Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa
File: 1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa (raw, json)
Hash identifier: 5R9Ps8+XKEvJyKNmQySRtdXFtn/oxvTrhdjJdae+0Mc=
Subject key identifier: F8:57:40:99:2E:5A:AE:3C:E3:2C:04:FA:75:2A:43:BF:96:73:E5:8A
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01943AA944E586256573047751491ED8A3DB
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa
Signing time: Mon 06 Jan 2025 08:09:19 +0000
ROA not before: Mon 06 Jan 2025 08:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 88.80.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:a9:44:e5:86:25:65:73:04:77:51:49:1e:d8:a3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 6 08:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f85740992e5aae3ce32c04fa752a43bf9673e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:8b:92:5e:6e:1c:d2:cd:1a:5b:ea:14:48:
de:1d:87:3e:76:bf:37:3e:cb:bd:27:25:b6:ef:32:
c7:0e:0a:60:5d:24:47:03:1b:46:ea:72:e1:b5:b6:
9e:d6:72:b0:cb:3c:09:89:82:28:f8:e3:4e:d9:fe:
b9:4c:7c:6e:2c:85:18:f7:08:ae:1c:76:cf:ea:cc:
a5:eb:20:c6:5d:36:76:40:39:be:c0:ed:31:6a:b8:
48:73:0d:d6:a6:b6:1e:80:df:22:12:ab:2b:e8:ba:
31:69:76:87:a5:c8:46:84:c7:18:59:6e:f9:84:32:
7a:73:4d:68:a1:76:e9:5a:f3:be:20:55:2a:25:fc:
dc:e8:9c:8e:13:98:ad:3b:fe:f1:e1:79:3e:a3:31:
26:d1:c0:a1:f0:16:33:4d:0f:d4:90:0e:82:a1:55:
72:14:8e:e3:3c:a8:df:97:3a:2b:5a:00:b4:f0:fc:
91:15:f1:9a:88:aa:6b:6d:34:a4:2e:3b:7f:fc:e2:
96:dc:22:35:e3:82:6a:74:46:14:8e:1b:4d:aa:cf:
1c:e0:c6:d9:53:01:8d:7c:6a:91:23:39:93:0d:9d:
a0:99:77:d6:a7:8a:43:59:af:32:ba:5a:d6:06:e4:
e0:a5:94:b7:cf:27:77:e1:9a:ef:34:f0:56:ea:bf:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:57:40:99:2E:5A:AE:3C:E3:2C:04:FA:75:2A:43:BF:96:73:E5:8A
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
70:31:2a:3f:62:12:cb:e1:e7:1f:a6:0f:34:0f:4c:89:6a:19:
76:72:df:0c:7a:f0:67:c6:6f:3c:d0:8b:5a:a0:5d:ca:ce:a2:
d7:ad:d4:ac:92:b1:40:06:f2:09:04:9b:6b:cd:9b:11:ac:a8:
b7:dd:e8:07:aa:7f:7a:fa:a8:28:fa:73:16:fe:e7:bb:6a:11:
ce:6f:71:37:70:cf:d6:be:f3:01:c7:6e:b7:9d:66:0f:5d:b9:
c3:cb:f5:5c:74:df:4a:5d:d3:5c:ea:4b:4e:24:d2:41:cd:ce:
8d:d6:8d:04:e4:43:45:da:54:19:df:62:e7:cc:e9:0d:69:05:
37:d4:ea:82:fd:e5:3f:97:37:0a:ee:b8:b2:af:fe:27:3b:af:
51:78:d6:40:d5:e2:1f:69:a5:8f:96:c5:56:63:d1:a4:8f:75:
1a:c8:60:91:32:d1:ab:40:2a:f5:73:09:70:23:e1:c2:b7:10:
6c:81:d9:38:03:80:64:ce:fc:e0:d0:57:0e:e7:0d:30:7a:fc:
17:69:19:10:03:98:39:f1:38:53:45:0b:a4:33:4e:ba:b3:ae:
1b:78:e5:b2:5a:8a:bc:bd:f1:da:ae:54:c2:72:22:4b:84:fc:
e2:c0:7d:fb:4e:a6:ed:ea:b5:ef:f1:64:37:5d:b4:84:25:0f:
0a:d1:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:08 2025 by rpki-client