6b5c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cc:7e:f6:ae:c4:cf:95:d2:cc:d8:af:48:ef:
8e:65:98:ac:85:0d:4e:0e:cb:b1:29:c4:a9:8b:33:
b6:2a:57:73:47:03:8c:7d:ec:01:28:f0:65:b2:2a:
6f:30:17:c1:72:1e:92:df:9d:44:0d:47:f9:48:24:
56:1a:d2:ae:05:b4:c8:86:84:d5:c9:5d:e1:4c:06:
cd:c4:88:96:de:cd:9d:bc:47:93:9f:42:07:85:f5:
e9:18:bc:ef:d9:52:b2:64:ff:81:a9:3b:db:cc:20:
9c:cc:9b:4f:9b:3d:27:56:d6:50:17:20:1d:f7:ad:
a5:01:6b:34:53:96:00:49:12:17:b8:d1:89:05:77:
cf:58:98:c9:d6:2b:9e:4f:63:80:b5:86:2b:24:fb:
4a:be:a6:b4:f8:f0:40:b2:e2:4e:48:8c:e1:21:c7:
90:e5:c3:60:ab:d0:5f:17:23:ec:00:e8:af:50:4e:
43:67:28:69:c5:ec:f2:b9:a2:71:94:dc:8b:02:68:
1f:2f:73:64:e7:15:1a:8d:cb:44:76:73:20:7f:17:
58:af:7d:d0:02:87:93:e8:53:b0:89:ca:6f:e3:71:
b8:47:26:0d:f1:83:04:f6:5f:6f:81:a7:f4:80:1e:
22:c8:ac:fb:a2:25:2f:4e:b0:cb:b4:6c:3c:6d:74:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:90:BB:A3:36:F6:4D:77:DF:D9:7F:08:4A:76:35:7C:6B:5C:23
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/8LyQu6M29k1339l_CEp2NXxrXCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.0.0/20
Signature Algorithm: sha256WithRSAEncryption
69:c8:8a:8f:12:72:42:aa:3b:3c:0e:e3:c8:62:82:d5:a2:db:
77:94:7f:3b:7f:d3:25:fe:c9:63:8f:09:ee:4b:0c:6d:b8:04:
4f:01:63:da:49:ac:8b:be:8a:00:05:54:9a:4f:fe:54:e3:62:
f0:77:13:13:4d:55:b5:1e:6d:2b:0c:c2:84:96:8a:92:b4:5b:
46:14:8b:23:6a:bd:c6:63:15:4c:13:a7:a8:be:20:67:da:47:
4c:50:87:83:c9:aa:22:e3:3e:e5:49:a0:75:25:86:3c:1b:2a:
50:b0:0e:a8:80:1c:70:74:55:94:de:42:a6:f2:b8:0f:22:d1:
ee:b6:b4:70:ec:55:f5:b3:fb:1c:70:77:a3:6e:76:9b:a8:c3:
14:a0:84:3c:5b:86:c7:ca:e3:bc:4f:14:65:07:8d:79:58:08:
ff:0c:ca:c6:b2:f8:d9:b6:f3:6c:3f:81:9e:9d:11:f7:b7:a0:
e1:0c:a1:ac:24:52:08:17:f2:53:5c:20:8e:84:7b:eb:28:21:
a7:da:99:e2:15:eb:06:4b:e0:a8:06:05:21:f9:23:9c:2c:82:
99:33:fa:82:a8:9c:06:b9:df:a4:d0:1d:c9:39:4f:8c:fa:33:
e4:de:33:81:92:e4:52:d9:e8:b2:e5:2d:9c:b0:ad:23:5c:7f:
ee:78:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:06 2025 by rpki-client