Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/tajVfWGRE8_KAKlKaREAVC2fyXA.roa
File: tajVfWGRE8_KAKlKaREAVC2fyXA.roa (raw, json)
Hash identifier: aqihzqoVffPeg1HuaTzjsjxArzdJ0ibakI4WqoKJ9Kc=
Subject key identifier: B5:A8:D5:7D:61:91:13:CF:CA:00:A9:4A:69:11:00:54:2D:9F:C9:70
Certificate issuer: /CN=276c1af119e3147af4d1b4e99924d9c6e4a09553
Certificate serial: 0185712779E40A683FFBCEE307DBF1400357
Authority key identifier: 27:6C:1A:F1:19:E3:14:7A:F4:D1:B4:E9:99:24:D9:C6:E4:A0:95:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2wa8RnjFHr00bTpmSTZxuSglVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/tajVfWGRE8_KAKlKaREAVC2fyXA.roa
Signing time: Mon 02 Jan 2023 06:24:50 +0000
ROA not before: Mon 02 Jan 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 80.71.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:79:e4:0a:68:3f:fb:ce:e3:07:db:f1:40:03:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276c1af119e3147af4d1b4e99924d9c6e4a09553
Validity
Not Before: Jan 2 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a8d57d619113cfca00a94a691100542d9fc970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:19:8e:a6:72:d1:b9:31:10:2f:6d:9d:50:8d:
0a:e9:a1:21:49:96:56:b2:2f:aa:77:4a:ae:d5:75:
15:97:43:26:bd:d6:f4:96:f0:da:2b:45:0e:ae:0b:
82:46:d5:24:48:8a:98:bf:b0:28:b4:8d:b7:c2:12:
3f:ab:bd:1d:78:2c:e9:81:18:87:70:bd:20:6d:4d:
33:6d:00:a1:76:32:11:1f:63:c6:2c:7f:f6:e3:cc:
c7:d2:47:ee:d8:f4:ac:e6:af:9d:d7:7c:71:31:fd:
84:2d:83:a7:b5:6a:06:56:3c:b4:10:38:05:d7:2d:
e6:fb:be:42:44:9b:d9:62:2e:10:5b:64:59:51:73:
08:a3:8a:b0:88:f6:f6:29:26:5b:8b:1c:19:ea:1d:
74:c9:65:21:bc:84:5a:da:b0:68:0a:87:ab:11:39:
e9:6f:94:a8:3a:fd:a8:a2:a3:6b:82:37:f8:c1:75:
2d:76:b4:70:7a:f6:74:13:80:ad:df:1b:66:4b:de:
1f:48:a3:f9:89:0e:b6:d7:20:1c:27:fa:39:57:47:
d7:1d:67:c4:57:9f:4b:da:b8:46:8f:c0:09:3c:45:
f5:9f:70:44:f0:91:56:96:7b:ee:2b:99:e0:c1:ae:
a1:87:73:a0:b1:5f:dd:4a:67:7d:4e:05:d1:e6:0d:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:D5:7D:61:91:13:CF:CA:00:A9:4A:69:11:00:54:2D:9F:C9:70
X509v3 Authority Key Identifier:
keyid:27:6C:1A:F1:19:E3:14:7A:F4:D1:B4:E9:99:24:D9:C6:E4:A0:95:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2wa8RnjFHr00bTpmSTZxuSglVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/tajVfWGRE8_KAKlKaREAVC2fyXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/J2wa8RnjFHr00bTpmSTZxuSglVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.151.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:e5:e8:25:43:2f:4e:be:46:e9:df:a4:2e:5b:d3:c3:81:0c:
09:d9:b5:bc:d1:4b:67:57:cc:28:8a:2e:b5:76:80:ff:f1:2a:
ab:83:f0:5f:12:40:62:14:88:36:9a:bb:4f:a7:75:0e:34:8a:
6c:c6:a5:c6:59:28:c5:bf:8f:12:58:0b:22:66:98:f2:28:ab:
44:76:8b:73:40:d7:b1:55:81:04:b6:70:8a:98:2f:86:c0:78:
0c:38:91:63:9e:85:86:55:24:96:62:eb:4a:52:c1:82:3b:a7:
a2:e2:83:33:fc:81:74:66:89:bd:a3:39:d6:5f:9f:ca:00:1e:
e3:c7:3c:2d:89:c0:48:73:06:f4:c8:99:d9:45:47:3b:6a:88:
ca:22:3f:c9:b9:29:40:9a:fc:e4:9a:ca:e2:c0:48:bb:2d:fa:
74:1b:8a:35:1b:9d:a9:8a:5d:10:34:05:ab:87:2a:28:d2:dd:
47:29:26:62:23:02:34:61:39:d4:d8:6e:70:11:9e:4b:82:1a:
b8:e9:4b:d0:5d:06:6a:cb:19:1c:24:0e:8e:9f:2e:89:98:4c:
35:b6:04:38:07:c6:ba:2d:59:c4:e9:dc:49:0c:b5:67:b7:c2:
4d:9d:24:fb:7e:b7:68:ae:bc:d6:b4:29:8f:61:76:6e:e4:27:
ae:b1:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:13:34 2025 by rpki-client