Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/it0eKX4aeXFoV-ZFABwhml4ijE4.roa
File: it0eKX4aeXFoV-ZFABwhml4ijE4.roa (raw, json)
Hash identifier: EtndxYtjdXMg/Loqqu5zANtLgKTyshBRhE6wvl0QGAk=
Subject key identifier: 8A:DD:1E:29:7E:1A:79:71:68:57:E6:45:00:1C:21:9A:5E:22:8C:4E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA6EA0E982F7204BE42774C08027A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/it0eKX4aeXFoV-ZFABwhml4ijE4.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213834
IP address blocks: 80.64.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a6:ea:0e:98:2f:72:04:be:42:77:4c:08:02:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8add1e297e1a79716857e645001c219a5e228c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:22:30:e0:41:4d:e0:a6:e9:0f:9f:58:da:
0f:83:a1:61:3f:5d:1a:1f:66:68:5a:4d:f8:1b:95:
02:56:8d:11:19:fd:77:52:d0:e6:12:13:54:23:b4:
e2:0e:1b:5c:71:a3:29:87:eb:64:cd:43:8b:4d:35:
f5:62:c6:85:e5:22:6f:94:2b:d0:f8:dc:93:16:11:
6a:57:e9:c7:9e:ca:e9:b8:16:1d:91:bf:87:ab:0d:
b7:50:0c:b7:8d:13:97:a8:f5:fe:cd:ac:af:c5:0d:
f8:79:35:22:3e:fc:21:7c:2e:5d:fa:31:d8:ce:30:
50:14:59:8a:a0:3a:5f:7c:d7:9c:27:95:2a:f8:e6:
f0:b3:27:03:8d:6c:54:84:5e:9f:10:cb:d7:74:a3:
30:6a:50:3d:6b:94:eb:12:33:29:35:ca:9d:95:f2:
a3:95:1f:fd:a3:7d:ad:10:4d:7e:81:8b:26:c8:70:
e5:5a:bf:2e:72:1e:6b:1e:d1:e8:94:65:2b:31:e8:
ec:57:6c:d0:7c:1f:02:bc:56:f4:c2:af:c3:5a:8d:
00:f5:e8:97:93:1b:d2:e4:45:d1:81:c7:bb:94:11:
61:71:24:4d:b1:c9:2c:cd:fe:4d:cf:e4:cb:4a:84:
14:6e:f9:0d:3a:75:e0:9c:f0:2f:95:b4:29:3e:99:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:1E:29:7E:1A:79:71:68:57:E6:45:00:1C:21:9A:5E:22:8C:4E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/it0eKX4aeXFoV-ZFABwhml4ijE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.22.0/24
Signature Algorithm: sha256WithRSAEncryption
88:59:65:c2:c9:ba:b1:08:5e:36:ed:66:8c:20:95:47:ff:f6:
74:b6:9a:ca:fb:ac:ed:4e:9f:7d:fd:fb:e1:95:fc:82:9b:8d:
e5:42:f2:e0:27:f3:ec:63:56:7e:6d:9d:50:2a:47:49:00:8a:
77:07:f7:5e:89:71:4b:d6:26:4b:f3:4b:eb:b3:0f:83:e1:87:
1a:e6:a6:a2:4b:aa:62:e6:89:fd:cc:b4:3d:06:d2:f4:b2:f8:
f5:5f:dd:49:3d:77:c3:d8:f5:9f:fd:56:cd:6a:26:6f:b3:e6:
af:d4:47:ff:4a:61:48:79:f3:b8:e9:f6:f7:21:a3:4c:66:de:
e0:0f:4b:46:71:3e:b3:78:4c:ab:5b:0c:51:01:52:a4:2e:17:
9b:41:3a:d5:0f:7e:da:62:6d:17:2d:7c:ac:87:b9:5d:66:cc:
56:d2:73:fb:96:6e:81:ed:95:f9:8e:1a:06:a6:40:5b:5f:e1:
dd:24:65:8f:5b:48:c3:ef:0f:57:70:0c:27:f9:25:96:53:09:
e6:3f:4a:58:90:1b:71:41:d3:fb:0c:da:ef:65:25:c3:fa:a3:
6f:17:12:20:26:7a:bf:6b:82:0c:a3:ec:2b:cb:a7:b3:df:0b:
47:8c:c9:4b:f4:0e:26:3d:1b:e8:a6:fa:dc:61:19:e8:91:ef:
fe:1a:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:38 2025 by rpki-client