Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7tPrwmPEGM6KSe7WVNpvulvzBjo.roa
File: 7tPrwmPEGM6KSe7WVNpvulvzBjo.roa (raw, json)
Hash identifier: NW+bNMlz3slLMawV6aUUKj42cIGGmqhNyvQCa/9IXi8=
Subject key identifier: EE:D3:EB:C2:63:C4:18:CE:8A:49:EE:D6:54:DA:6F:BA:5B:F3:06:3A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA66CA194126FE377A8253147CBAF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7tPrwmPEGM6KSe7WVNpvulvzBjo.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213829
IP address blocks: 80.64.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a6:6c:a1:94:12:6f:e3:77:a8:25:31:47:cb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eed3ebc263c418ce8a49eed654da6fba5bf3063a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:f0:e3:4f:97:ce:75:37:71:28:8a:d9:40:
26:a5:87:70:23:67:1b:e2:d2:09:f3:11:59:3a:e1:
91:dd:a7:95:87:2e:2c:2e:b1:b2:a7:da:44:60:b9:
2b:8c:59:a7:0b:c1:ac:d6:75:e6:c7:c1:f2:2e:dd:
0d:fd:74:74:fd:6d:b0:42:a1:c4:08:d8:ff:a5:78:
ae:e6:36:45:92:7c:19:98:4e:2f:45:94:c3:a2:38:
f0:87:a0:6e:1d:32:ac:95:4d:a8:c7:8f:65:0d:89:
7b:26:06:95:b5:d2:90:18:44:0d:7e:64:25:d6:ef:
03:2e:db:02:cd:8a:7a:7e:03:1b:b3:93:2a:25:e5:
86:48:d8:53:a0:1e:93:9b:9a:d3:62:8b:73:4a:9f:
c7:9a:2b:f6:52:8b:6f:51:75:54:89:50:b0:61:bf:
13:c5:04:4f:ff:10:9d:5b:51:2e:84:fc:d7:b5:7f:
eb:15:94:d2:e1:f1:07:2f:7d:ee:7a:a5:c4:98:a7:
59:e8:4f:37:78:bf:06:d4:87:0d:ce:98:0a:67:21:
b7:d9:54:e7:36:84:99:6b:bb:e3:e8:39:fe:b2:40:
2c:e9:82:76:98:46:70:a1:fe:a3:b0:2b:85:78:16:
da:54:49:cb:9a:98:94:13:af:8e:c3:38:dd:97:9a:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:EB:C2:63:C4:18:CE:8A:49:EE:D6:54:DA:6F:BA:5B:F3:06:3A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7tPrwmPEGM6KSe7WVNpvulvzBjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e4:43:ad:bf:09:10:fc:c1:e7:cc:0f:82:00:8a:93:ca:2f:
30:da:01:3e:a1:18:89:ae:e8:b7:76:50:ba:af:24:5d:90:67:
d7:66:1d:45:67:43:86:29:85:b5:50:5c:45:2c:9d:bb:7f:bb:
04:17:ce:d2:dd:0a:69:45:25:9b:7c:b1:51:d9:92:2a:10:cc:
cf:27:02:40:4c:b5:68:4b:3f:bb:91:2f:c0:55:80:8d:03:2e:
6d:37:78:fb:ed:78:2c:06:b6:76:62:cd:28:bf:a8:da:cc:a4:
9c:60:7e:5b:f9:13:04:24:82:cb:c8:4a:a5:7b:a4:a8:98:d4:
7f:e3:16:8b:23:59:75:c0:9d:53:07:73:c6:18:21:b2:ad:d8:
a4:df:32:60:81:db:5c:c1:5f:74:e6:20:86:7f:fe:cd:c6:a9:
88:42:24:77:3a:96:e2:b1:93:1c:89:36:5f:fd:c9:bf:92:33:
23:56:f3:ca:00:47:84:4c:21:9c:32:8c:20:4e:77:8a:26:fa:
78:ad:c4:e5:98:32:76:31:c6:8e:96:58:64:79:5f:d9:70:a4:
c0:17:5b:4c:6f:d9:9a:0b:38:42:8a:cb:21:13:9e:4f:e1:b0:
a0:8c:dd:07:d0:5e:0e:14:5c:f7:66:c4:91:c8:ab:06:e8:a1:
7a:3c:a2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:18 2025 by rpki-client