Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/yjwSrjG2K5cNVaICXIr8c_TTx1Q.roa
File: yjwSrjG2K5cNVaICXIr8c_TTx1Q.roa (raw, json)
Hash identifier: /+R/nH8ilkzrSOQKYf+cUomwI11lGMLaOXNs5IUVS68=
Subject key identifier: CA:3C:12:AE:31:B6:2B:97:0D:55:A2:02:5C:8A:FC:73:F4:D3:C7:54
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 0184E6957619270D982918D1322131C1E010
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/yjwSrjG2K5cNVaICXIr8c_TTx1Q.roa
Signing time: Tue 06 Dec 2022 08:37:45 +0000
ROA not before: Tue 06 Dec 2022 08:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9145
IP address blocks: 80.69.112.0/20 maxlen: 20
2a03:1e01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:95:76:19:27:0d:98:29:18:d1:32:21:31:c1:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Dec 6 08:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca3c12ae31b62b970d55a2025c8afc73f4d3c754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:c8:21:4d:42:42:b7:5d:cb:28:2c:fa:87:
eb:90:d8:5b:56:b9:93:52:d0:53:03:70:1a:9f:d1:
10:d4:be:eb:e1:ae:d1:b8:6e:b5:1a:23:db:e5:bc:
e2:cf:27:b5:5e:e3:73:f6:bf:a2:13:ad:bc:28:2e:
76:e6:2e:d8:f4:ff:dc:b6:65:b5:f3:86:7c:fc:85:
fd:24:0c:43:1d:c7:4f:a8:60:7f:81:96:8c:55:6f:
4b:73:56:09:eb:3e:9e:68:d9:b3:c8:1a:5f:a7:4f:
15:47:8d:2c:f9:df:42:1f:c5:7d:fe:34:e3:fd:f4:
a4:92:dc:ac:d1:86:7e:44:9c:af:96:d8:e9:4f:58:
08:51:22:4c:2f:96:c9:fa:95:46:35:a1:d2:2e:ca:
f3:ec:af:a6:be:47:9c:53:07:33:57:25:78:24:f4:
83:18:5e:8b:45:3a:e2:b2:8f:54:96:79:4a:6a:3b:
d0:3e:31:23:4e:bc:1b:3f:b9:6b:7e:e7:35:b0:23:
f0:a2:0d:cb:a7:a5:1e:0c:78:82:f5:00:d1:1a:08:
8c:3c:8e:15:d8:7e:12:78:ea:13:af:18:c2:0a:84:
cf:7e:75:ff:b0:fe:c2:68:2e:12:e2:95:98:93:1b:
87:ae:4e:6d:16:f5:ed:5a:ed:5c:93:f4:e4:a1:df:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3C:12:AE:31:B6:2B:97:0D:55:A2:02:5C:8A:FC:73:F4:D3:C7:54
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/yjwSrjG2K5cNVaICXIr8c_TTx1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.112.0/20
IPv6:
2a03:1e01::/32
Signature Algorithm: sha256WithRSAEncryption
42:de:32:e0:7f:9e:1a:1b:cb:78:dc:4f:ff:68:88:d1:c0:68:
69:db:ef:ad:1a:b2:e6:f3:9f:9b:9a:65:62:7f:b0:5a:1e:f5:
e8:53:e7:03:e9:87:a6:20:28:b0:76:ab:0d:10:b2:8e:e6:dd:
8b:d8:43:74:88:76:c9:5e:5c:19:43:25:fd:8b:78:fd:9c:f4:
47:0c:95:40:2e:09:db:0c:da:3e:c2:be:41:da:0b:5d:b6:14:
be:f9:be:7b:c6:ff:dd:db:bc:e2:ab:b0:a1:bf:ea:cb:8c:53:
c9:48:79:71:84:f6:3a:6f:d0:7c:dc:02:85:1f:5d:2a:a4:8e:
d1:f9:c8:e6:4c:db:47:1e:ae:b8:56:0b:b2:68:01:6e:9a:5b:
d1:2e:89:96:f6:c4:69:f5:12:a4:b1:31:ce:06:c5:ac:24:6d:
91:eb:ce:6c:66:21:e9:30:ea:d8:64:63:55:73:47:3a:1b:a6:
96:47:46:b5:64:a4:84:d1:68:fe:18:52:61:24:db:7f:e1:c1:
8b:71:45:35:53:d4:2d:aa:c0:a3:bd:9c:82:01:cf:be:36:2a:
5f:1e:a7:0b:c9:b1:a4:19:8f:78:cd:86:bf:6f:49:5f:9f:28:
e3:86:9a:f4:f5:c5:70:bc:d6:dd:ef:f8:b0:0e:7e:ec:6a:26:
19:4c:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:32 2025 by rpki-client