Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/S4NKYM9H1mScZNAkOJFwe50lD-g.roa
File: S4NKYM9H1mScZNAkOJFwe50lD-g.roa (raw, json)
Hash identifier: ApRurh5q5RCIuKVpLvzJpAj4IwDbgQtwetkgD7o9izg=
Subject key identifier: 4B:83:4A:60:CF:47:D6:64:9C:64:D0:24:38:91:70:7B:9D:25:0F:E8
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D14F587C1A6B07F1AF7FE19BD36E
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/S4NKYM9H1mScZNAkOJFwe50lD-g.roa
Signing time: Wed 01 Jan 2025 23:47:57 +0000
ROA not before: Wed 01 Jan 2025 23:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.80.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d1:4f:58:7c:1a:6b:07:f1:af:7f:e1:9b:d3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b834a60cf47d6649c64d0243891707b9d250fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:c2:b2:5b:39:35:35:49:4a:9a:91:e9:9d:
ff:7f:e4:99:d6:d1:7c:69:c8:31:c4:cc:be:42:9e:
ff:44:53:e3:37:42:e8:a7:4a:1e:5c:f5:e1:89:6e:
51:4c:81:fe:71:16:fe:82:26:fb:24:75:60:55:97:
05:33:60:8b:50:46:77:27:77:e7:fe:8c:68:25:88:
90:cb:34:bb:45:4f:14:1b:80:d2:d5:e3:38:e4:9c:
e4:ef:85:0b:49:3f:39:9d:1d:3f:f9:e5:a2:e9:99:
db:d9:db:7d:7b:06:96:b1:ab:6c:e3:08:d0:72:73:
4e:51:d4:57:bb:26:d7:18:c0:33:3d:dc:56:d2:b8:
41:4f:18:b6:95:c6:d0:b6:af:98:e9:ff:ac:0f:96:
17:77:b1:79:8a:ad:4e:40:75:21:22:16:74:ee:2a:
cc:53:a3:e6:ac:85:30:3a:dd:6e:5a:dd:e7:9e:41:
30:3b:90:6f:aa:db:7b:4f:77:ae:99:4e:03:6e:39:
0c:11:bb:d4:10:47:ad:b4:43:44:c2:47:4e:23:27:
99:ff:65:96:42:d5:f0:5f:32:16:8f:cc:89:52:76:
60:a4:cb:b9:59:c0:27:64:1c:e0:69:e5:bf:67:2d:
22:ee:cb:15:82:43:b5:42:07:ce:5f:17:d2:75:10:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:83:4A:60:CF:47:D6:64:9C:64:D0:24:38:91:70:7B:9D:25:0F:E8
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/S4NKYM9H1mScZNAkOJFwe50lD-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:6f:16:95:ca:0a:e3:3a:78:6c:9e:1f:3b:28:04:ad:95:81:
0c:53:79:3d:6c:ef:2f:78:92:3b:88:5d:d6:19:3a:f0:37:8c:
52:62:0f:43:fc:1b:2b:cd:82:b9:86:f1:1e:de:6a:af:92:5a:
7d:b5:12:56:64:30:cf:c5:78:8b:4b:94:10:a2:ec:3a:17:f5:
0d:91:42:c5:19:3b:ca:da:74:67:ff:39:dc:da:43:80:c7:36:
af:60:f5:82:7b:19:f8:27:63:e7:34:df:8d:1f:21:2f:cf:ba:
df:b8:d0:9b:7e:57:e8:bf:58:ab:16:47:c3:0a:13:b4:79:50:
b9:8a:ad:ec:50:ad:e3:a8:75:92:6c:d5:91:5e:d4:30:99:d9:
aa:86:09:9d:54:4f:52:75:9a:54:c7:f0:9d:1e:b8:99:6f:0c:
64:e6:f8:c0:3c:b5:75:c2:15:ba:ca:83:f4:e4:a7:e7:fb:67:
6b:a9:46:eb:52:b7:ca:a6:62:df:12:43:95:81:bb:f1:4e:94:
97:12:61:f4:d3:e2:4c:b7:6d:50:e9:d3:25:c6:23:a4:24:74:
72:73:29:29:8e:70:37:4c:65:0a:64:71:e3:e8:e4:73:45:2b:
d8:3c:6a:0d:38:f4:25:e2:2d:b8:4f:68:1a:66:45:d7:e0:09:
a8:2b:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:17 2025 by rpki-client