Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/lvJUcUmW5vFUs87cnXSzy_rAw1M.roa
File: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (raw, json)
Hash identifier: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=
Subject key identifier: 96:F2:54:71:49:96:E6:F1:54:B3:CE:DC:9D:74:B3:CB:FA:C0:C3:53
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019421B2492D730647A638BC5C57BEE60290
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/lvJUcUmW5vFUs87cnXSzy_rAw1M.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30933
IP address blocks: 80.253.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:49:2d:73:06:47:a6:38:bc:5c:57:be:e6:02:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f254714996e6f154b3cedc9d74b3cbfac0c353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:47:57:a2:6a:bb:97:c7:6f:24:6d:5d:7a:
4f:32:7e:95:08:81:34:16:f1:26:19:85:e9:c3:85:
b6:00:26:36:36:dc:ee:ba:cb:5b:b4:c4:4d:90:5b:
4f:a8:3e:02:ae:2b:29:b6:f8:d3:e1:e7:7c:9c:ca:
8f:66:6e:d3:44:21:63:1f:d5:cc:03:08:64:89:d8:
90:2b:19:82:75:07:dc:3f:0d:fd:f3:41:81:d8:2c:
49:5b:76:e3:dd:7d:51:2d:4a:2a:dc:ba:24:9c:ed:
1b:7d:ad:51:99:c5:fc:9c:9c:82:1e:ec:8a:ad:06:
f4:ea:5b:33:d8:0f:fb:ff:f9:58:b9:18:49:90:a1:
40:f2:cd:82:53:dc:d2:26:da:df:b9:6c:87:9b:10:
1b:65:0d:b1:3b:ac:f4:c3:0b:04:1e:72:f8:f0:27:
16:29:b1:3c:f7:6c:78:21:e9:cf:a5:ce:68:a0:f7:
cc:7c:18:7d:91:26:a6:ae:fb:14:a2:56:f5:98:a3:
71:be:7f:e2:19:49:8b:57:2c:11:fd:dc:9d:d8:4b:
45:95:af:36:5a:8c:e0:75:8b:06:dd:ef:bd:d2:6d:
02:45:78:58:27:15:1c:8b:95:e7:ba:68:c7:41:b1:
fa:9a:17:55:10:83:b3:76:0a:31:cb:3e:95:2a:34:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F2:54:71:49:96:E6:F1:54:B3:CE:DC:9D:74:B3:CB:FA:C0:C3:53
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/lvJUcUmW5vFUs87cnXSzy_rAw1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5e:ff:ac:49:9e:17:1c:73:25:b5:9e:59:b3:88:3b:5b:7f:
85:5f:af:bb:4c:9c:cb:0a:96:e6:98:d0:1b:de:59:c1:ad:f5:
2f:d3:2c:ff:b1:55:48:77:1f:2e:d5:7d:e9:89:7f:40:57:dc:
e5:f7:99:a1:d7:ec:61:8d:e9:d3:f9:bf:fb:71:7a:aa:4a:7a:
e5:21:4b:79:58:2e:b0:6f:4f:4a:22:f8:30:dc:c2:01:e9:97:
65:c1:08:29:f5:17:0f:29:fe:db:af:c1:46:dd:27:01:27:eb:
50:d5:c2:54:41:8d:ab:f5:38:d7:9e:90:36:95:29:82:d8:08:
5e:8e:60:74:e6:5a:20:36:bb:5a:a1:9f:40:16:e8:56:68:64:
bc:92:ea:1b:27:5a:cc:c2:4c:6c:f4:ea:95:aa:f1:55:0c:d7:
dd:9a:55:7b:25:2e:1e:f5:46:b3:7e:67:9c:83:64:76:4b:f9:
77:e3:f5:4f:df:10:91:f6:6b:d3:01:5a:91:53:42:d4:7d:88:
8e:34:21:cd:02:a6:2f:d7:6c:b9:69:4c:7b:da:a0:f1:be:f3:
a2:ab:cf:eb:b4:83:e3:ed:60:02:89:43:a4:a7:0a:37:68:db:
b1:33:e9:68:89:e9:e0:99:e7:77:56:7c:ad:59:97:90:4a:78:
5b:97:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:03:54 2025 by rpki-client