Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-CcPjQNXW1Chxy85jGqOlZ4Oq4s.roa
File: 1-CcPjQNXW1Chxy85jGqOlZ4Oq4s.roa (raw, json)
Hash identifier: hEQVtc4Fd2OGW6Z81p51UK9/Tvh9zBmpdGw3XBQy2Fk=
Subject key identifier: F8:27:0F:8D:03:57:5B:50:A1:C7:2F:39:8C:6A:8E:95:9E:0E:AB:8B
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019585F39148082F60BC6B9255FE542F07C2
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-CcPjQNXW1Chxy85jGqOlZ4Oq4s.roa
Signing time: Tue 11 Mar 2025 16:04:46 +0000
ROA not before: Tue 11 Mar 2025 16:04:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216341
IP address blocks: 80.64.16.0/24 maxlen: 24
185.39.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:f3:91:48:08:2f:60:bc:6b:92:55:fe:54:2f:07:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 11 16:04:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8270f8d03575b50a1c72f398c6a8e959e0eab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:46:3b:67:0c:10:66:1e:fd:ca:ba:36:5b:
26:4d:20:15:22:67:74:62:f7:f6:07:7a:d0:0a:7b:
30:63:07:9f:57:8b:64:97:8f:4d:f9:5c:e1:6c:18:
41:34:4f:bd:c5:0a:de:d8:6b:85:ba:ec:91:95:1c:
04:eb:67:59:70:91:c7:f6:01:87:22:fb:49:e8:bc:
f6:4b:6b:61:25:6e:2a:d3:55:f6:66:93:d2:a3:3e:
7c:a5:a7:70:ee:45:66:e9:20:ea:78:1b:67:eb:32:
dd:77:4a:b3:6b:d5:75:af:a1:5c:98:a7:df:e3:fc:
80:01:cd:45:79:39:a8:4e:95:c9:dd:e9:58:e6:f9:
b4:6b:03:5a:e5:0a:b3:7f:65:a5:d9:dc:54:3d:2f:
07:b7:d1:f2:4b:4a:00:84:3f:45:91:0c:ad:d2:00:
8a:d8:92:fd:7f:a0:4b:5e:34:e1:73:04:71:9a:1f:
7c:09:80:28:ac:3b:6d:5a:1a:09:13:9f:41:ff:97:
56:98:35:df:63:b3:22:92:10:b6:00:a9:cb:11:0b:
2e:6c:02:23:22:0a:47:48:3b:e2:ab:2c:74:1b:f1:
5c:68:66:3b:d9:5d:c3:a1:56:99:f2:91:1b:df:0f:
ff:bc:ec:16:9d:40:f5:a5:f7:a3:37:bd:86:02:8d:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:27:0F:8D:03:57:5B:50:A1:C7:2F:39:8C:6A:8E:95:9E:0E:AB:8B
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-CcPjQNXW1Chxy85jGqOlZ4Oq4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.16.0/24
185.39.17.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4e:c8:1f:fa:bb:19:a7:cb:99:aa:73:86:9b:18:09:74:c8:
97:50:16:d5:a2:09:8b:41:58:dc:03:3c:24:85:21:87:33:4f:
2d:cb:2a:b3:ae:58:97:0e:e0:1f:f8:91:ae:ad:95:01:83:76:
52:ad:ef:0f:8e:4e:69:ab:81:89:98:ec:6d:93:e5:3b:03:ff:
8c:8c:3d:95:8d:db:da:b5:90:17:0f:ab:60:58:c9:7b:cc:09:
b7:69:af:7e:22:fb:2c:f0:be:bd:55:49:7c:eb:e2:18:97:f7:
c0:a8:48:df:91:00:c8:c7:af:93:29:b9:b2:47:48:a7:4d:9c:
e1:37:bf:ec:81:e7:27:db:63:16:1f:35:a0:f1:93:26:f4:f4:
fd:8e:19:69:b8:c8:05:c8:1c:0a:7d:02:ac:b9:f3:57:63:68:
2a:28:3d:7b:12:de:24:c8:3a:4b:0d:48:b5:ae:f6:31:db:c5:
b9:3d:b6:66:b7:9e:6b:da:a3:76:d0:5a:1d:31:27:63:ca:8e:
16:ca:e1:bc:6a:8f:8a:aa:50:45:3c:2c:9b:a2:07:54:bb:b8:
7d:7f:01:3a:84:73:bb:cc:0a:6d:75:e1:3d:0f:fa:25:2b:0e:
ac:1e:b8:ed:fd:da:84:57:89:6d:8e:38:01:69:79:e8:bd:08:
d7:3f:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:20 2025 by rpki-client