Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/Nz7RsJhjHd8laUFS5VW1Hl1YbzA.roa
File: Nz7RsJhjHd8laUFS5VW1Hl1YbzA.roa (raw, json)
Hash identifier: hsecIOj4uXcmu731WsTUcwfrCsQMm0hoZIpZ2yJJHaI=
Subject key identifier: 37:3E:D1:B0:98:63:1D:DF:25:69:41:52:E5:55:B5:1E:5D:58:6F:30
Certificate issuer: /CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Certificate serial: 018CABAA0FFD1BCAAC37A9C67895084B8D55
Authority key identifier: 6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/Nz7RsJhjHd8laUFS5VW1Hl1YbzA.roa
Signing time: Wed 27 Dec 2023 14:24:58 +0000
ROA not before: Wed 27 Dec 2023 14:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 80.91.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:aa:0f:fd:1b:ca:ac:37:a9:c6:78:95:08:4b:8d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Validity
Not Before: Dec 27 14:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=373ed1b098631ddf25694152e555b51e5d586f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:6c:9a:8e:d4:fa:ec:01:56:3b:c9:1b:10:
86:fa:af:d2:c3:c7:74:0c:7f:62:32:a0:83:5e:21:
a7:22:16:68:fd:4d:3b:be:6f:e3:9e:40:83:b1:16:
de:0e:ed:28:01:9b:11:19:10:30:08:af:0c:d9:33:
ee:ca:db:6b:98:5b:86:3b:b2:d7:c2:b1:c8:21:03:
18:e1:f7:ba:a9:12:a5:df:14:51:c2:60:e6:44:00:
ef:ab:7a:a6:0e:34:3d:a6:d1:bf:28:c3:4e:bb:b4:
9e:e6:88:41:28:15:10:ce:31:e7:63:7e:8d:7e:1f:
63:ed:9e:eb:03:60:04:17:08:23:ba:17:ec:73:9d:
70:0d:a9:bf:d4:98:0c:8c:65:e7:58:f6:95:70:0f:
19:52:67:e7:08:35:83:27:11:bf:ce:3e:74:a3:ea:
f8:23:38:40:57:d2:c7:e9:9d:6a:4c:02:5f:75:6e:
e6:36:d1:e2:99:47:a0:f7:9a:55:87:1f:e1:88:fb:
3e:09:ab:b8:93:e3:94:aa:5b:87:c2:43:09:1f:16:
c6:c7:92:a8:33:9e:32:60:e1:c5:3f:1e:f3:a0:49:
bc:8a:63:f6:cc:4d:4b:03:98:fd:c1:91:9e:28:e0:
6b:3a:62:1c:94:bd:25:aa:37:bb:e4:33:2f:76:96:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3E:D1:B0:98:63:1D:DF:25:69:41:52:E5:55:B5:1E:5D:58:6F:30
X509v3 Authority Key Identifier:
keyid:6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/Nz7RsJhjHd8laUFS5VW1Hl1YbzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.221.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b3:81:1c:11:9d:a5:e6:fd:cf:c3:27:57:72:f2:35:35:ac:
95:c4:44:5f:ba:d0:ed:9b:04:56:06:bf:c0:c3:7d:dd:0a:18:
60:a0:cc:cc:90:7b:b1:af:83:c1:d5:dc:50:31:e8:71:e7:f6:
92:50:07:42:ff:d6:9e:a8:f8:22:24:e1:bd:d8:a2:09:ab:f2:
58:30:77:b4:09:a3:c6:e9:b2:bc:26:a2:07:92:df:15:9f:11:
2e:e8:93:64:3f:fc:e1:d0:94:3b:c1:63:36:de:67:5b:b2:74:
31:fa:a3:75:1b:24:63:92:46:54:9c:b5:09:54:95:b6:3d:07:
77:dc:21:fe:ab:9b:03:9c:96:0a:62:a4:7e:06:e0:1b:9b:68:
15:56:ab:da:fa:75:a3:65:a9:cf:3e:d8:a6:7e:d8:c7:2d:23:
5c:cb:c2:75:13:2e:84:d7:e2:49:a4:97:20:b1:d3:97:e0:be:
ac:30:92:31:30:3e:3b:a9:ce:e4:29:e9:bd:bd:33:43:45:8d:
b8:52:d4:19:c4:ca:99:9e:c0:8b:e5:97:aa:4f:5e:e4:f4:03:
e1:82:27:87:a7:c2:6e:ba:c6:2e:57:89:55:56:8e:07:da:f7:
74:d4:54:99:0b:78:da:3f:d3:df:8d:a8:79:25:82:02:0e:fc:
f1:0a:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:34 2025 by rpki-client