Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/30HBNFGj_StP7OnHCFYamttMRRo.roa
File: 30HBNFGj_StP7OnHCFYamttMRRo.roa (raw, json)
Hash identifier: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=
Subject key identifier: DF:41:C1:34:51:A3:FD:2B:4F:EC:E9:C7:08:56:1A:9A:DB:4C:45:1A
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BC6A94A24FA0498C34F966675818D
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/30HBNFGj_StP7OnHCFYamttMRRo.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39285
IP address blocks: 80.121.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c6:a9:4a:24:fa:04:98:c3:4f:96:66:75:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df41c13451a3fd2b4fece9c708561a9adb4c451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:cc:af:22:9e:c4:a3:45:17:c7:c1:b0:3a:
b2:26:ec:be:89:21:fb:ae:71:50:a0:df:d0:6b:1b:
bf:b3:69:71:a9:b3:04:f2:50:c0:46:02:22:9d:6b:
0d:2b:a2:54:58:ff:ad:40:24:a2:80:88:7a:56:82:
66:f2:fc:5f:81:1b:5f:71:6b:5a:94:bc:52:a3:e4:
e1:dc:fd:5f:84:60:db:4d:f7:b7:43:7c:ce:01:44:
3c:81:2b:85:66:78:bd:71:6c:93:4c:05:e2:cd:03:
6b:30:d8:32:39:b6:8d:2b:e5:bc:fe:fd:33:ae:24:
e2:87:22:ba:f7:15:86:77:e1:ec:88:e4:3f:5b:7e:
fc:aa:76:5b:6a:67:15:67:a8:61:93:bc:57:44:e2:
15:e2:2e:bb:41:e8:6a:9d:fa:6f:01:f5:26:e4:d9:
85:04:09:72:cc:e2:02:cb:ba:78:fb:dc:c1:76:2b:
5b:8a:28:28:0d:94:77:f4:6c:f9:30:07:2d:ec:1a:
72:6e:66:71:7b:42:f1:9f:ec:dd:7c:be:17:cb:16:
af:21:a2:fa:e2:26:32:0b:b0:e0:d7:68:09:e7:05:
f7:06:ec:17:95:86:30:32:5e:78:2a:6a:09:3e:c8:
68:89:53:62:09:c6:7f:e9:fc:6b:38:9a:77:7a:33:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:C1:34:51:A3:FD:2B:4F:EC:E9:C7:08:56:1A:9A:DB:4C:45:1A
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/30HBNFGj_StP7OnHCFYamttMRRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.121.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:25:7d:8d:b0:19:54:46:31:b9:25:23:95:b8:01:71:8c:99:
e4:ba:49:d9:da:a3:9a:68:59:6c:a0:ae:44:60:ee:b3:14:25:
6c:ac:93:b9:22:56:fb:50:68:60:b8:8d:6d:19:10:df:22:42:
82:27:70:54:30:3b:3f:25:7a:10:b2:bf:6e:9d:7a:3f:a0:2a:
42:97:3b:3b:d1:27:2d:4e:37:75:fb:2e:ac:f1:63:b5:11:3c:
d0:51:eb:ef:86:14:1c:47:39:c2:be:f5:3d:ab:33:3b:73:6f:
92:dc:80:b1:ac:09:29:45:42:01:d5:5c:8b:a3:f6:70:6f:1c:
0d:90:d3:11:7f:69:0c:70:3a:ff:96:62:75:3e:b2:2a:5e:61:
12:e5:66:a9:22:be:59:85:34:ad:07:95:27:b4:78:82:61:0d:
ed:c7:be:bd:08:ea:bf:54:3e:be:c4:b6:c6:ab:c7:38:39:c4:
5f:c1:e6:6e:cd:48:9b:34:c9:82:1f:e9:51:f4:9e:02:ca:6e:
a9:04:29:1d:35:05:82:91:2f:ea:f1:7d:9b:f9:2d:9b:ee:83:
5b:79:a1:a8:5a:8d:90:c5:6d:b1:1f:ea:c6:8f:e2:f0:fb:36:
fb:82:ea:a5:e6:1f:c7:8e:85:dc:7b:5f:17:78:79:d9:ce:6f:
a9:5e:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:51 2025 by rpki-client