Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa
File: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (raw, json)
Hash identifier: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=
Subject key identifier: BC:5B:10:F4:CA:B5:BA:93:E4:6A:8C:BE:0E:AE:27:14:17:44:A6:C7
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BC3B0317D924A6DFAD1EC2C47801D
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12810
IP address blocks: 80.75.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c3:b0:31:7d:92:4a:6d:fa:d1:ec:2c:47:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc5b10f4cab5ba93e46a8cbe0eae27141744a6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:90:bf:a7:e5:79:41:e2:7b:a7:7a:b0:46:
13:3f:68:a6:70:a4:80:04:10:10:b5:ad:65:7b:55:
7e:31:82:76:1b:97:20:3c:16:f2:85:86:0a:36:d7:
b9:6f:35:2c:2b:72:c8:07:43:b0:db:37:82:43:6a:
66:51:71:65:15:ec:4f:75:2f:b2:1c:58:2d:06:3f:
5a:5d:8b:39:6b:38:69:cd:c9:c9:f4:e1:73:bb:38:
5e:2a:c4:08:e0:cd:56:c1:46:6c:50:0f:ce:9a:66:
f2:63:72:49:eb:a7:9c:37:e0:03:25:5e:cb:ca:b1:
18:9b:57:de:60:25:cb:fe:a8:66:8d:37:f9:50:0f:
5e:76:d1:72:fb:c0:6f:bc:8b:a8:5e:cf:c5:5b:3a:
22:35:a9:37:2f:50:ba:3e:fc:ee:9a:1b:27:90:9a:
92:bf:53:cd:7d:05:32:ae:28:4f:48:14:cc:6c:f9:
c2:ba:e6:ea:c3:9a:c2:c8:cc:b5:4d:b3:2a:4f:58:
db:7a:ee:a2:f3:48:b3:6c:9e:d0:6e:3c:8c:f5:b8:
d5:e8:4d:36:cd:69:3a:d6:e0:97:b7:74:74:35:59:
72:58:28:15:ec:0d:4b:07:d0:1e:56:e1:91:0a:40:
e3:6f:cf:cb:ab:96:63:58:69:ec:6c:11:c0:70:bd:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:10:F4:CA:B5:BA:93:E4:6A:8C:BE:0E:AE:27:14:17:44:A6:C7
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.52.0/22
Signature Algorithm: sha256WithRSAEncryption
89:f7:a6:be:d7:79:a0:95:80:fd:ae:01:65:11:b5:5e:b4:68:
de:d9:d6:6c:b3:bb:ad:0e:ac:48:4b:f4:36:62:65:5d:9d:c4:
30:15:89:65:7c:8b:a8:ab:01:66:a5:f3:cb:88:72:1a:aa:84:
63:8e:79:fd:1d:0c:bb:81:fc:d8:fc:9a:fd:62:59:dd:86:df:
28:6d:96:d7:b7:6d:13:fc:f1:c6:65:33:b4:37:24:62:fa:1b:
ee:dc:31:9f:ad:71:67:9b:51:f2:7d:18:75:07:0b:ed:cf:c2:
b6:41:e5:20:17:fb:1d:b4:b1:89:b5:cd:39:9b:f8:92:51:26:
85:61:0e:60:0c:ac:10:26:e5:47:34:cc:c1:75:64:e9:7b:55:
be:2c:4f:4f:44:58:9d:99:1f:e7:03:7c:d3:0c:2d:85:23:0f:
ba:ee:d1:e6:fb:2f:10:12:6a:b3:0b:18:39:8a:f7:45:fb:0b:
dc:9d:2e:3b:0b:ad:19:7c:bb:22:68:1d:d6:7e:e3:1d:bf:20:
1b:af:16:88:9d:2f:c5:40:fa:52:67:fe:7d:0a:ba:75:f3:c1:
25:30:55:55:fe:7a:57:67:2e:11:56:f6:4f:dd:bd:36:9d:76:
4b:14:6b:8c:f9:81:ba:88:f1:6f:d1:f2:5f:e9:63:44:d1:4b:
1b:2a:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:50 2025 by rpki-client