Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/_Nx2XSO4K4-PmKYOhW8853MdkDQ.roa
File: _Nx2XSO4K4-PmKYOhW8853MdkDQ.roa (raw, json)
Hash identifier: kzYQzbN1/vQUYwVX5EbURdcdBMGY2JKAWfT1Zoq6S/U=
Subject key identifier: FC:DC:76:5D:23:B8:2B:8F:8F:98:A6:0E:85:6F:3C:E7:73:1D:90:34
Certificate issuer: /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial: 0193627B54EE3084EAE206D1BBCD3CB5C52A
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/_Nx2XSO4K4-PmKYOhW8853MdkDQ.roa
Signing time: Mon 25 Nov 2024 08:41:09 +0000
ROA not before: Mon 25 Nov 2024 08:41:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 80.73.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:7b:54:ee:30:84:ea:e2:06:d1:bb:cd:3c:b5:c5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Validity
Not Before: Nov 25 08:41:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcdc765d23b82b8f8f98a60e856f3ce7731d9034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:17:f4:fa:d0:d5:28:f8:3f:33:b5:a7:af:
17:01:fe:99:5c:2e:52:f0:d0:25:3f:b0:1d:a3:3b:
e1:89:79:de:3a:4b:95:99:6a:7f:2a:1b:90:ef:fb:
4d:f4:2d:11:10:3b:37:fb:15:8f:7b:c6:5f:37:34:
f4:b3:7f:7f:f3:f1:ed:f5:ec:0a:d7:ee:ec:c1:0a:
90:82:67:fd:9b:4e:4a:af:c7:77:15:a4:bd:0d:09:
5e:84:ea:2c:4b:27:29:88:6f:84:0b:65:b0:7d:eb:
14:dc:9e:60:0c:6a:f3:88:48:dd:b1:7f:5e:0b:b6:
df:c5:62:30:ab:9c:b4:88:a1:72:e2:7b:28:36:98:
86:1b:8d:e1:ca:86:15:12:78:fc:2e:5e:46:a9:16:
a1:ad:22:67:53:60:63:2d:ea:01:45:ee:f8:12:e1:
c0:6c:5d:95:5e:81:b8:59:3a:ce:26:77:10:b4:7a:
42:c6:d2:8f:41:6c:86:0f:49:0e:b1:61:fc:2f:ee:
7a:8c:d8:25:aa:cb:66:13:c1:ff:18:05:3a:ca:60:
eb:55:c1:39:e0:20:23:8a:30:c6:5e:8e:54:57:a3:
30:be:71:10:d2:a7:5b:e5:f5:b1:a4:6b:39:8a:42:
4d:85:c1:3d:73:66:ad:07:70:1b:6a:fd:d8:a2:fe:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DC:76:5D:23:B8:2B:8F:8F:98:A6:0E:85:6F:3C:E7:73:1D:90:34
X509v3 Authority Key Identifier:
keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/_Nx2XSO4K4-PmKYOhW8853MdkDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.247.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d1:51:3c:9e:f8:45:77:5f:d9:d2:5c:93:7b:71:bd:39:43:
1b:aa:57:a4:2e:9f:5c:7f:7a:e4:13:e9:e6:53:71:43:b1:98:
f7:16:e1:8f:a2:44:31:3d:c1:96:6c:b5:a6:16:3c:77:68:5e:
7a:e6:66:27:a2:d1:33:67:dc:7f:d7:96:39:c6:89:86:06:11:
0f:16:b8:86:af:eb:e4:20:32:36:c2:92:9c:ba:bd:af:dd:3c:
6e:cb:8c:25:40:0b:7e:f4:45:fc:7d:05:d8:cc:31:0a:77:27:
ad:45:49:08:ea:b3:ae:99:c8:a1:3b:ab:8b:95:af:3f:e6:b8:
54:76:7b:c7:9b:3c:98:4c:aa:f8:31:0a:23:79:92:87:73:48:
f0:02:98:85:03:3c:24:ba:cb:f9:b0:ce:79:6a:e4:25:d3:9f:
28:69:0f:1e:91:cc:7a:91:11:75:20:78:33:fa:fb:90:43:25:
04:a5:bc:9c:40:30:9f:e1:d5:9d:ad:67:86:6f:93:b3:4f:e3:
5d:92:41:b8:a9:61:86:97:3c:45:f7:cc:79:ed:19:0d:f9:f6:
90:e6:3f:64:5f:55:3b:35:2e:e1:6c:28:ad:2c:60:76:ff:e6:
06:a3:d3:9a:d3:c8:18:f6:b2:ca:82:9d:af:18:c1:b2:81:1b:
70:b1:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:12:20 2025 by rpki-client