Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa
File: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (raw, json)
Hash identifier: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=
Subject key identifier: FB:44:54:E7:E5:07:DB:60:CE:B1:03:85:B1:A4:F1:1B:F0:3D:8E:FF
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D722727977E7D469C8F27E902B23
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47226
IP address blocks: 88.80.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d7:22:72:79:77:e7:d4:69:c8:f2:7e:90:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb4454e7e507db60ceb10385b1a4f11bf03d8eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:3f:8d:61:7f:3d:8d:30:b7:d1:97:63:f9:
95:5e:ba:fe:e1:d9:96:ea:9d:8c:c9:b3:ee:86:e3:
c5:76:5b:5f:92:2f:d8:d0:e5:91:c2:9e:90:90:8a:
6c:4f:64:c8:72:6a:4a:43:e7:95:aa:92:f7:8f:f5:
49:e1:12:25:4c:90:5e:f7:6d:5c:2a:6b:6f:ab:2f:
7e:c4:98:67:38:b8:98:dd:c7:be:b8:6c:96:5d:27:
f3:2b:35:6a:26:42:7a:50:a9:d4:79:4e:b4:f3:0e:
8a:63:d7:5a:2e:f1:29:ae:f0:a7:5a:28:ab:27:9f:
ab:da:20:2c:66:ec:dc:26:bb:c0:61:00:95:a2:5c:
09:40:ca:46:5d:60:12:d4:6d:b3:00:8f:90:8a:c0:
49:60:e5:bb:82:5e:3f:e6:9a:9c:25:71:4c:a9:a3:
b6:b5:b5:c4:01:77:f8:58:3d:c1:0d:d8:70:6d:03:
11:22:6a:67:dd:d0:22:8f:50:30:ed:02:c1:cc:fc:
8e:88:df:b1:73:dc:9d:f9:54:90:0d:38:95:28:1b:
5e:f3:c0:13:02:01:3c:48:94:1e:26:c5:b0:cb:7a:
d0:5d:8e:68:bc:fc:99:22:96:f7:89:98:03:23:20:
0f:26:92:49:fe:51:00:8a:a1:48:d0:b7:7a:ff:0f:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:44:54:E7:E5:07:DB:60:CE:B1:03:85:B1:A4:F1:1B:F0:3D:8E:FF
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ec:e7:1f:32:a0:97:d2:69:eb:95:65:6c:54:ae:e1:fc:31:
e1:f8:3c:76:34:43:72:60:3e:ac:fb:7a:10:48:85:58:c0:00:
69:f6:d2:90:ee:e3:b6:2b:40:be:7a:21:3a:d0:49:8d:0d:1f:
3e:17:62:e0:72:9c:cb:62:43:df:67:56:3b:cc:b6:1c:f4:eb:
f5:95:66:c4:29:68:93:dd:3e:f2:b7:78:59:83:a9:42:6b:51:
6f:84:28:65:e0:c8:2f:f1:bd:bc:c7:dc:66:0d:5e:e9:66:17:
dc:ef:e2:63:0f:a1:47:07:60:74:29:36:e3:4e:cc:9e:b2:b7:
3d:08:a1:77:af:a5:79:17:e2:65:62:df:19:82:81:75:03:11:
5b:8f:d8:39:5b:0f:75:a8:44:1e:fd:a4:aa:a1:fb:6f:72:a9:
a8:33:f9:4a:c8:6e:ec:2f:22:5b:93:aa:0c:0a:31:b8:47:8f:
20:17:8d:76:b5:86:c2:e6:18:de:67:40:b8:67:ed:5a:3d:9d:
64:8a:15:35:9e:89:87:df:4f:02:ed:66:5f:ac:fd:bd:dd:6e:
89:d7:2a:d6:e8:db:dc:34:2d:42:7f:79:96:4f:b3:1b:54:9d:
62:ae:51:09:79:da:c6:40:7d:1b:08:46:e0:75:0e:30:80:d7:
6f:28:cf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:02 2025 by rpki-client