Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/gxYmobLbcnSyCmLLG5FVdyxHJqw.roa
File: gxYmobLbcnSyCmLLG5FVdyxHJqw.roa (raw, json)
Hash identifier: LEKVvHqDnAnLQYFh+AYI8huU75O4mluPy+/odIYtx7E=
Subject key identifier: 83:16:26:A1:B2:DB:72:74:B2:0A:62:CB:1B:91:55:77:2C:47:26:AC
Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial: 018CEE257337438FC3C5256D7CE87A42D53B
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/gxYmobLbcnSyCmLLG5FVdyxHJqw.roa
Signing time: Tue 09 Jan 2024 12:14:40 +0000
ROA not before: Tue 09 Jan 2024 12:14:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200184
IP address blocks: 80.75.216.0/24 maxlen: 24
67.63.56.0/21 maxlen: 24
2a13:f800::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:25:73:37:43:8f:c3:c5:25:6d:7c:e8:7a:42:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
Validity
Not Before: Jan 9 12:14:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=831626a1b2db7274b20a62cb1b9155772c4726ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:0e:f4:c5:f2:b3:7b:92:5d:a1:10:cd:61:
15:62:c3:0c:9f:83:de:51:4d:bc:d8:34:d6:30:99:
ad:e7:b0:6a:bb:86:f8:66:aa:22:38:c6:75:82:a7:
b3:25:58:a6:ac:69:35:36:63:1e:e8:8c:db:b7:1a:
e5:6a:e2:da:1f:5c:56:f2:0d:c6:f8:13:31:f5:5d:
82:3a:0f:1a:bf:e2:59:4f:7f:ad:38:1c:c3:52:33:
c0:49:02:8e:d1:c0:5d:aa:9c:96:52:c6:44:03:97:
d4:50:89:f4:9f:ce:f2:2d:8e:d0:64:79:04:c9:1e:
92:0c:61:4b:c0:5b:e6:aa:1d:d4:83:90:d7:8b:7d:
1e:12:f6:21:1a:7a:83:59:b4:af:fd:34:4f:bf:48:
26:fa:fb:d5:5b:95:4b:0c:af:f3:30:82:df:65:d1:
93:27:a1:3f:69:9c:d7:13:d0:9c:93:5b:1e:8a:69:
c7:ae:36:6a:9a:81:2a:5b:26:4c:8c:9d:06:a5:ef:
2d:e0:56:93:dd:7e:93:66:3a:41:f2:8c:1a:05:22:
b8:a3:5f:ef:9d:c6:78:ca:ee:29:af:b4:b4:af:19:
55:1a:30:fe:7d:6e:ea:6f:34:77:0c:b6:a2:33:20:
f3:f1:6a:4e:81:e4:3f:f4:93:27:aa:d0:a0:e4:6c:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:16:26:A1:B2:DB:72:74:B2:0A:62:CB:1B:91:55:77:2C:47:26:AC
X509v3 Authority Key Identifier:
keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/gxYmobLbcnSyCmLLG5FVdyxHJqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.63.56.0/21
80.75.216.0/24
IPv6:
2a13:f800::/29
Signature Algorithm: sha256WithRSAEncryption
33:4e:19:ac:16:4b:a1:3b:56:8e:74:10:08:93:4f:e7:0e:fb:
42:c4:24:ef:e6:ba:73:d3:51:be:51:8f:30:82:8b:5c:51:dc:
aa:83:63:ab:a9:63:7e:5b:d9:a1:b1:3c:5e:13:fd:61:7a:df:
d5:d9:bf:42:92:27:52:68:5f:91:a6:de:0a:61:30:4e:72:0e:
b7:12:72:68:8d:73:8f:7e:25:81:cd:06:05:66:74:31:7e:43:
c3:5f:1a:88:d7:dc:8f:f4:58:6b:0e:0a:57:ed:c8:44:64:da:
c6:1f:8c:ba:96:96:b6:8c:1e:6d:f6:7a:78:cd:58:e3:bf:cc:
43:cd:9d:31:7e:c3:a6:82:db:0a:8a:62:9f:7e:de:fe:cf:b9:
8b:a4:88:d6:94:9d:b7:33:bf:b3:c8:07:20:5d:1b:23:a7:a2:
47:6b:53:3b:11:b2:3c:fa:e2:a9:4c:19:85:b6:0b:18:4d:16:
ca:fe:db:45:b8:b9:e3:34:91:ea:2a:74:3a:74:46:e6:fa:6f:
d9:b8:96:bd:f5:ee:e2:6d:df:19:7f:a0:18:da:05:86:2e:28:
a9:5d:75:47:7d:7a:5f:d9:e2:00:9b:16:66:91:a4:be:b9:96:
eb:e8:4e:f1:84:22:1c:d4:f7:d4:58:35:5b:13:d2:3c:b9:75:
21:62:4f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:00:23 2025 by rpki-client