Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/X2UArr6NpSeUa_r53UJKN_WcE2Q.roa
File: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (raw, json)
Hash identifier: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=
Subject key identifier: 5F:65:00:AE:BE:8D:A5:27:94:6B:FA:F9:DD:42:4A:37:F5:9C:13:64
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019427B5B6D2AEC8771998B321BB18094362
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/X2UArr6NpSeUa_r53UJKN_WcE2Q.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142561
IP address blocks: 80.246.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b6:d2:ae:c8:77:19:98:b3:21:bb:18:09:43:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f6500aebe8da527946bfaf9dd424a37f59c1364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:b9:ca:37:49:ec:af:03:bf:0c:c3:54:78:
8f:86:64:db:03:33:73:5e:b1:a9:5c:1e:98:5b:b0:
bb:4a:a4:1b:a1:56:69:31:f3:1d:ea:3a:ba:57:32:
30:11:79:b4:6d:b8:1e:1a:b8:e4:77:cb:a0:63:ce:
32:8c:3a:a6:ed:50:36:1f:d0:15:70:7d:00:ac:96:
ec:cb:a6:1b:37:98:4a:4e:e0:0c:6f:a6:d1:54:23:
2a:7d:86:da:f6:97:90:da:90:1d:a5:1a:4d:fa:4d:
59:c5:cc:d0:ed:36:00:c6:3a:11:d1:c3:db:6d:39:
5b:a6:b5:f8:1a:b8:9b:10:23:a7:14:86:a7:a7:6c:
4d:5c:56:e8:5e:6f:bc:e1:6c:ff:a6:aa:2a:a8:ea:
22:cc:11:3e:25:8d:b1:96:47:02:5f:4a:3b:59:d9:
f6:39:69:e9:b6:7a:e5:de:83:66:e2:cc:49:a0:3d:
58:01:5e:61:2d:dc:7f:8c:7d:78:e8:a5:77:eb:c6:
9e:a5:e2:d5:c8:9d:f4:e2:d6:ad:01:de:8a:36:9a:
0a:6d:47:b2:56:24:7d:ab:e2:4f:3a:e2:9d:9c:63:
de:1f:1c:50:a9:3d:bc:8f:df:31:3e:d6:5e:c7:2d:
a7:6e:ba:83:35:d1:40:33:35:45:71:15:dd:ec:d5:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:65:00:AE:BE:8D:A5:27:94:6B:FA:F9:DD:42:4A:37:F5:9C:13:64
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/X2UArr6NpSeUa_r53UJKN_WcE2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
Signature Algorithm: sha256WithRSAEncryption
37:39:50:44:58:88:a8:6e:5d:bd:8f:45:6f:cd:d7:09:c8:5b:
26:bb:34:6c:ce:75:76:2a:01:e9:2b:49:e1:5e:94:36:db:e1:
94:10:3f:e3:b8:fd:69:9e:cc:f0:a6:b8:31:60:ec:b3:3d:0b:
8a:e2:4b:46:d2:66:ab:6f:3e:0b:a5:24:2c:8f:04:65:19:9c:
a9:5e:f0:6a:b4:cf:d3:c9:77:19:a8:f1:0d:a0:af:4d:d7:4c:
20:59:6d:83:61:24:e9:b1:ea:16:c9:2f:c2:7a:c4:b6:4d:39:
7a:d0:dc:d0:d3:fe:a6:14:70:46:d8:5f:c2:fb:c2:7e:b8:0c:
4b:14:52:a9:0a:0e:c8:90:ed:a9:e9:77:2d:07:dd:46:f4:a5:
cb:6b:e7:87:79:75:74:cd:fd:71:8f:d1:54:da:0f:d3:35:af:
13:81:b4:37:e1:f5:70:46:55:4e:38:39:39:c3:85:0e:a9:18:
e3:8b:0a:7b:51:61:2c:ee:50:a9:a4:7a:40:8a:83:4a:a6:32:
04:03:f0:cc:04:5a:a0:07:3f:8d:44:0d:f5:5e:4c:fb:48:98:
f5:23:21:2d:b0:ce:57:ad:17:65:46:05:a6:ca:9e:be:46:16:
e8:b4:e5:1d:2a:0a:02:44:ff:bc:a6:68:7f:a1:da:f1:25:cf:
92:e6:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:30:32 2025 by rpki-client