Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/1-e8XIT1Z3N7FkE6antYfwBKkpzw.roa
File: 1-e8XIT1Z3N7FkE6antYfwBKkpzw.roa (raw, json)
Hash identifier: zVNjPnCC1reYEwi0hBdkwfOGcT4yDr6RLJ+k6m72QQk=
Subject key identifier: F9:EF:17:21:3D:59:DC:DE:C5:90:4E:9A:9E:D6:1F:C0:12:A4:A7:3C
Certificate issuer: /CN=d1e00cfced9e3ba55c79ec22581ef1b34be01cae
Certificate serial: 018CC348C7DEC0F73BEC6E811378AC6E7255
Authority key identifier: D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAM_O2eO6VceewiWB7xs0vgHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/1-e8XIT1Z3N7FkE6antYfwBKkpzw.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 80.68.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c7:de:c0:f7:3b:ec:6e:81:13:78:ac:6e:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e00cfced9e3ba55c79ec22581ef1b34be01cae
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9ef17213d59dcdec5904e9a9ed61fc012a4a73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:27:d2:59:47:85:10:ee:76:79:50:73:7f:
8d:94:f1:23:94:48:b7:40:b5:21:63:58:d2:7b:63:
a8:4c:03:fb:cc:e6:21:64:1e:63:1d:71:8b:87:e4:
ee:59:0e:87:d5:a7:13:c6:e4:fc:db:b2:ad:f8:c7:
bf:54:40:25:76:ab:7d:73:3f:87:72:65:7f:b2:a3:
bc:5c:29:3f:5c:d7:5e:be:a0:51:4b:e6:71:8f:96:
bb:d1:7a:86:ff:90:89:fc:af:0f:16:cd:a3:fa:2c:
9a:81:33:eb:a3:d1:fb:25:55:1a:5b:12:1c:66:dd:
08:44:a3:71:39:0e:68:bb:5e:b1:50:a2:5b:48:d0:
2e:67:34:db:80:1b:0b:7c:c6:51:5c:c1:27:7e:9e:
b6:c3:87:4c:79:4f:a8:8f:00:e5:62:70:67:af:5e:
1e:5b:3f:26:4d:7e:b9:22:e8:40:97:bf:4e:81:68:
28:71:25:0d:04:55:ee:31:1b:03:69:43:ae:d4:b2:
ba:0b:0b:b2:2f:75:d7:15:a2:d8:71:6e:42:65:e4:
b1:28:4d:0d:62:a7:99:04:ad:d4:68:a3:9c:02:ba:
ad:f9:64:46:6a:5f:03:76:e4:8f:48:5e:99:62:e4:
2a:47:94:bb:5a:f6:ed:e8:5b:28:65:a2:72:47:55:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EF:17:21:3D:59:DC:DE:C5:90:4E:9A:9E:D6:1F:C0:12:A4:A7:3C
X509v3 Authority Key Identifier:
keyid:D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAM_O2eO6VceewiWB7xs0vgHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/1-e8XIT1Z3N7FkE6antYfwBKkpzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:4a:40:21:82:ef:8b:11:81:bb:73:35:d3:05:08:0f:ce:1b:
4a:d3:c0:ef:f0:74:e3:52:3d:6b:79:59:53:9e:9f:ec:87:02:
6f:45:35:c9:e5:72:82:e0:80:98:0f:5f:7b:fb:b2:c8:f2:e5:
b8:86:a5:ae:77:43:fc:f6:02:23:97:e0:d8:cf:49:e8:44:c7:
99:7c:52:76:60:3c:ff:e5:31:1b:2a:17:a6:83:6b:6b:3a:f7:
2b:6a:bb:3f:48:a0:a0:f9:65:67:d3:d2:5a:5b:11:63:b9:44:
3d:a0:0f:1c:8f:aa:d2:1a:3a:09:1a:96:f5:d2:55:0d:ea:25:
f6:c0:9a:73:95:a6:61:0a:d6:37:38:e5:91:3b:6a:d6:20:ad:
23:c4:31:61:82:fe:2c:c1:3d:fb:09:5a:1e:7d:c6:e1:6a:a8:
e2:30:f5:c9:96:6f:39:73:6a:03:13:65:06:33:65:0d:cc:8a:
b0:65:1b:0a:23:c3:da:19:af:f5:46:1d:ed:01:fe:3d:81:4a:
c9:55:f0:10:51:20:09:c3:88:ec:38:80:99:e0:19:1e:ff:9a:
5f:96:51:05:94:f0:ec:36:19:8d:7c:12:b6:f5:34:54:b7:67:
3b:63:a0:a4:c7:63:a4:29:d7:09:4a:5a:b0:aa:df:21:90:1c:
23:d0:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:25:53 2025 by rpki-client