Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rsqROH7LQKmi8csDO9Q5zYcTdX8.roa
File: rsqROH7LQKmi8csDO9Q5zYcTdX8.roa (raw, json)
Hash identifier: krQ6mXDy5SnGmEB08r/6tc3MMjtyX0diqkR6PHCxxf4=
Subject key identifier: AE:CA:91:38:7E:CB:40:A9:A2:F1:CB:03:3B:D4:39:CD:87:13:75:7F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01958BF69D2B73543EA3C5C1EAF868BFB646
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rsqROH7LQKmi8csDO9Q5zYcTdX8.roa
Signing time: Wed 12 Mar 2025 20:05:49 +0000
ROA not before: Wed 12 Mar 2025 20:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50819
IP address blocks: 80.96.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f6:9d:2b:73:54:3e:a3:c5:c1:ea:f8:68:bf:b6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 12 20:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeca91387ecb40a9a2f1cb033bd439cd8713757f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:b5:c1:07:e2:e8:8b:f9:53:b2:10:e2:f9:
df:8f:99:ed:9b:07:b4:b4:9d:97:d7:cd:12:92:d4:
fa:7f:ff:4e:6b:ea:44:69:1f:f2:61:c9:0d:63:ff:
7c:9e:fe:ef:5a:c1:87:42:ce:5a:80:0c:e8:33:ca:
f6:0f:4f:1f:9c:68:7f:19:35:37:14:b2:0b:53:25:
13:40:51:60:50:fa:25:25:15:c1:4f:e3:cd:38:da:
6d:c4:62:4a:d1:e0:64:48:b4:5b:5e:09:54:8f:cc:
21:ee:03:88:1c:fe:c6:a2:0f:62:bb:0b:6e:70:93:
e9:80:55:56:cb:93:e9:c7:e0:6c:39:71:cb:3c:84:
7d:98:9d:79:fa:b8:df:c2:98:ac:a9:55:61:4d:00:
c4:ff:d3:a0:ef:68:60:f7:ec:27:6f:71:16:b1:58:
98:8e:1f:66:22:e9:d0:ef:4e:34:ab:e2:cc:58:80:
84:18:f8:d5:76:15:2a:fc:b8:9b:cc:23:61:08:ac:
64:81:6a:2b:50:36:18:cf:6d:3c:b8:36:df:d7:2c:
40:d6:76:f0:c8:30:ff:eb:23:43:5e:fe:91:7c:71:
21:e5:ab:40:c0:99:73:fb:74:cb:ed:af:b5:a9:7d:
56:83:04:2b:93:59:31:c6:9f:75:39:df:c4:aa:1a:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CA:91:38:7E:CB:40:A9:A2:F1:CB:03:3B:D4:39:CD:87:13:75:7F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rsqROH7LQKmi8csDO9Q5zYcTdX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.50.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f8:b3:60:2c:dd:57:99:c4:5d:c3:ba:c8:01:b3:2d:22:04:
e8:3a:df:c8:0d:08:4b:ea:7d:97:42:89:98:4f:9a:a9:44:44:
03:ed:27:f8:ef:b5:5f:8b:a0:51:62:31:6b:da:15:99:da:34:
7f:23:90:5e:4f:ff:b2:3c:3c:c2:9a:93:9d:87:4a:ec:ee:a7:
97:2a:1c:34:3b:c6:ce:88:1b:74:28:f9:db:ce:4d:7a:a2:fb:
9e:1e:ce:7b:f6:62:f4:0a:b6:b8:d5:8f:45:10:e4:5c:49:e0:
49:55:b6:63:72:36:05:95:02:e0:9f:86:be:4f:61:78:87:20:
ab:69:eb:a0:93:b0:9f:d4:1d:81:c5:2a:8f:53:b7:9f:d0:8e:
c7:c8:24:d0:40:13:56:4f:54:72:0c:78:5c:70:c0:9f:1f:34:
cf:bf:6d:12:75:3b:a2:8d:38:4e:13:32:35:f1:d7:5e:97:f5:
e8:e8:81:51:21:5c:0e:f8:b2:f2:a2:bd:e6:ae:ef:ac:96:c6:
68:be:39:b8:43:ec:16:94:e2:a6:92:9f:cf:e7:ae:20:6d:47:
72:f8:a7:9a:c5:15:0a:6b:48:0f:1f:09:62:84:92:09:e8:2f:
db:8d:68:a5:37:ec:55:df:a8:95:00:eb:74:e4:5c:2a:df:52:
76:d4:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:39 2025 by rpki-client