Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/74ddfd-8a91-4448-aedc-b220e1a794ca/1/jAXNeyWwo2RWUbYvkXOLRoLBO6E.roa
File: jAXNeyWwo2RWUbYvkXOLRoLBO6E.roa (raw, json)
Hash identifier: wtfVFUnhd9gkGK3kd3HpsuIC73ItR/nWfdgI0ewKLSY=
Subject key identifier: 8C:05:CD:7B:25:B0:A3:64:56:51:B6:2F:91:73:8B:46:82:C1:3B:A1
Certificate issuer: /CN=7ddddc4937cbbbd72ef419ef2c5fc53690b23ae6
Certificate serial: 01896478EDC1FCFA2F7CFE07A7BEC1B11DED
Authority key identifier: 7D:DD:DC:49:37:CB:BB:D7:2E:F4:19:EF:2C:5F:C5:36:90:B2:3A:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd3cSTfLu9cu9BnvLF_FNpCyOuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/74ddfd-8a91-4448-aedc-b220e1a794ca/1/jAXNeyWwo2RWUbYvkXOLRoLBO6E.roa
Signing time: Mon 17 Jul 2023 15:29:53 +0000
ROA not before: Mon 17 Jul 2023 15:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 80.73.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:ed:c1:fc:fa:2f:7c:fe:07:a7:be:c1:b1:1d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddddc4937cbbbd72ef419ef2c5fc53690b23ae6
Validity
Not Before: Jul 17 15:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c05cd7b25b0a3645651b62f91738b4682c13ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:55:a1:67:5d:87:af:b0:a9:6c:e0:fb:53:
57:8d:ee:88:69:32:89:5a:81:49:3c:f0:47:0f:8f:
e5:60:81:08:57:9e:76:03:87:37:fb:52:0f:91:c5:
24:7f:07:dc:18:6f:bf:44:b0:c6:2c:98:23:8f:31:
23:59:ed:12:1c:3c:ca:88:7f:8f:43:32:2b:5a:dc:
8c:83:9b:44:bc:db:08:32:0c:3f:6d:53:21:de:e0:
b1:68:a9:e5:de:e7:22:09:9a:09:29:f9:3d:88:fe:
d9:47:44:c8:d8:43:05:a3:81:a8:0d:1c:6b:03:56:
86:33:a5:69:76:2d:a7:38:ef:2a:eb:aa:9e:2a:28:
0b:a0:b9:70:5e:16:3e:0c:e2:1b:40:3f:ce:aa:9c:
d9:da:73:05:94:c6:f3:a1:12:c6:fa:13:34:e5:9c:
f7:71:4d:9a:c1:cf:db:2b:ce:e2:3c:ed:bc:07:38:
03:1f:a2:44:47:5a:72:7b:74:b1:af:24:77:5a:eb:
bd:4c:c8:56:5c:d7:e3:21:41:11:09:aa:c5:65:76:
79:76:f2:89:e4:bb:88:b2:50:6b:db:b5:93:28:1b:
bc:7b:a0:bb:0e:45:16:2c:24:74:d7:19:d4:2d:56:
6a:a6:57:b2:6e:ad:1a:73:e5:68:21:9d:9c:2e:3d:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:05:CD:7B:25:B0:A3:64:56:51:B6:2F:91:73:8B:46:82:C1:3B:A1
X509v3 Authority Key Identifier:
keyid:7D:DD:DC:49:37:CB:BB:D7:2E:F4:19:EF:2C:5F:C5:36:90:B2:3A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd3cSTfLu9cu9BnvLF_FNpCyOuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/74ddfd-8a91-4448-aedc-b220e1a794ca/1/jAXNeyWwo2RWUbYvkXOLRoLBO6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/74ddfd-8a91-4448-aedc-b220e1a794ca/1/fd3cSTfLu9cu9BnvLF_FNpCyOuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.244.0/24
Signature Algorithm: sha256WithRSAEncryption
65:39:5d:81:48:22:cb:46:b8:f5:9c:08:c5:70:5c:7e:48:74:
ef:1b:7d:3b:1b:7b:db:3d:c4:21:20:35:a6:af:b3:26:29:03:
4c:c4:72:19:e1:c0:ac:ec:9c:1c:d8:c6:39:7e:8e:c0:a4:51:
9a:f9:38:b4:54:34:72:3e:1a:f7:eb:ab:06:f0:ae:8b:a3:bc:
32:4b:eb:51:83:c3:05:41:ab:b2:e7:a1:7f:e4:33:c5:8e:45:
fe:de:fb:fa:59:71:0f:be:9d:db:c8:e3:54:c4:8a:95:76:3b:
bd:56:ea:4a:af:26:d9:8e:49:96:07:40:64:59:84:1e:90:56:
91:3d:40:7e:3f:a1:03:24:ac:99:2e:6c:2f:f9:36:1a:35:f8:
89:de:71:ca:91:64:58:a0:f4:5e:7a:e2:7d:fe:0a:da:6d:62:
e5:c3:c9:e7:3d:3f:a5:34:db:79:e3:2a:b7:db:68:a4:d7:85:
5c:d4:21:e6:62:d3:36:cc:ba:fa:e3:44:e5:2f:33:bf:a8:87:
6e:b7:7c:8e:17:42:e2:a6:9b:48:85:e7:80:94:02:01:30:89:
65:70:03:a4:e6:e9:29:31:ba:bf:21:30:b7:36:91:02:6b:50:
1e:2e:29:78:bf:cd:de:e3:af:34:26:ab:24:51:59:ff:20:4f:
62:33:6f:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkeO3B/PovfP4Hp77BsR3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGRkYzQ5MzdjYmJiZDcyZWY0MTllZjJjNWZjNTM2OTBi
MjNhZTYwHhcNMjMwNzE3MTUyOTUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzA1Y2Q3YjI1YjBhMzY0NTY1MWI2MmY5MTczOGI0NjgyYzEzYmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthdVoWddh6+wqWzg+1NXje6IaTKJ
WoFJPPBHD4/lYIEIV552A4c3+1IPkcUkfwfcGG+/RLDGLJgjjzEjWe0SHDzKiH+P
QzIrWtyMg5tEvNsIMgw/bVMh3uCxaKnl3uciCZoJKfk9iP7ZR0TI2EMFo4GoDRxr
A1aGM6Vpdi2nOO8q66qeKigLoLlwXhY+DOIbQD/OqpzZ2nMFlMbzoRLG+hM05Zz3
cU2awc/bK87iPO28BzgDH6JER1pye3SxryR3Wuu9TMhWXNfjIUERCarFZXZ5dvKJ
5LuIslBr27WTKBu8e6C7DkUWLCR01xnULVZqpleybq0ac+VoIZ2cLj0CIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwFzXslsKNkVlG2L5Fzi0aCwTuhMB8GA1UdIwQY
MBaAFH3d3Ek3y7vXLvQZ7yxfxTaQsjrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQzY1NUZkx1OWN1OUJudkxGX0ZOcEN5T3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83NGRkZmQtOGE5MS00NDQ4LWFlZGMt
YjIyMGUxYTc5NGNhLzEvakFYTmV5V3dvMlJXVWJZdmtYT0xSb0xCTzZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83NGRkZmQtOGE5MS00NDQ4LWFlZGMtYjIyMGUxYTc5NGNh
LzEvZmQzY1NUZkx1OWN1OUJudkxGX0ZOcEN5T3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEn0MA0G
CSqGSIb3DQEBCwUAA4IBAQBlOV2BSCLLRrj1nAjFcFx+SHTvG307G3vbPcQhIDWm
r7MmKQNMxHIZ4cCs7Jwc2MY5fo7ApFGa+Ti0VDRyPhr366sG8K6Lo7wyS+tRg8MF
Qauy56F/5DPFjkX+3vv6WXEPvp3byONUxIqVdju9VupKrybZjkmWB0BkWYQekFaR
PUB+P6EDJKyZLmwv+TYaNfiJ3nHKkWRYoPReeuJ9/grabWLlw8nnPT+lNNt54yq3
22ik14Vc1CHmYtM2zLr640TlLzO/qIdut3yOF0LipptIheeAlAIBMIllcAOk5ukp
Mbq/ITC3NpECa1AeLil4v83e4680JqskUVn/IE9iM2+F
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:08 2025 by rpki-client