Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/53Sw43oc54bFdYl3J8aYgPuTq1A.roa
File: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (raw, json)
Hash identifier: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=
Subject key identifier: E7:74:B0:E3:7A:1C:E7:86:C5:75:89:77:27:C6:98:80:FB:93:AB:50
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 0194228DF9E6E70EF7AF0E6541ECDC8E0F7A
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/53Sw43oc54bFdYl3J8aYgPuTq1A.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 80.245.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f9:e6:e7:0e:f7:af:0e:65:41:ec:dc:8e:0f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e774b0e37a1ce786c575897727c69880fb93ab50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:de:89:eb:48:df:c4:48:b4:01:e4:4a:5d:
86:e4:37:35:b4:26:cc:4d:f5:d2:55:18:a2:52:de:
cf:e1:9e:4f:e8:39:af:d0:9c:d7:93:57:60:32:77:
2e:fb:59:1c:49:51:fa:3e:4a:74:f9:93:fc:3e:a3:
34:3b:a0:04:cf:08:1a:a9:9a:5a:c3:52:3c:da:8d:
7d:95:0a:d3:0b:7c:e7:e2:28:8e:5f:65:91:b9:ea:
db:99:64:63:51:19:b6:0a:e5:ba:41:36:cf:f2:0f:
8e:81:97:a5:c6:19:8a:52:55:eb:f2:d1:db:fd:e6:
68:dc:97:f6:e3:af:0a:f1:47:cc:78:e5:1f:34:18:
21:cd:71:25:d1:26:7f:67:37:26:72:01:c4:a8:ef:
c9:08:e0:e3:9a:00:39:16:56:3f:e8:6b:94:df:52:
ae:60:31:86:ce:90:f2:10:81:12:60:35:2c:cf:2c:
1c:58:8e:f2:df:15:53:94:f9:83:bb:d7:72:66:e3:
9e:47:3a:88:4c:ef:ce:73:e2:e0:f1:72:52:50:a1:
d9:14:3f:fe:8f:a1:ba:25:23:af:55:86:64:0e:8d:
8a:d4:5d:35:51:db:80:d2:db:b2:0d:d8:40:b6:25:
fe:84:5c:c3:9f:d0:79:17:0e:27:85:2f:ef:55:13:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:B0:E3:7A:1C:E7:86:C5:75:89:77:27:C6:98:80:FB:93:AB:50
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/53Sw43oc54bFdYl3J8aYgPuTq1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.47.0/24
Signature Algorithm: sha256WithRSAEncryption
93:88:4b:25:90:08:23:15:c9:99:6f:c5:d7:69:c9:da:eb:b3:
29:4f:7c:39:cb:c3:d3:14:26:d3:21:58:92:f4:7d:4f:6d:87:
99:75:9b:70:1b:61:1f:17:e7:99:24:c3:d2:bc:1e:95:1d:2b:
4d:63:4f:bc:9c:67:5d:5e:d2:25:66:db:2d:2f:3a:4f:60:b7:
67:6e:45:e7:01:be:87:86:dc:3d:66:78:8b:85:9d:5e:83:74:
32:c3:6b:e0:97:34:9f:a9:df:f0:2a:c4:e2:19:73:ac:24:de:
24:e0:c6:83:4e:e7:82:59:61:98:19:e9:54:22:d2:c5:68:2c:
d4:b2:b4:87:35:b3:04:ad:59:10:d6:b2:21:62:d5:21:a4:32:
16:57:e4:ea:ee:9b:a4:1f:bc:16:ab:12:db:4b:b8:be:f3:f1:
a0:1e:d2:39:43:ba:26:87:77:a7:3a:0b:57:48:4a:ac:5f:62:
b0:1e:d8:a7:e9:b2:3b:d7:cb:11:1d:64:b2:82:0d:1d:bc:98:
e3:f7:09:bf:a8:7b:c1:fb:c8:16:41:9f:bb:1b:3d:1d:d4:f7:
5e:f1:ac:2e:38:0f:05:97:ea:22:0c:09:e2:f6:e0:f2:d4:90:
de:45:f5:0f:79:0d:cf:97:8d:c8:55:ee:01:f5:f6:4e:a6:20:
ce:25:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:22:09 2025 by rpki-client