Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/nW-VI6IYWUyxTPN5fUvx9ToESUM.roa
File: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (raw, json)
Hash identifier: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=
Subject key identifier: 9D:6F:95:23:A2:18:59:4C:B1:4C:F3:79:7D:4B:F1:F5:3A:04:49:43
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0194221FCAFBA5D6939FB0166D2E2D21CA2D
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/nW-VI6IYWUyxTPN5fUvx9ToESUM.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 80.87.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ca:fb:a5:d6:93:9f:b0:16:6d:2e:2d:21:ca:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d6f9523a218594cb14cf3797d4bf1f53a044943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:e6:22:ca:9f:0a:03:f1:6f:cf:06:99:a9:
3f:56:78:e4:7f:c7:2e:d8:50:8e:65:04:5b:a8:71:
92:76:a2:72:bd:da:c2:de:e7:9f:1b:dc:b6:f6:5f:
6b:b2:dc:c6:55:55:67:bf:32:04:9d:cb:90:db:8b:
ef:88:72:41:04:ea:f4:fa:1c:72:74:78:fd:50:8e:
51:ea:04:9c:a5:c4:48:bf:cc:85:14:eb:65:4a:2b:
7e:fa:bf:db:e8:fa:ea:6c:4d:04:d3:ce:ae:f8:b9:
f7:31:5d:da:41:b9:0a:18:d8:77:f3:15:c4:63:02:
a2:43:98:13:4b:10:cb:0a:86:b5:ac:d7:74:19:40:
8f:7b:a5:44:5b:78:44:28:ab:66:66:1b:63:b7:f6:
98:b9:86:37:d6:1d:2d:5d:2a:a4:20:db:61:ad:2c:
c4:d4:90:5f:b5:62:c5:da:fc:1b:c8:6c:53:60:77:
12:2c:e4:5e:68:29:30:1d:59:67:a7:52:fe:fc:d7:
60:87:a9:9a:10:e3:c6:72:bf:30:dd:10:c5:c6:06:
d7:bb:f6:f8:11:d1:bc:0e:dd:f2:e2:e0:c2:f8:1a:
37:94:02:bd:88:c3:93:e4:88:aa:b3:6c:5e:5e:f1:
37:aa:5f:87:bb:87:fb:fb:b1:65:48:80:49:63:6c:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:95:23:A2:18:59:4C:B1:4C:F3:79:7D:4B:F1:F5:3A:04:49:43
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/nW-VI6IYWUyxTPN5fUvx9ToESUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.206.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7d:81:3d:26:4a:20:8e:1e:28:f6:87:aa:ca:23:2d:ef:88:
1d:e9:7f:fd:60:f2:45:7a:82:56:d9:4a:b1:d1:4c:16:f6:ac:
ab:79:8e:2e:4a:3a:51:a8:92:0d:f4:18:9a:f9:5d:48:c2:e3:
1e:ac:a6:f6:68:94:47:3d:83:d1:96:8b:c6:50:76:dc:30:de:
9f:46:a1:fd:fe:88:66:a3:ed:71:f0:a9:2d:b7:41:56:5d:a0:
1d:8a:8b:d3:2e:72:0c:47:e0:7c:9f:ca:fc:51:69:bf:b9:a2:
66:a9:88:0d:f0:86:da:a7:ba:ba:3a:75:92:4a:41:9c:9a:5f:
4e:48:67:08:60:54:cf:d1:d2:80:eb:38:1d:eb:10:18:4d:8e:
c7:88:cd:5c:8f:c7:84:4b:ab:4e:69:65:0c:14:4d:09:bc:42:
ec:5e:ac:1a:9a:b0:a9:b3:5d:a0:7d:16:82:ee:42:43:28:14:
bd:07:b1:0f:b3:02:0c:21:78:ad:09:be:d0:39:a9:b5:35:2f:
03:1a:b1:f9:3e:c1:33:1d:03:4b:1b:95:3e:cc:93:d0:9b:ec:
6f:ea:b8:33:be:6b:e8:ea:7f:25:a9:c6:20:38:d7:7b:45:b7:
b6:35:0e:10:fe:cf:17:ff:a1:ca:22:87:0f:46:64:09:13:f2:
b7:ed:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:22 2025 by rpki-client