Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/gTxTPyAyuEF6FM9Rx4qcHAG9WGo.roa
File: gTxTPyAyuEF6FM9Rx4qcHAG9WGo.roa (raw, json)
Hash identifier: yGwn+Rgam3BNjJC1ZFu03Tsc8Ruc94qaAtY3oke1KJc=
Subject key identifier: 81:3C:53:3F:20:32:B8:41:7A:14:CF:51:C7:8A:9C:1C:01:BD:58:6A
Certificate issuer: /CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Certificate serial: 018CEE10655AFBF7CB89F40343A4EFFD6B26
Authority key identifier: 52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/gTxTPyAyuEF6FM9Rx4qcHAG9WGo.roa
Signing time: Tue 09 Jan 2024 11:51:40 +0000
ROA not before: Tue 09 Jan 2024 11:51:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58224
IP address blocks: 80.75.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:10:65:5a:fb:f7:cb:89:f4:03:43:a4:ef:fd:6b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Validity
Not Before: Jan 9 11:51:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=813c533f2032b8417a14cf51c78a9c1c01bd586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:f3:e8:5f:d8:ee:c4:a2:a3:39:7a:58:a3:
8b:e5:7c:75:b3:0a:c6:bd:2b:0b:1a:d1:43:7b:b2:
fb:f5:5a:0d:1d:3a:c9:ab:cb:11:90:4e:d3:97:31:
b6:29:78:be:1c:e4:c3:93:e8:a8:ed:ac:72:63:da:
2c:ff:eb:c1:38:e5:14:c5:04:3c:17:8a:3b:00:53:
6b:8c:4d:e8:04:10:05:36:bb:2b:09:43:be:cc:07:
16:a5:10:6b:21:96:6b:32:ea:04:f0:a3:4c:22:fd:
5b:3d:9d:1f:02:30:5a:cb:c2:a5:a7:fd:e2:4b:bf:
cf:9f:21:6a:b2:c4:97:e0:84:e7:e6:06:ad:c2:fc:
72:cc:d4:46:8b:05:6b:13:f1:dc:c6:18:04:08:cc:
e2:ea:ea:71:d1:dc:62:59:a1:7b:a7:3d:99:6b:1a:
cd:85:29:4f:6b:e7:ad:f7:6f:f9:72:af:5c:da:9b:
d7:18:b0:45:a5:c7:d3:d5:50:32:f4:0f:d2:3f:e5:
42:00:e4:21:d1:33:28:47:87:18:44:cf:87:fc:6c:
4b:11:ef:a8:50:4d:48:26:35:4f:ef:13:16:44:6a:
0c:cf:74:11:9d:99:d2:95:fa:19:ab:63:6e:c7:c5:
fe:5c:06:03:41:7b:76:82:d6:97:84:f3:5f:c3:41:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3C:53:3F:20:32:B8:41:7A:14:CF:51:C7:8A:9C:1C:01:BD:58:6A
X509v3 Authority Key Identifier:
keyid:52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/gTxTPyAyuEF6FM9Rx4qcHAG9WGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/UlAqKawGtl6TLhvZfX_PKcNxyz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:68:e5:72:28:ae:a0:a7:bb:89:1b:ba:c3:a5:73:e9:36:59:
f2:b3:04:51:13:fe:32:3a:0b:dd:3c:09:4f:86:81:55:03:60:
4e:4e:de:a9:ca:4f:c8:58:9c:4e:48:79:c0:b2:c5:3f:4c:26:
06:fb:40:93:7e:1d:fe:02:07:5c:62:45:1c:91:55:0a:5f:a3:
51:e7:07:d1:52:d4:5a:80:ec:43:77:f9:a8:5a:ee:9a:87:18:
ee:7a:20:e9:af:6d:5b:c9:8a:59:c5:ab:49:f8:19:4b:dd:8b:
9f:51:ef:13:0d:c2:79:49:41:af:40:07:72:b2:05:98:97:05:
5d:59:03:d0:18:ad:eb:a2:0c:02:44:56:c3:d4:7b:20:6d:fb:
17:9d:f6:3e:6d:01:35:3b:b0:de:89:0b:74:ef:e8:78:5b:3a:
f0:18:0c:e5:eb:51:64:39:db:db:ed:1f:78:ef:3d:87:79:c1:
a9:d5:41:74:13:3e:a6:6d:ce:31:b2:88:c2:77:2c:2d:64:f2:
95:3c:ac:4c:4e:1e:3a:99:34:01:1f:7a:57:e9:59:9a:c4:1c:
dd:b4:eb:ca:95:6d:4a:9b:22:07:99:36:1e:dd:d5:cc:cd:d2:
3e:87:0d:1f:f5:6c:1e:97:69:94:ec:96:e9:9c:8b:b9:c2:95:
23:06:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:09 2025 by rpki-client