Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3zDvKjYX5qyyRWMCbEyCJb1whcI.roa
File: 3zDvKjYX5qyyRWMCbEyCJb1whcI.roa (raw, json)
Hash identifier: UgMcPhJl2XRyl5iipWHUcO/ZAIUXrG8hPqC4bk4RBnI=
Subject key identifier: DF:30:EF:2A:36:17:E6:AC:B2:45:63:02:6C:4C:82:25:BD:70:85:C2
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444DB91E7819BDA255EEEECA044F180
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3zDvKjYX5qyyRWMCbEyCJb1whcI.roa
Signing time: Wed 01 Jan 2025 23:47:59 +0000
ROA not before: Wed 01 Jan 2025 23:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215362
IP address blocks: 88.80.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:db:91:e7:81:9b:da:25:5e:ee:ec:a0:44:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df30ef2a3617e6acb24563026c4c8225bd7085c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:6d:ef:67:e7:92:71:5f:e0:b5:42:f1:38:
ac:dd:8f:7a:e7:23:2a:28:33:78:73:f5:90:62:d1:
95:44:b9:06:2a:e7:44:f2:ea:a6:7a:d6:d9:6b:11:
5c:80:41:11:f0:12:0e:90:44:13:47:37:d2:1d:df:
12:e0:ae:b4:f9:1a:da:57:df:fb:9e:e4:2e:9e:c3:
7a:d8:b4:15:15:56:03:57:bb:ca:55:25:0c:6c:e8:
26:15:ac:05:bc:0c:e3:69:1b:f8:62:46:40:fa:fd:
13:9a:c0:e6:dc:6c:e7:38:66:db:8a:79:d9:cc:dc:
ca:01:c9:21:28:b4:f3:7d:7b:dd:86:df:c0:1e:c7:
b4:60:ef:5c:b3:86:71:3f:31:9d:e0:43:fb:42:ae:
83:fd:6c:27:4b:34:53:f4:8d:e1:d6:cf:89:54:8f:
9e:63:70:05:77:25:b5:c2:ff:51:e6:a0:9a:d3:0e:
4d:96:90:66:fc:5c:e0:14:11:06:fb:f1:6a:c6:13:
17:b1:86:07:dc:ee:b8:3e:46:a0:0b:f9:bb:b1:cc:
cf:40:2a:d2:17:37:e2:ba:d6:01:3b:cd:b7:30:21:
7d:ec:52:3c:e9:5f:90:83:d7:81:e3:de:9d:65:0e:
25:b5:9a:de:3e:16:61:00:ad:ee:62:66:90:3f:59:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:30:EF:2A:36:17:E6:AC:B2:45:63:02:6C:4C:82:25:BD:70:85:C2
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3zDvKjYX5qyyRWMCbEyCJb1whcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a9:5b:44:66:d3:03:dc:81:76:a4:5b:21:ac:ce:29:d8:a8:
12:33:e6:59:17:1c:e2:05:55:10:19:ea:64:6b:65:11:10:a8:
e5:2f:f2:12:0d:9f:35:c4:8f:88:75:1f:3b:6c:28:a4:66:0b:
46:dd:5e:b7:fa:78:9d:94:1c:b3:a8:83:ee:dd:1a:c8:2d:82:
7d:29:b3:29:20:55:2f:f5:66:b5:24:fe:42:43:b2:83:88:48:
d6:d7:9c:02:75:4d:9b:a6:a2:35:2b:64:f8:b7:4b:81:60:60:
d0:b6:54:73:46:c1:27:a1:4f:d1:34:a6:5c:d6:b6:e7:16:81:
ce:ca:c6:7f:86:cf:de:0c:aa:2b:18:84:38:a7:e3:22:90:46:
c5:bd:ff:3f:74:a0:d4:18:a4:c4:09:77:fe:bd:6e:55:38:f7:
0a:c9:20:8c:48:87:81:38:0f:a3:fc:fc:62:01:ca:2d:07:0e:
3f:70:12:a7:1c:a9:64:bd:aa:b6:ba:4b:5b:31:64:f4:e2:a1:
f2:8f:02:7e:66:55:60:a0:91:88:ff:6e:d2:9a:74:24:bc:5a:
62:aa:a5:69:16:df:81:f2:de:78:1e:9e:d8:39:34:b5:1a:b3:
f8:b0:0d:15:f8:e2:70:b2:80:46:fe:cc:20:2c:3b:20:d8:2f:
e3:5d:71:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:59 2025 by rpki-client