Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Jw6bAqyt0l-qMswn3dDnqUlY2kw.roa
File: Jw6bAqyt0l-qMswn3dDnqUlY2kw.roa (raw, json)
Hash identifier: IIC9qtXnLw3C+Sb/5TgOoZ289L1tkFh9hjT1JrTz/uU=
Subject key identifier: 27:0E:9B:02:AC:AD:D2:5F:AA:32:CC:27:DD:D0:E7:A9:49:58:DA:4C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0194CC3AB30CA890FCEB52BF2218EF295437
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Jw6bAqyt0l-qMswn3dDnqUlY2kw.roa
Signing time: Mon 03 Feb 2025 14:33:06 +0000
ROA not before: Mon 03 Feb 2025 14:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 88.80.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:3a:b3:0c:a8:90:fc:eb:52:bf:22:18:ef:29:54:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 3 14:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=270e9b02acadd25faa32cc27ddd0e7a94958da4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:47:5f:4e:ed:46:22:d8:89:ca:93:13:ed:
d3:ce:76:8b:c4:c2:5b:db:42:b0:ab:e4:de:f6:74:
6b:d2:b7:56:d1:38:62:8f:b1:62:1d:8c:ba:73:30:
d2:8e:c0:40:57:37:d6:85:21:81:19:cd:8a:e0:4a:
91:05:16:d5:9f:f5:8d:91:56:db:a1:7b:02:a8:37:
27:63:01:2f:b9:1d:f2:68:4a:78:0b:1d:16:86:ee:
81:86:47:2e:f9:d1:4b:f7:b7:60:2f:24:ff:4d:c9:
45:a7:d3:7f:e4:6e:b0:76:a4:bf:b2:64:67:47:c7:
05:14:5f:18:6c:01:55:c9:d7:cb:ba:57:b7:14:a1:
75:3a:89:5c:6f:0f:55:ed:94:3f:fe:0a:5e:48:e7:
57:d2:50:3e:9d:c0:fe:04:7e:d8:03:b8:45:b1:f5:
98:11:4c:41:1e:19:dd:b7:15:4f:9e:c2:ae:78:0d:
fd:bb:00:ed:27:26:96:e8:35:1d:d2:1f:95:ca:74:
08:66:a6:e9:49:d1:e1:fd:ed:dd:0b:c5:14:46:8f:
f6:4f:23:2b:c5:00:f0:f4:ee:b7:80:53:74:8f:03:
97:3d:45:b8:2c:f1:1f:d7:1d:af:5f:07:d2:bd:d4:
7c:1c:b0:01:c8:be:6d:58:0f:bb:02:93:0f:1a:03:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:9B:02:AC:AD:D2:5F:AA:32:CC:27:DD:D0:E7:A9:49:58:DA:4C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Jw6bAqyt0l-qMswn3dDnqUlY2kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
61:dd:b6:0c:1e:7b:6d:10:56:cf:d5:0e:65:b9:52:70:5a:9c:
38:18:d8:e5:ae:43:b4:89:b2:89:e5:79:4c:c0:dd:3a:be:f8:
24:e2:be:56:87:de:fa:7d:73:b6:dc:b1:dc:30:03:c9:6c:20:
2b:af:2c:52:5c:73:53:be:c0:93:6f:a4:32:39:41:9f:e4:ac:
c9:82:06:7f:f7:34:18:ff:33:6d:80:74:54:d2:a9:63:56:2a:
f1:b9:e7:fe:dd:20:4e:87:0d:fe:cc:ce:5d:b6:53:0c:63:30:
85:0a:70:1f:a5:ee:65:c7:05:74:a0:80:33:f6:d9:44:23:3d:
ba:db:77:0c:f4:71:4a:c4:54:b9:d5:f3:19:b8:df:ce:6c:43:
78:f2:2f:21:00:1e:ab:b5:76:12:64:fc:ea:80:e3:96:a0:27:
61:85:51:f2:7c:ba:b6:1a:64:12:99:d9:14:b5:ea:9b:e7:61:
0a:1f:91:6f:fc:f4:95:b3:49:83:fe:6a:41:44:c7:1e:78:70:
6b:52:5f:54:31:bc:ff:29:1d:e5:d5:df:57:b2:9e:31:73:d3:
81:7c:c8:6a:2a:61:8e:78:46:76:ee:0e:f5:a9:83:85:78:28:
31:eb:69:a6:d9:a6:68:23:f8:ad:45:9c:d2:1c:b7:63:a1:e1:
c3:6d:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:18:32 2025 by rpki-client