Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rT-Wqz-u0VxqBVAHEBJcGBb5Hkc.roa
File: rT-Wqz-u0VxqBVAHEBJcGBb5Hkc.roa (raw, json)
Hash identifier: mmWE5FpE55EzX9X3yWQzhS0QeBJfufE48mmudz7dGSU=
Subject key identifier: AD:3F:96:AB:3F:AE:D1:5C:6A:05:50:07:10:12:5C:18:16:F9:1E:47
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C266BED906EEAB9945FF3B2650A79
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rT-Wqz-u0VxqBVAHEBJcGBb5Hkc.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47388
IP address blocks: 80.96.217.0/24 maxlen: 24
80.97.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:26:6b:ed:90:6e:ea:b9:94:5f:f3:b2:65:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad3f96ab3faed15c6a05500710125c1816f91e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:ef:59:08:de:c6:74:f0:32:72:aa:80:2e:
8a:86:46:b9:f8:11:4e:c1:33:b8:26:a7:12:53:82:
0f:af:10:70:34:1f:b6:bc:86:e3:86:71:41:99:59:
7c:e4:73:6c:87:5b:25:2b:5e:82:6d:10:29:ec:fe:
4b:21:77:32:92:6f:01:57:0a:7b:56:b5:87:e7:cd:
55:f1:76:0b:a6:e0:ac:87:66:82:a7:80:38:0a:f7:
8c:78:b8:90:b8:9e:76:89:df:de:67:f3:f5:24:98:
78:7f:ff:24:7c:c6:f4:17:da:d1:34:1d:8e:74:ea:
47:20:15:ba:5d:5f:50:ff:ff:70:3a:c0:77:2b:a3:
72:87:f2:e5:de:d3:c0:f9:72:09:3d:24:bb:d1:ea:
c5:13:e8:fc:3a:c5:33:1d:93:99:92:7f:05:ef:9f:
fe:86:11:12:ca:24:1b:d5:27:e6:0b:5f:87:e0:c1:
76:b9:08:54:08:fe:86:df:5e:e7:62:6c:27:4e:02:
05:9b:a7:d7:51:6f:ca:89:46:76:d9:ee:b1:84:c0:
8a:bd:3e:d4:dd:67:8f:54:dd:d4:e2:fe:7b:55:ac:
16:35:9d:4e:24:79:29:1d:6f:5d:ae:93:3d:3f:e1:
59:0c:66:ac:4c:1c:7a:fd:50:d1:eb:21:ed:82:f4:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:96:AB:3F:AE:D1:5C:6A:05:50:07:10:12:5C:18:16:F9:1E:47
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rT-Wqz-u0VxqBVAHEBJcGBb5Hkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.217.0/24
80.97.16.0/22
Signature Algorithm: sha256WithRSAEncryption
88:99:47:0b:78:68:45:12:4b:d8:a2:9f:9e:41:ed:ab:76:47:
85:c1:2c:ea:06:a3:c6:a3:ce:c2:f2:12:de:76:5d:cc:28:6e:
b8:c6:72:dc:40:ff:a4:9c:5f:ed:48:99:ea:6b:3f:38:b5:22:
4d:ba:e8:8d:bc:64:d8:06:29:b2:44:d1:a9:df:2c:87:d6:4d:
e8:bb:b6:06:38:f7:f9:b1:0b:08:d7:0f:86:23:9a:12:72:51:
5a:b5:3d:64:8e:a0:33:18:b7:99:84:c4:5a:07:02:ee:2f:e9:
c8:51:d5:00:80:c7:c2:43:ea:f9:d1:83:36:97:1b:b2:4f:32:
4c:19:9a:17:51:e8:9b:6b:7f:cf:8d:0c:29:7d:38:2a:4c:bd:
e1:dc:f2:cf:bb:a0:58:78:c8:70:fb:e7:e3:3d:5b:f0:fe:5a:
33:06:b7:70:d5:e4:e7:3d:d4:28:af:79:a1:99:32:42:ce:1f:
1c:89:8a:b0:3f:35:8e:60:60:4e:0a:96:f8:c5:d4:31:05:d1:
66:ad:04:a3:f9:ea:a0:15:45:0e:84:c7:93:df:94:fc:b2:8f:
c5:7a:30:07:fe:af:c6:6a:ee:7e:4f:de:34:6d:ad:bc:cf:69:
cc:bf:be:3a:8f:67:90:18:e2:94:b6:97:14:3e:b5:48:2d:de:
21:a1:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:32:39 2025 by rpki-client