Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pf0NuzIvaR78cEtA1JRgb6M6gfk.roa
File: pf0NuzIvaR78cEtA1JRgb6M6gfk.roa (raw, json)
Hash identifier: 2GJMDIQ522+L5VTyTC1HqXnRxwLPvOVPAL0kTgyXxPA=
Subject key identifier: A5:FD:0D:BB:32:2F:69:1E:FC:70:4B:40:D4:94:60:6F:A3:3A:81:F9
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019585F390AE23F39901AF16BE30D4644ACE
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pf0NuzIvaR78cEtA1JRgb6M6gfk.roa
Signing time: Tue 11 Mar 2025 16:04:46 +0000
ROA not before: Tue 11 Mar 2025 16:04:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211659
IP address blocks: 80.64.18.0/24 maxlen: 24
185.39.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:f3:90:ae:23:f3:99:01:af:16:be:30:d4:64:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 11 16:04:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5fd0dbb322f691efc704b40d494606fa33a81f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:07:8e:de:95:7c:c3:f5:fe:d2:d3:26:d1:
52:7a:f7:87:e0:17:f9:16:e1:6f:24:7c:84:e9:9e:
cb:74:01:4a:a8:28:11:fe:10:b1:3f:37:f4:09:9f:
05:8e:b2:e4:df:5e:8a:a8:db:72:8c:77:99:63:46:
e6:4e:9f:10:d2:89:cc:96:28:2c:d4:b8:3b:b5:d0:
d5:62:01:0e:1d:3c:5d:12:c5:61:4f:5d:73:39:99:
e3:ca:5f:6b:5d:08:63:8a:73:0f:4e:4b:08:2b:87:
bf:b1:16:12:dc:ac:fa:58:29:02:f5:c6:02:fe:f6:
b7:7e:5f:1b:d9:63:1b:44:1c:70:83:76:07:3a:fe:
31:d4:dc:3d:08:d8:c5:8d:e8:ec:16:30:02:72:f5:
c7:2b:87:30:64:e3:90:1e:6e:9b:5f:d9:c9:ee:72:
82:07:96:66:a7:60:08:a5:63:fa:05:60:fe:6a:08:
28:2b:80:c9:89:47:ec:7c:dc:22:99:03:9a:4b:cb:
7f:8b:d0:5e:41:f0:e4:59:b7:04:1b:fd:a4:02:1d:
b5:48:b5:47:a9:76:4f:55:51:31:f7:30:14:f3:f7:
cf:08:21:14:1c:41:41:c0:04:54:86:ee:d2:39:23:
57:e4:07:2f:cd:27:16:0f:b5:9e:7d:68:75:13:98:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FD:0D:BB:32:2F:69:1E:FC:70:4B:40:D4:94:60:6F:A3:3A:81:F9
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pf0NuzIvaR78cEtA1JRgb6M6gfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.18.0/24
185.39.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ca:25:f0:bc:f3:dd:85:95:fb:4a:e6:7b:09:96:3d:24:58:
f5:36:d5:03:4e:4d:c1:2c:4a:24:6d:cd:33:55:40:19:e7:db:
96:6e:15:65:b4:79:01:fb:67:fc:9a:4e:48:05:38:c4:24:73:
cd:34:ca:a2:24:09:09:fa:6e:f1:7f:30:cd:62:df:5f:64:76:
27:25:9e:3a:79:dd:fa:f9:8f:60:40:3c:59:bc:8d:6c:e6:f3:
53:c9:eb:06:3f:6c:c7:4c:20:29:66:d6:cf:1a:db:f1:4d:0a:
a7:45:7f:cd:78:e1:a5:3e:b3:91:5d:32:25:ae:f6:68:93:b4:
f4:7d:1f:27:89:1a:c4:ee:be:6a:1d:43:ef:39:ce:5a:a2:43:
94:cd:6f:1f:c3:95:59:6c:2f:12:92:34:5b:76:dc:83:64:a2:
2e:c3:40:04:bc:2f:ac:ab:66:9b:03:5a:44:86:d1:91:99:b8:
44:9a:ec:0c:7f:3d:a0:7e:ed:ea:29:fa:72:d7:b1:c0:c7:15:
12:81:54:7d:78:46:f7:cb:51:6b:2b:05:2c:4c:65:28:6e:f7:
e4:65:4a:73:43:73:26:98:34:28:f0:cc:9c:e1:a5:8d:89:59:
d6:1f:b7:84:30:4b:d5:9b:09:75:62:e3:99:c4:5a:62:33:25:
0d:9c:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:47 2025 by rpki-client