Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/Zz3HRJEWGJPFErfU7R4aniiCzDY.roa
File: Zz3HRJEWGJPFErfU7R4aniiCzDY.roa (raw, json)
Hash identifier: Nezp+iSBDSMEyKoKKG0lB6PmXl7EPhVCaj0cWRCfPFI=
Subject key identifier: 67:3D:C7:44:91:16:18:93:C5:12:B7:D4:ED:1E:1A:9E:28:82:CC:36
Certificate issuer: /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial: 019522A32ECE7C3E37BC40C54CC55C62AB8D
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/Zz3HRJEWGJPFErfU7R4aniiCzDY.roa
Signing time: Thu 20 Feb 2025 09:14:34 +0000
ROA not before: Thu 20 Feb 2025 09:14:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34655
IP address blocks: 80.77.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:a3:2e:ce:7c:3e:37:bc:40:c5:4c:c5:5c:62:ab:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Validity
Not Before: Feb 20 09:14:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=673dc74491161893c512b7d4ed1e1a9e2882cc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:13:fc:a4:9b:32:23:df:e0:16:30:ef:76:
e1:fe:2f:42:cd:7f:a4:6f:d7:e8:fb:d2:79:da:55:
e7:10:7d:e6:9c:21:09:3c:45:91:f8:54:a2:2a:aa:
f6:80:b6:cc:9d:6f:57:20:06:15:a9:d1:40:26:4e:
34:fd:40:31:b5:47:46:69:8f:db:9f:e6:85:43:38:
5d:30:e1:6b:79:65:91:4c:2c:a3:f7:b4:a3:b7:99:
1e:44:0e:d0:8e:b8:7c:e7:c5:5f:ad:b2:1e:60:f6:
d8:44:34:a4:97:fe:c1:ff:8d:f1:6e:3d:a5:82:c6:
86:a6:6e:9b:8a:fa:00:2d:2e:84:6a:50:12:b0:55:
c8:2e:56:2b:a8:d3:f3:69:41:4e:e2:d2:d2:fc:e2:
bc:84:eb:20:46:d4:a7:40:a6:c2:f5:7f:a0:cd:3b:
e5:4f:32:a4:98:1e:9a:d7:76:0a:66:42:4e:9b:fd:
38:dd:73:e0:b8:a5:57:d4:70:c7:3d:63:60:99:d2:
e1:8e:3a:f1:c3:2f:bb:4c:d1:fa:e5:bb:b9:f5:d1:
6a:80:9a:2e:1d:e2:f7:14:c4:56:b3:8a:77:e7:6c:
c5:30:e3:91:4f:1d:6d:94:fc:ac:32:8c:67:2e:46:
0e:0d:ae:1f:9d:36:e8:40:52:b5:4f:d3:b8:18:03:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3D:C7:44:91:16:18:93:C5:12:B7:D4:ED:1E:1A:9E:28:82:CC:36
X509v3 Authority Key Identifier:
keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/Zz3HRJEWGJPFErfU7R4aniiCzDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.114.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f7:5f:71:1c:3d:04:d7:6a:bd:8d:6c:80:60:e8:2f:c5:10:
5e:52:f3:26:94:1f:35:7e:fb:9b:bf:eb:7c:5e:8d:80:88:eb:
b1:3e:fb:3f:df:0f:1d:9b:83:f1:5c:6f:0b:0f:3d:87:10:b4:
e1:06:36:e9:26:fa:be:44:9d:0c:a9:e8:94:ce:20:91:39:b5:
32:b6:d7:9e:20:47:67:a2:df:5d:69:c1:12:01:e2:88:71:ff:
c1:90:3d:c8:29:8f:83:0e:2f:20:16:e1:6f:db:8c:a1:94:ae:
d4:14:5a:0e:46:f2:f8:40:65:93:a8:8e:b4:f9:cf:1e:0c:10:
96:d8:17:6d:9b:f3:41:8e:53:d9:b7:7a:04:43:8f:70:6b:1d:
8b:8f:c1:90:a4:aa:74:d5:69:8a:1b:e3:a5:50:9b:8e:c1:b2:
65:0d:8a:e8:14:67:79:5f:cd:80:f5:95:9a:71:7c:e7:95:4a:
78:02:2a:1e:01:88:54:47:27:3c:79:9b:68:f8:c1:18:db:39:
b6:65:86:0d:85:28:ab:1c:8f:fa:78:05:1c:4d:33:87:4c:41:
32:42:ad:16:9b:58:60:ee:89:20:77:50:5c:ca:af:f4:23:99:
fa:ca:b3:6e:b5:3a:95:39:b2:4b:d2:19:19:5f:62:ee:24:71:
e7:ae:88:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:06 2025 by rpki-client