Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iZp5J_308jbuvkg3UZmxjMz-K7A.roa
File: iZp5J_308jbuvkg3UZmxjMz-K7A.roa (raw, json)
Hash identifier: Ncfp6CzHWNdXRfoGYx8UA9u4P5rjMP3I3db35A81xEc=
Subject key identifier: 89:9A:79:27:FD:F4:F2:36:EE:BE:48:37:51:99:B1:8C:CC:FE:2B:B0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D1EA0DCFE4A5248FB1E7B50FEB4F9
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iZp5J_308jbuvkg3UZmxjMz-K7A.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6854
IP address blocks: 80.253.0.0/20 maxlen: 20
83.222.192.0/19 maxlen: 19
83.229.128.0/17 maxlen: 17
195.230.64.0/19 maxlen: 19
213.243.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1e:a0:dc:fe:4a:52:48:fb:1e:7b:50:fe:b4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=899a7927fdf4f236eebe48375199b18cccfe2bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:81:b8:a4:5d:e8:44:3c:03:82:57:61:0d:
4d:ae:56:26:76:9e:19:c4:d8:92:62:35:ba:0d:3a:
7f:16:0d:22:3f:17:a2:5d:bc:f8:31:98:0f:fc:70:
c0:79:8d:9d:c8:b9:81:fd:36:9a:20:f0:d4:2b:47:
b8:fe:5b:45:28:83:5b:e8:fc:b2:32:d5:8c:62:5c:
1c:08:56:a6:af:fa:5f:95:f9:10:40:ac:74:5c:30:
87:c7:81:36:28:ae:e2:97:5a:4f:e9:15:8a:e1:7c:
da:9f:ff:85:e7:67:38:a8:98:a4:21:be:ae:b1:83:
99:95:72:04:d9:bd:dc:03:3b:a8:e4:7d:32:ab:4c:
a2:bc:5d:12:72:c0:ce:98:8d:79:41:4e:a5:46:5a:
36:bc:95:3d:af:59:4f:db:0c:b0:1e:31:28:a0:5f:
9e:ea:be:d9:35:a3:83:07:94:a8:eb:b1:e1:fc:21:
bd:5e:d0:58:d8:9c:4c:9a:c0:26:31:13:91:26:88:
18:77:81:58:fd:b4:4e:0b:57:dd:ba:da:30:ae:14:
30:98:31:03:fc:0d:c5:30:d8:46:fd:d3:5b:27:93:
e1:94:29:d7:9c:34:e6:50:b4:9f:9b:22:46:19:a6:
80:2b:a6:87:24:a1:1d:b8:ae:2c:a9:00:50:4c:e1:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:79:27:FD:F4:F2:36:EE:BE:48:37:51:99:B1:8C:CC:FE:2B:B0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iZp5J_308jbuvkg3UZmxjMz-K7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
195.230.64.0/19
213.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
92:48:2d:85:73:e9:76:5a:3e:f4:a1:a6:d5:0f:04:9e:79:ed:
24:55:3a:29:f3:d3:23:ad:bb:72:85:bf:91:c9:38:9a:cd:45:
71:d6:1a:b6:e2:1a:11:55:ea:46:a7:02:42:f6:20:1f:49:89:
25:fa:e5:cc:aa:7e:9f:be:42:81:60:42:8c:fd:be:cc:50:99:
ba:f6:6c:b6:16:ea:8a:14:33:c1:db:8f:58:3c:54:a2:4a:6e:
69:63:5d:1e:a6:7e:02:6a:ea:23:d2:2e:b1:e9:92:2a:dc:80:
03:fc:94:fa:aa:dc:09:67:b2:ed:37:fc:03:0e:17:71:c5:65:
8c:e3:d2:b5:db:f2:a8:f4:31:20:84:ef:79:21:d7:90:fb:16:
20:d0:25:17:88:13:a2:db:8a:21:3a:c7:08:b5:a4:2c:ec:c0:
b3:55:ca:22:91:be:a1:0b:ca:a6:61:82:1d:05:72:a1:12:f1:
6f:ea:07:e8:26:c4:81:91:24:28:64:02:d5:87:56:9a:4e:10:
ff:c8:eb:de:43:58:c0:fd:16:64:c9:3f:7c:c3:1e:ca:aa:05:
78:ad:1a:b6:80:67:02:fd:b9:f8:4f:da:b7:fa:4a:7a:6e:ca:
6c:25:28:e5:93:0b:e1:df:02:49:c4:72:ec:03:d7:e7:2a:87:
6f:3e:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:41 2025 by rpki-client