Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f1bb34-fccc-40bb-8674-c872d853fbcd/1/qFSFlHGKLpKRNxsQU4Vx4lhrCi0.roa
File: qFSFlHGKLpKRNxsQU4Vx4lhrCi0.roa (raw, json)
Hash identifier: AsyQMQjqSi7CVPZvVbNn9P2yOMhBkhywep0O+HLJPLg=
Subject key identifier: A8:54:85:94:71:8A:2E:92:91:37:1B:10:53:85:71:E2:58:6B:0A:2D
Certificate issuer: /CN=29bf304317fa2365701c33d133b9a0d585d43ce8
Certificate serial: 018572033FDECA502DBDBAF4C27F54F5FF8C
Authority key identifier: 29:BF:30:43:17:FA:23:65:70:1C:33:D1:33:B9:A0:D5:85:D4:3C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb8wQxf6I2VwHDPRM7mg1YXUPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f1bb34-fccc-40bb-8674-c872d853fbcd/1/qFSFlHGKLpKRNxsQU4Vx4lhrCi0.roa
Signing time: Mon 02 Jan 2023 10:24:53 +0000
ROA not before: Mon 02 Jan 2023 10:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39099
IP address blocks: 80.89.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:3f:de:ca:50:2d:bd:ba:f4:c2:7f:54:f5:ff:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bf304317fa2365701c33d133b9a0d585d43ce8
Validity
Not Before: Jan 2 10:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8548594718a2e9291371b10538571e2586b0a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:41:14:2d:48:3c:d3:05:b8:78:ee:34:79:
1b:3b:8b:0e:31:27:be:32:5a:e4:83:f7:69:8c:f3:
bf:59:33:8c:1b:c0:b0:b9:48:d9:c6:ef:bd:d9:cf:
ea:e1:9d:8c:10:df:57:a8:ae:56:22:ac:bd:15:04:
bc:b4:1c:bc:13:51:37:0f:74:fc:7b:66:05:72:18:
57:c7:96:db:60:c1:9e:cb:c6:0d:c8:af:82:17:3f:
52:4f:51:bd:72:02:10:74:78:fb:16:b2:c0:61:79:
30:eb:2a:da:d3:86:5e:f2:82:20:ee:87:48:2e:0c:
bf:8e:33:cb:f5:30:ac:53:c6:9d:ab:41:3f:f8:cf:
d7:0b:b6:5e:cd:a2:d7:86:32:31:30:bf:73:3c:5d:
dc:26:dd:2c:6b:b6:5f:cb:1d:f8:43:d2:c7:e1:ba:
88:26:1f:30:78:db:44:90:91:50:43:30:f3:1e:78:
1d:c6:47:03:33:31:4e:b4:10:20:fc:e4:01:b0:d7:
0d:cb:ed:0c:85:d1:68:df:2c:f2:15:00:32:98:e9:
d5:0d:22:a5:e8:9c:dc:5a:1b:f2:d8:8b:ad:4c:c7:
0b:31:10:b2:68:c1:bc:13:a1:cd:ca:02:f0:bd:71:
f3:d0:0d:32:2c:83:4f:cf:25:2b:6a:fd:b8:b0:11:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:54:85:94:71:8A:2E:92:91:37:1B:10:53:85:71:E2:58:6B:0A:2D
X509v3 Authority Key Identifier:
keyid:29:BF:30:43:17:FA:23:65:70:1C:33:D1:33:B9:A0:D5:85:D4:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb8wQxf6I2VwHDPRM7mg1YXUPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f1bb34-fccc-40bb-8674-c872d853fbcd/1/qFSFlHGKLpKRNxsQU4Vx4lhrCi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f1bb34-fccc-40bb-8674-c872d853fbcd/1/Kb8wQxf6I2VwHDPRM7mg1YXUPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.240.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:f4:33:93:db:41:9e:a1:f5:9f:01:04:60:4c:98:24:d9:c5:
d6:c2:66:0f:77:33:81:4b:7d:9f:b5:0d:9e:9c:fa:24:6a:96:
23:6e:fa:9d:6a:9f:bc:19:82:4a:cb:a2:48:7a:0c:75:ff:d4:
04:ae:8e:57:db:da:4c:62:ba:80:8a:45:88:aa:b3:54:12:08:
b8:4a:66:a6:2c:8c:fe:58:2b:03:a7:64:5d:59:56:fd:9e:2a:
34:44:73:ab:71:87:68:e8:4f:b3:9d:b8:a0:71:02:15:69:54:
a5:23:dd:89:e6:20:f5:2c:d8:ba:2b:ca:e1:c8:b0:28:36:83:
0b:7e:7c:29:38:96:69:a7:2f:d5:20:b2:1d:27:d3:93:2b:f9:
e2:b4:34:f5:98:d0:ae:52:6e:54:b3:91:67:f3:c7:0f:9c:e2:
2a:15:34:1f:e4:af:24:3d:8c:65:57:c8:19:85:f1:5e:a1:36:
34:de:94:f6:54:29:8d:be:4d:28:72:15:2e:dd:c8:e8:c8:b8:
de:2b:30:75:e3:dc:26:e3:a2:7e:50:b0:5e:ba:3e:19:58:e8:
df:c8:14:94:68:2c:6c:88:25:8b:35:d9:40:46:bf:54:2d:fd:
3e:4c:c9:9f:b0:d0:f3:d4:1a:c0:53:63:e3:cd:0e:73:7f:63:
76:15:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:11:33 2025 by rpki-client