Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0JF6qcH8LEvd_xpzYnvkMQJY3p0.roa
File: 0JF6qcH8LEvd_xpzYnvkMQJY3p0.roa (raw, json)
Hash identifier: feEAQGn1lYlzxh2QQOZYjs8F23MH6vwCH/mKDBvJv88=
Subject key identifier: D0:91:7A:A9:C1:FC:2C:4B:DD:FF:1A:73:62:7B:E4:31:02:58:DE:9D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C185CCDE3232846F5E2DF758D233F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0JF6qcH8LEvd_xpzYnvkMQJY3p0.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34304
IP address blocks: 80.96.99.0/24 maxlen: 24
80.96.106.0/24 maxlen: 24
80.96.236.0/23 maxlen: 23
81.180.94.0/23 maxlen: 23
81.180.172.0/23 maxlen: 23
81.180.252.0/23 maxlen: 23
81.181.173.0/24 maxlen: 24
85.121.18.0/23 maxlen: 23
85.121.36.0/23 maxlen: 23
85.122.84.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
217.156.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:18:5c:cd:e3:23:28:46:f5:e2:df:75:8d:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0917aa9c1fc2c4bddff1a73627be4310258de9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:8e:7e:17:54:cb:a8:76:e3:f2:cf:75:2a:
3c:8f:09:fd:e7:c6:2f:4d:6d:3a:00:97:18:4c:92:
3b:c8:b5:4e:3b:0a:e5:b0:d0:f9:c6:15:65:a6:a0:
f1:fc:b6:a7:a2:62:49:77:05:31:8a:27:9f:f3:48:
eb:af:5c:3c:d2:9c:bc:ae:f8:27:2c:3b:a7:8f:7e:
a6:88:4c:37:d2:04:a3:72:8a:b6:a1:56:f9:ab:da:
27:b4:10:3c:3d:de:47:cb:36:e0:8a:8f:02:1d:8a:
8f:d5:20:4f:45:bf:02:cf:4b:70:06:ab:a3:72:0d:
c9:4f:fc:5e:60:28:68:7e:dc:f2:69:38:99:0d:e8:
02:7e:a3:0b:06:b8:65:9c:6a:14:f3:04:41:a4:75:
24:c3:b0:43:93:d8:7f:7e:8d:92:5a:65:44:4a:01:
f3:eb:39:d4:b4:d5:36:8d:88:30:6c:61:1a:f9:bc:
d1:aa:73:ad:be:71:9f:91:04:de:44:ad:0e:c7:44:
e9:24:ba:8f:84:a8:7b:3a:18:29:ea:0d:a5:cc:59:
0b:0c:e0:07:ce:db:ac:bf:43:c8:c5:76:01:76:75:
5a:f4:51:b9:01:9a:db:6a:4e:db:c7:5d:2a:36:e4:
42:9c:43:82:12:30:89:4a:29:14:4b:8c:b8:d8:62:
94:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:7A:A9:C1:FC:2C:4B:DD:FF:1A:73:62:7B:E4:31:02:58:DE:9D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0JF6qcH8LEvd_xpzYnvkMQJY3p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
80.96.106.0/24
80.96.236.0/23
81.180.94.0/23
81.180.172.0/23
81.180.252.0/23
81.181.173.0/24
85.121.18.0/23
85.121.36.0/23
85.122.84.0/23
194.102.217.0/24
217.156.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:26:1e:54:d5:ab:ff:44:09:ee:7b:9c:5e:9c:d7:1b:b4:1c:
46:16:a0:a1:6a:0a:22:5f:a5:f4:f4:4e:c7:de:7a:05:f4:a1:
5b:7b:61:c1:5b:2d:53:8b:be:bb:3a:64:f2:d3:da:00:47:b8:
44:ef:13:f2:83:32:da:54:1f:3b:2c:ec:30:d7:d0:1c:36:d7:
89:df:e1:02:99:78:81:fa:c4:6a:34:ef:4f:14:25:29:23:20:
ce:9f:3e:4c:35:e0:a4:74:1f:3c:5c:8e:3d:88:b9:0c:45:d8:
f5:eb:da:a4:bc:5e:67:db:9c:a3:ff:13:82:87:69:c5:dd:38:
7d:5a:2c:1a:87:d2:af:44:49:66:d4:61:31:18:9d:97:ae:f8:
e6:6f:b0:44:b4:e5:58:b6:62:f3:7a:04:82:a2:eb:04:79:dc:
da:4e:eb:86:c1:c8:7f:c5:9d:b9:e4:8a:0c:43:1e:90:ea:80:
35:60:24:db:8c:78:93:83:b4:64:90:fb:14:85:7b:d2:47:01:
b6:5c:2d:b9:62:2e:02:bb:cc:2c:b0:0f:9d:6c:74:88:5f:47:
c9:80:20:9a:b8:7b:b5:30:17:0b:99:0d:7e:da:45:3b:6c:49:
c3:3f:be:a9:c8:cc:27:6a:8d:e2:a4:56:3b:5c:3c:e4:fd:53:
69:04:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:00:34 2025 by rpki-client