Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/fIseoNpXyoIbe5wY0lSbaSP_4ic.roa
File: fIseoNpXyoIbe5wY0lSbaSP_4ic.roa (raw, json)
Hash identifier: mEMZgq2Ul7pASwqN+Q04bUDJ1OmP5qgM6LAFHmZqdn4=
Subject key identifier: 7C:8B:1E:A0:DA:57:CA:82:1B:7B:9C:18:D2:54:9B:69:23:FF:E2:27
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B5EFF4A78A7216E01E0B6EB59591A
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/fIseoNpXyoIbe5wY0lSbaSP_4ic.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206105
IP address blocks: 80.95.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5e:ff:4a:78:a7:21:6e:01:e0:b6:eb:59:59:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c8b1ea0da57ca821b7b9c18d2549b6923ffe227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:47:d1:36:8c:8e:39:70:9d:57:6a:97:2e:
e6:6a:bb:8f:9f:b0:c3:83:36:28:64:86:58:56:f0:
5f:47:96:64:30:7e:bf:06:4b:3d:bb:bf:69:8e:34:
45:7f:30:b1:85:b0:c0:84:a3:97:f2:f1:38:65:3b:
44:12:e0:8e:85:12:5a:29:c3:7c:23:ef:b1:3b:fa:
b3:b3:52:9d:26:f9:b9:d4:e7:ac:a3:65:e3:6b:ad:
23:fa:dd:11:5f:54:41:e7:77:9c:15:5e:a6:0b:01:
8a:95:7c:bd:31:a1:c6:9d:80:de:4d:bf:e4:33:56:
fb:fc:f3:0c:e9:09:57:84:de:26:ae:d4:e8:e3:dd:
53:7d:b9:c5:72:eb:38:7a:b0:6f:5a:06:82:bb:7e:
0b:46:61:2a:34:3a:8a:50:a9:30:55:76:39:50:b2:
38:cc:57:b1:f0:36:9f:3f:c3:c0:44:2c:63:4b:77:
38:26:4a:5d:e4:d0:d5:21:c5:de:4e:66:1a:90:e5:
b7:52:3b:81:db:1b:92:d6:55:8a:60:9e:d4:d0:24:
ac:5e:15:18:41:8b:f0:d9:9d:03:0d:ae:c0:fe:c8:
ce:5e:06:a1:60:69:ca:14:99:93:a3:03:2d:55:b9:
49:65:e5:c8:aa:5d:b3:6c:39:49:b6:38:8b:ea:63:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:1E:A0:DA:57:CA:82:1B:7B:9C:18:D2:54:9B:69:23:FF:E2:27
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/fIseoNpXyoIbe5wY0lSbaSP_4ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0a:c9:d2:58:2f:12:12:f5:9f:71:f5:15:31:f5:2e:06:0d:
f7:27:de:bd:7e:dd:15:88:23:28:9c:27:2d:32:2f:f2:d5:38:
76:32:33:66:5c:5a:43:9f:3e:65:8c:27:85:68:79:e2:40:4e:
73:7d:3d:07:3c:a6:5f:a8:56:cc:a2:4a:c4:52:7c:14:a0:ac:
5c:2f:d2:6b:27:14:e1:a0:eb:97:ae:9d:a5:4d:d3:7a:fe:e6:
f0:b8:31:b8:fd:c7:12:68:69:8e:25:90:22:83:08:36:9f:71:
92:f4:64:2a:2a:0c:bc:a0:1f:2d:dc:cb:10:87:07:1f:5e:3d:
b3:2f:ac:35:e8:8c:66:ae:b9:ca:f1:15:ee:d9:79:4a:cd:85:
f0:85:7e:fb:c1:3f:71:0c:5a:0e:14:97:af:0c:cc:9a:58:c8:
b1:08:9d:8e:cc:74:28:b5:4a:fc:71:63:45:e6:b0:c5:58:ee:
2b:db:9d:d5:94:41:7b:d4:b4:7b:49:45:d4:08:45:a3:2f:af:
7b:f0:6c:7a:40:b3:cb:0c:ad:80:52:1f:43:e6:76:93:84:ec:
10:cf:58:15:f6:55:ec:86:a6:45:05:41:56:93:8d:27:51:7c:
af:1b:18:01:5c:4c:bd:8e:c7:63:ca:fa:22:a7:f2:81:ba:d5:
53:ae:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:57:10 2025 by rpki-client