Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/_apVPFDtoRumkOLoXwsvk68svtc.roa
File: _apVPFDtoRumkOLoXwsvk68svtc.roa (raw, json)
Hash identifier: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=
Subject key identifier: FD:AA:55:3C:50:ED:A1:1B:A6:90:E2:E8:5F:0B:2F:93:AF:2C:BE:D7
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 01941F8C79E6501561515C27FD2899039731
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/_apVPFDtoRumkOLoXwsvk68svtc.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8660
IP address blocks: 80.93.64.0/20 maxlen: 24
212.48.0.0/19 maxlen: 24
213.209.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:79:e6:50:15:61:51:5c:27:fd:28:99:03:97:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdaa553c50eda11ba690e2e85f0b2f93af2cbed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:cd:ad:e3:f3:72:70:00:e4:0d:e7:5a:0f:
70:a3:3b:ad:40:c2:1c:8c:a0:5f:db:05:bd:88:78:
81:53:d9:e5:80:34:a8:67:7b:26:84:59:06:32:6d:
4e:b0:e7:d1:01:a1:66:c6:41:cd:b1:69:69:ec:5e:
7a:db:55:f0:2b:61:24:31:3f:c1:e3:5f:d6:a0:d4:
b6:86:28:9c:81:de:4a:7f:25:58:33:d1:c6:ac:16:
00:04:77:89:09:02:be:b9:ae:49:eb:c6:6e:47:22:
b0:49:be:e5:47:5b:75:ba:90:f9:12:2e:eb:ac:4b:
76:4b:a6:40:47:9a:f1:59:64:66:cc:25:41:d1:46:
38:fc:e4:de:f3:49:50:2a:72:d5:91:e5:b9:16:ba:
2f:68:a9:ec:c5:f6:55:ef:0b:f5:11:9e:1f:de:f2:
67:a8:53:1d:b4:5a:87:c9:39:21:18:d8:05:9e:bd:
a2:45:76:75:3b:26:bc:ed:d3:fe:31:6a:6d:08:ff:
3b:df:ed:15:e1:76:b3:c5:a6:42:79:f1:5a:2e:4e:
72:8e:ad:93:d8:75:1c:3d:59:86:8d:bd:dd:e9:f2:
71:7b:bb:c9:0d:13:65:ba:0d:81:66:7a:e9:74:8c:
bc:63:65:95:2c:75:ac:0c:b4:ad:33:ed:8a:cb:57:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:55:3C:50:ED:A1:1B:A6:90:E2:E8:5F:0B:2F:93:AF:2C:BE:D7
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/_apVPFDtoRumkOLoXwsvk68svtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.64.0/20
212.48.0.0/19
213.209.0.0/18
Signature Algorithm: sha256WithRSAEncryption
48:7e:75:60:17:cd:d0:c8:d3:82:5a:3e:d7:62:8c:19:39:aa:
b1:f5:e2:7f:2b:a9:a6:47:c7:80:fd:ef:78:92:25:c6:4c:19:
15:7d:d7:13:89:d6:f0:ab:80:d7:14:93:1d:00:96:70:88:70:
f3:bc:19:73:ea:ac:d7:f1:30:30:d8:c9:b6:b6:9c:6d:ea:13:
0d:a4:36:18:48:8e:f3:60:5b:4f:eb:98:97:a6:e9:81:80:92:
98:a2:4a:7a:d4:f4:9f:50:75:22:4c:dc:f7:ff:b0:8a:e0:6a:
28:28:9c:7c:26:e7:fd:84:5c:03:24:24:f9:55:28:65:b7:53:
b6:5a:c6:da:37:78:0d:1f:67:90:1e:d7:04:d9:89:d0:2c:1b:
b7:fc:14:7e:8e:d0:b6:0e:30:fb:88:60:bd:ff:77:09:33:ae:
86:be:02:e3:10:c7:e0:0f:07:7d:f8:51:e0:0b:2a:9b:b7:29:
8b:b5:4a:a5:0f:37:39:16:47:cc:f1:51:2d:20:d1:83:5d:ca:
44:7d:30:01:50:b9:d5:ad:f9:42:96:26:01:c0:77:a9:4a:52:
d2:8b:4f:6d:3d:90:27:4d:88:cc:10:3c:c4:82:68:cc:fa:3d:
31:18:cb:dc:ce:ac:e3:2a:cb:f2:1d:5c:c1:2e:0f:77:82:48:
44:13:23:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:40 2025 by rpki-client