Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/efXu7921rKUjMeh6QSnTKqFINok.roa
File: efXu7921rKUjMeh6QSnTKqFINok.roa (raw, json)
Hash identifier: RGJvWjZ39p4/FyUeThCcbLXseal/TgbSHhE9M1fnTJk=
Subject key identifier: 79:F5:EE:EF:DD:B5:AC:A5:23:31:E8:7A:41:29:D3:2A:A1:48:36:89
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01940856E214F2055AEF96CE2AB2C6B67FDE
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/efXu7921rKUjMeh6QSnTKqFINok.roa
Signing time: Fri 27 Dec 2024 13:38:19 +0000
ROA not before: Fri 27 Dec 2024 13:38:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203728
IP address blocks: 88.80.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:56:e2:14:f2:05:5a:ef:96:ce:2a:b2:c6:b6:7f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Dec 27 13:38:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79f5eeefddb5aca52331e87a4129d32aa1483689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ad:0e:b4:ea:21:c2:4e:93:db:97:32:c6:42:
1b:2d:eb:b2:6c:48:dd:2a:3c:d9:c8:2e:9f:1a:a7:
b0:72:51:20:b9:44:43:67:c6:67:f3:f6:79:b9:04:
1b:ef:db:f8:f5:df:07:bd:88:0d:4d:0c:34:a1:0f:
e4:40:d8:d3:35:c0:9a:fe:ca:fb:67:54:00:20:45:
67:d3:63:55:01:63:b7:c2:2a:ac:d1:e5:d4:33:4e:
cd:28:01:bf:7f:8d:70:89:64:b2:0a:07:27:4c:a5:
ae:0a:9b:37:8e:e0:0f:9a:95:f2:a4:9a:d7:5f:8b:
a0:aa:d1:7c:2b:af:85:f5:43:8b:b5:33:a4:98:02:
60:0f:47:bf:c1:c1:df:fc:84:56:ec:ab:b5:f9:68:
d2:4c:48:5d:25:7b:17:20:d1:cb:8e:1d:6a:ed:32:
81:58:8c:63:90:dc:25:d6:88:87:d8:c5:b2:47:a6:
a6:f3:b9:b5:c7:d2:d4:40:7c:90:fe:21:7f:23:dc:
b5:4e:c8:d9:ad:30:36:ab:ef:06:75:99:9d:a5:bc:
16:a5:cb:8d:8a:2a:73:89:26:c5:67:f3:94:e3:41:
ef:45:66:da:52:8c:45:a4:fc:73:ca:05:94:57:57:
a3:35:b0:12:88:2e:c6:e1:35:cb:54:06:1f:ff:f4:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F5:EE:EF:DD:B5:AC:A5:23:31:E8:7A:41:29:D3:2A:A1:48:36:89
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/efXu7921rKUjMeh6QSnTKqFINok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e5:aa:cd:d7:57:4e:a6:4f:c2:11:3f:e9:d2:a8:a0:7d:58:
7d:72:33:f5:4d:ee:c6:07:b7:7d:8e:e7:0b:02:8b:0d:7f:55:
01:10:d0:4e:a1:7c:7b:8e:99:d4:de:25:bf:df:a9:c7:f6:8a:
e6:80:a8:5e:a0:4c:d4:b1:6a:bf:6f:6d:98:3f:f1:ff:5a:9b:
d7:f1:62:66:6b:e7:c0:ea:72:69:dd:48:d3:da:63:b0:3b:fc:
29:b9:91:f2:d9:87:fe:0b:5e:26:2f:0d:35:aa:16:33:74:06:
90:05:e1:2c:eb:15:ac:25:47:2e:cd:e1:f4:e2:eb:72:8f:b4:
7a:cc:6d:73:36:b6:3a:10:5f:c5:a9:d6:b4:90:be:72:96:de:
d7:9d:61:2d:24:52:ee:ea:de:46:e3:df:29:8a:b9:f4:1a:25:
58:c6:13:96:ab:c9:93:4a:f1:15:10:14:0f:fb:47:ba:59:d0:
1d:7b:60:71:8d:69:10:f3:f2:b8:6a:b4:76:1a:2b:28:32:ca:
5e:57:2d:ef:a7:b6:8c:8a:ae:e7:2c:3c:33:27:f9:b7:c5:88:
11:1f:ba:9a:e2:b9:b4:00:a9:df:8b:60:a3:c9:4a:ed:ee:0e:
f9:e7:56:c8:d4:14:bb:e3:3c:1c:89:21:22:0f:72:db:ac:b4:
bf:bf:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:48 2025 by rpki-client