Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/n-69sBNziEDXgnEUh4AE0Iws0nY.roa
File: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (raw, json)
Hash identifier: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=
Subject key identifier: 9F:EE:BD:B0:13:73:88:40:D7:82:71:14:87:80:04:D0:8C:2C:D2:76
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BCF82C5B339664740CFD2FC460E95
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/n-69sBNziEDXgnEUh4AE0Iws0nY.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207868
IP address blocks: 80.120.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cf:82:c5:b3:39:66:47:40:cf:d2:fc:46:0e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9feebdb013738840d7827114878004d08c2cd276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:f5:1d:63:fa:b8:53:d3:5b:31:ae:03:fc:
2e:78:e9:38:f1:37:65:bd:9e:c6:98:fa:3b:65:97:
99:39:44:59:b7:d2:0e:d0:1b:06:ec:09:cf:2c:20:
dc:d9:96:5e:78:88:5c:db:89:46:7c:a0:93:10:3d:
22:08:66:cd:4b:03:36:7b:08:3e:b0:1f:28:ef:eb:
15:a1:3a:66:70:7c:74:3b:88:8f:08:b0:dd:67:2c:
2e:51:9b:0d:30:e2:53:dd:48:b4:74:3f:8c:a8:55:
1f:32:eb:a7:3f:82:03:62:54:4d:9b:c6:c9:49:df:
3d:d4:33:d9:bb:35:78:12:75:b6:25:89:7e:f3:d5:
00:32:65:70:25:94:f4:90:2d:6e:10:d7:5c:f3:93:
66:ff:0b:81:2f:a9:e3:6a:1c:b4:9b:28:dd:27:27:
af:69:6f:e2:6e:15:25:4c:61:91:11:be:c8:af:95:
57:36:f1:72:18:3a:f9:e4:69:fa:95:53:51:36:04:
ef:22:ce:c6:57:6f:8e:21:22:7e:3d:aa:27:01:d6:
11:54:a0:24:be:3b:1d:7c:78:48:70:68:ea:d2:8c:
59:5a:90:e5:fc:31:34:5e:07:83:53:d4:00:c0:b8:
88:32:94:49:4e:e4:83:d3:2e:f0:23:39:97:8a:9a:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EE:BD:B0:13:73:88:40:D7:82:71:14:87:80:04:D0:8C:2C:D2:76
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/n-69sBNziEDXgnEUh4AE0Iws0nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:53:11:5c:39:d1:f7:8b:33:36:e9:06:49:a8:d3:a3:ef:ad:
30:a4:7d:dc:ac:50:89:04:0e:cb:e4:68:e5:66:f8:de:33:07:
dd:e0:35:98:de:78:48:fd:63:a7:ae:63:f1:63:03:12:f4:b5:
b1:a0:3d:6e:18:19:cf:35:f8:29:f2:69:ab:a4:f3:e9:29:d2:
b4:f6:34:3f:e0:1d:1e:3f:f6:92:76:88:07:ef:69:8b:77:53:
2e:92:1e:64:71:ad:9a:44:19:c5:f5:51:3f:0f:01:c2:17:e9:
cb:1a:14:73:09:69:e2:89:eb:df:b4:ea:f2:33:1d:6f:7b:25:
63:d2:90:f5:be:a5:a7:ca:57:3e:76:31:88:e7:ce:23:d5:aa:
c0:f9:51:69:57:d1:9c:38:a7:14:75:84:b0:af:9a:b9:c5:55:
54:dd:7f:81:23:05:4f:bb:4c:a1:41:05:65:e8:a1:d2:30:d4:
bd:ea:39:27:6e:24:28:97:0e:65:af:b9:8c:7a:e7:e5:85:86:
3b:9a:29:73:d9:71:d7:34:18:58:f2:1c:41:09:f3:98:7f:9a:
d3:d4:83:a9:24:14:3e:aa:10:4b:37:a9:48:ff:32:43:c9:a0:
e7:54:ea:6c:50:55:8a:12:11:96:ab:7b:84:f7:66:26:9e:c5:
98:25:fc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:29 2025 by rpki-client