Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/E9jDs21wyTQrxxdCexbFXywy7ww.roa
File: E9jDs21wyTQrxxdCexbFXywy7ww.roa (raw, json)
Hash identifier: 7KvreQdooGnapN4nLG47+65tWqkm5wr5AQ3EnJ2cIBY=
Subject key identifier: 13:D8:C3:B3:6D:70:C9:34:2B:C7:17:42:7B:16:C5:5F:2C:32:EF:0C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0195D8520B2C38003C8E9349364134CBACFB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/E9jDs21wyTQrxxdCexbFXywy7ww.roa
Signing time: Thu 27 Mar 2025 15:56:50 +0000
ROA not before: Thu 27 Mar 2025 15:56:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34304
IP address blocks: 80.96.99.0/24 maxlen: 24
80.96.106.0/24 maxlen: 24
81.180.172.0/23 maxlen: 23
81.180.252.0/23 maxlen: 23
81.181.173.0/24 maxlen: 24
85.122.84.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
217.156.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:52:0b:2c:38:00:3c:8e:93:49:36:41:34:cb:ac:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 27 15:56:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13d8c3b36d70c9342bc717427b16c55f2c32ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:73:47:c1:12:28:ed:67:b1:0c:e8:96:b2:
3c:10:e7:3c:bf:82:9f:95:a7:cf:95:64:bb:69:c1:
5e:f6:2c:98:a5:6a:b1:d0:8e:ac:6f:f7:e2:9c:09:
61:de:12:22:16:1d:6d:f6:65:73:2c:bb:f0:58:8f:
31:6d:6a:3b:b0:91:e1:da:f5:51:be:e5:02:6e:24:
8a:2f:de:03:0f:3e:56:74:cf:90:80:d9:2b:24:a7:
1e:ae:da:b0:28:a6:af:69:ed:6f:27:63:fb:d1:e8:
dd:80:03:ef:ae:6e:20:18:ff:1d:d1:f7:ab:91:32:
6c:bd:f5:b5:ac:fc:2d:33:79:e8:96:16:9c:d9:82:
43:4e:7d:45:e7:d0:61:37:66:75:cc:ab:0a:88:15:
fd:2e:3e:08:7c:be:66:72:ca:3b:7b:1f:b0:25:65:
b0:e5:8c:8e:be:93:bf:96:87:81:b6:3c:b1:e9:8d:
9a:14:aa:e9:4e:26:6a:12:63:c1:40:89:d7:53:9e:
87:50:82:63:2f:db:46:2c:7b:a4:a3:d8:5a:bb:7d:
a9:82:b9:8d:6d:f1:d4:e3:73:2b:d2:cd:1f:5a:57:
0c:dd:0b:ac:9b:63:8c:be:44:6b:4f:f3:eb:80:7f:
7a:d1:6c:62:f2:ed:10:33:1e:64:66:11:e5:c3:09:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D8:C3:B3:6D:70:C9:34:2B:C7:17:42:7B:16:C5:5F:2C:32:EF:0C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/E9jDs21wyTQrxxdCexbFXywy7ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
80.96.106.0/24
81.180.172.0/23
81.180.252.0/23
81.181.173.0/24
85.122.84.0/23
194.102.217.0/24
217.156.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b5:25:ee:0d:f6:5f:d0:83:bc:94:d1:32:c9:ff:96:ac:fb:
52:1c:0e:44:5a:4d:7d:44:3c:9d:f5:ed:dc:d9:26:0f:90:f3:
89:ec:bc:b8:73:5b:86:43:84:6a:0b:0a:91:59:17:96:68:aa:
d9:d1:80:e2:62:42:eb:0b:29:82:89:0e:d4:85:a2:4d:b3:46:
41:61:6c:a2:ff:8e:ae:7e:d1:da:fb:99:07:78:b4:94:18:d0:
da:6f:39:e9:dd:ff:15:b8:d9:8c:1e:26:69:93:21:28:db:3a:
34:a4:27:ce:04:18:c8:01:5b:b6:61:ee:f2:a3:5e:83:fb:08:
3b:85:1f:33:36:74:71:f4:4c:9f:4d:f7:de:4d:3b:49:65:85:
b6:19:7c:5e:c0:4d:d5:12:2b:10:2c:9e:dc:57:6b:56:4d:41:
94:45:fe:ec:de:5b:e4:1c:f5:b9:f4:1c:b1:ae:f9:2d:f6:6c:
ae:3a:e6:e7:da:c3:29:0b:5c:65:54:f5:78:de:7d:00:c6:91:
e9:a3:9c:30:91:ac:e5:72:99:3c:03:b6:a1:6f:b7:ff:ce:38:
ab:1c:e8:e5:05:a1:86:1e:d7:d5:e0:80:71:cb:77:0c:a8:b9:
f1:61:6b:d1:e6:5f:29:91:f7:61:55:fc:7a:c2:6c:1f:15:a8:
14:5c:77:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:31:08 2025 by rpki-client