Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pm4Ms1_PctZuFSucPOjZI5Xg4hA.roa
File: pm4Ms1_PctZuFSucPOjZI5Xg4hA.roa (raw, json)
Hash identifier: 56wZbwIYPWaQUzYybCrUVZUj5hjIHPK1kZvXiISHreo=
Subject key identifier: A6:6E:0C:B3:5F:CF:72:D6:6E:15:2B:9C:3C:E8:D9:23:95:E0:E2:10
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019570FFFF66CCCE584C6D034528ECE95D68
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pm4Ms1_PctZuFSucPOjZI5Xg4hA.roa
Signing time: Fri 07 Mar 2025 14:26:19 +0000
ROA not before: Fri 07 Mar 2025 14:26:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215201
IP address blocks: 80.96.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:ff:ff:66:cc:ce:58:4c:6d:03:45:28:ec:e9:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 7 14:26:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a66e0cb35fcf72d66e152b9c3ce8d92395e0e210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:d9:06:ae:15:b4:0f:7c:ee:77:c7:87:23:
dc:32:35:a7:ee:9c:de:e6:7b:1e:a8:8c:1f:ea:0e:
5b:f1:28:59:5f:6e:d3:85:02:68:7e:7b:f2:24:ca:
c4:70:8e:bd:4f:d0:cb:14:ee:51:44:03:75:a1:7c:
b1:da:ff:87:41:c6:28:db:0f:3e:fb:68:46:2c:60:
7c:e7:81:b1:46:e5:5e:49:99:7f:4d:a4:9a:70:bc:
35:7d:75:3f:b8:81:98:f9:fc:c4:8e:85:ba:6b:c2:
9a:ad:bf:4d:ee:b1:04:1f:72:dc:70:91:d8:c6:0c:
0e:17:56:9c:84:3e:08:42:d2:d6:40:5a:5c:52:b9:
bc:f6:e7:50:52:b8:8f:f4:5a:a6:5a:b3:ee:22:6d:
70:5f:03:3d:b7:f1:26:17:0a:10:c0:e0:01:83:3c:
1c:3c:27:3c:fe:ed:71:3b:60:2e:b5:03:ce:d7:dd:
32:8e:3a:7b:2d:6b:4c:d0:fc:38:1a:a5:18:57:f4:
eb:65:4a:03:f4:b8:dd:e6:cf:9b:2d:9d:ee:96:56:
5c:0b:8f:45:8b:82:b8:85:7c:36:8a:47:b6:6d:61:
79:12:b0:75:71:ea:2e:bd:ce:ac:67:0c:9e:71:84:
76:50:fd:ad:b7:d8:d6:28:59:5b:de:e8:47:4a:62:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6E:0C:B3:5F:CF:72:D6:6E:15:2B:9C:3C:E8:D9:23:95:E0:E2:10
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pm4Ms1_PctZuFSucPOjZI5Xg4hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.53.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6b:d1:41:64:6d:47:17:a0:21:dc:96:24:c6:c8:f6:08:b2:
f5:c8:22:3b:85:3b:ac:4d:84:a9:ab:3b:65:d5:5d:be:9f:8b:
ac:38:41:96:e9:89:5a:71:45:96:b7:7f:82:3a:0b:52:58:c8:
80:8d:24:05:6f:aa:81:24:b5:bd:90:95:cd:c7:c1:cc:7a:88:
44:7d:3b:d9:68:1a:e4:ce:3b:c5:dd:bf:3e:72:cc:a0:d4:70:
6c:de:1b:02:9a:51:56:c1:95:cc:c4:fb:b1:9b:95:7a:13:cc:
07:45:c0:cd:1e:67:c9:67:39:c4:4c:8f:e7:42:e2:ff:13:e4:
40:23:31:ff:73:94:f2:6b:d6:15:4e:6e:64:96:5e:60:93:54:
85:44:ac:ef:fc:e2:48:f1:54:b8:15:68:b8:d7:2a:ce:a0:6f:
96:fa:a8:65:79:c1:87:0d:e7:88:11:e3:3f:e6:a3:93:41:24:
55:49:8b:92:0c:c7:63:1e:62:36:6b:ea:34:3b:7d:bf:67:1a:
a2:3d:93:6a:df:18:9b:2f:ca:74:96:e4:23:be:56:f1:76:77:
7a:54:78:85:3e:17:5f:9f:f3:04:39:7a:36:1a:4c:a3:e6:13:
10:04:18:1f:a0:53:33:3d:14:61:74:b9:57:8d:72:e9:7f:fa:
80:2a:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:34:46 2025 by rpki-client