Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/jm25OGdKrwUf5eeLP1TBZY7tHdc.roa
File: jm25OGdKrwUf5eeLP1TBZY7tHdc.roa (raw, json)
Hash identifier: qE9G4vX+sFGL8qBX3kWlGbTNQHgY015tUbmHfiOc6bI=
Subject key identifier: 8E:6D:B9:38:67:4A:AF:05:1F:E5:E7:8B:3F:54:C1:65:8E:ED:1D:D7
Certificate issuer: /CN=27ed8db4f101e1524266a1078e7cd82d7c612843
Certificate serial: F423
Authority key identifier: 27:ED:8D:B4:F1:01:E1:52:42:66:A1:07:8E:7C:D8:2D:7C:61:28:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-2NtPEB4VJCZqEHjnzYLXxhKEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/jm25OGdKrwUf5eeLP1TBZY7tHdc.roa
Signing time: Tue 25 Jan 2022 18:23:03 +0000
ROA not before: Tue 25 Jan 2022 18:23:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 80.91.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62499 (0xf423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ed8db4f101e1524266a1078e7cd82d7c612843
Validity
Not Before: Jan 25 18:23:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e6db938674aaf051fe5e78b3f54c1658eed1dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:e4:74:70:1b:92:fa:b3:4b:2d:b6:a5:4b:
b8:4a:06:8a:d4:6e:61:db:b9:41:6e:a4:81:a4:53:
62:d7:4a:14:3f:77:bd:00:9d:9e:05:b2:c3:43:f0:
fb:86:e3:77:ba:4c:66:8a:11:c5:2d:b3:5c:48:09:
63:f4:0f:cc:c4:86:49:7e:61:54:c2:8e:d8:82:b0:
51:f6:96:52:75:da:d9:9c:f3:f8:6c:63:b4:45:a5:
ed:d6:15:1d:1f:f6:f5:d1:8d:a5:0f:f3:75:ee:af:
9c:65:aa:ab:06:e3:f9:f4:eb:39:9c:36:47:17:a0:
c4:60:23:79:58:90:3c:14:ba:b0:d4:a5:af:6d:7c:
92:36:ad:ac:99:c7:4c:b4:b7:c8:f7:c6:c8:96:6d:
2a:cb:26:5b:99:15:4e:ef:8f:33:4d:78:f7:30:f4:
5a:0a:ae:5c:ec:6f:76:8e:4b:8d:44:c5:93:35:e4:
7b:5d:34:db:02:4b:1f:39:21:6b:56:0b:22:f4:43:
d1:94:2d:b0:da:e3:5e:ac:5c:39:f1:11:7f:3f:3b:
38:7f:5a:84:38:bb:2a:63:89:cf:3b:28:d3:46:2f:
c8:e5:86:bc:88:a7:5a:e7:76:b0:00:68:a0:82:f2:
31:cd:a9:a2:70:60:3f:d5:b2:05:d2:96:53:aa:a8:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6D:B9:38:67:4A:AF:05:1F:E5:E7:8B:3F:54:C1:65:8E:ED:1D:D7
X509v3 Authority Key Identifier:
keyid:27:ED:8D:B4:F1:01:E1:52:42:66:A1:07:8E:7C:D8:2D:7C:61:28:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-2NtPEB4VJCZqEHjnzYLXxhKEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/jm25OGdKrwUf5eeLP1TBZY7tHdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/J-2NtPEB4VJCZqEHjnzYLXxhKEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.212.0/24
Signature Algorithm: sha256WithRSAEncryption
60:98:0c:fe:d6:15:74:0b:2c:a1:ca:a6:65:b2:02:62:de:cd:
73:91:b9:70:9d:69:7e:d9:a9:57:ac:e7:ce:f0:40:b5:81:41:
ad:97:14:6c:8d:b6:16:a2:5c:90:62:6c:e8:7e:26:3f:f7:10:
69:02:a8:55:0f:d2:3e:37:78:35:48:17:de:6d:ea:ae:57:65:
b3:13:66:39:29:5c:ed:84:30:9b:33:96:ca:27:1b:4b:a3:a2:
1a:97:de:b5:42:7b:de:71:7e:1d:0e:92:15:a8:ff:eb:2a:d1:
73:8e:8e:17:a4:24:f8:dd:67:aa:4b:18:14:51:4e:f6:94:84:
eb:d2:71:54:f7:6b:de:10:dc:02:dd:25:ea:2e:2e:b6:7a:17:
0d:52:9a:6b:54:9a:11:79:92:33:4e:9a:c6:a2:ce:40:56:24:
bb:36:30:c0:80:9a:bf:03:86:09:80:f9:0d:8d:90:fe:24:5f:
3d:e4:8c:f2:f8:2b:bf:be:45:13:75:a6:20:a0:72:a1:f0:b8:
63:bc:5b:dd:b8:d6:c3:a0:ad:fd:8b:0d:65:03:ca:44:d3:d1:
8e:59:b7:e0:ab:95:56:f1:08:d2:77:78:c5:02:91:81:79:75:
42:6a:fb:33:ed:a5:d6:ce:62:1d:e2:c7:90:c0:aa:5e:19:00:
15:96:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:01 2025 by rpki-client