Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/myI4pXyS-pvKKpOkxcO_A6-usig.roa
File: myI4pXyS-pvKKpOkxcO_A6-usig.roa (raw, json)
Hash identifier: YJSep/CBCrrHvCOunli8aKBP5xMWfGjr15zpVntocXI=
Subject key identifier: 9B:22:38:A5:7C:92:FA:9B:CA:2A:93:A4:C5:C3:BF:03:AF:AE:B2:28
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 387D19AA
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/myI4pXyS-pvKKpOkxcO_A6-usig.roa
Signing time: Sat 01 Jan 2022 16:10:56 +0000
ROA not before: Sat 01 Jan 2022 16:10:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31253
IP address blocks: 80.242.222.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947722666 (0x387d19aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 16:10:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b2238a57c92fa9bca2a93a4c5c3bf03afaeb228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:95:e0:9a:42:d1:98:07:11:ad:cb:c2:5e:d4:
b2:76:fe:2a:31:6d:ba:20:22:fc:74:a6:e4:ff:93:
f7:8e:a2:c1:aa:45:f0:82:f9:2f:08:55:86:8f:6a:
d7:ab:1f:42:a9:5f:cc:5f:29:8d:54:89:65:0c:4b:
a1:ed:63:c8:31:f1:60:f6:d1:aa:d9:b1:db:e0:c2:
36:64:c5:40:a5:1d:8e:87:be:08:25:5e:5a:1d:8f:
64:38:73:72:b2:ae:b4:a7:d1:c7:ca:fd:02:14:c0:
35:e7:5f:05:91:a4:04:6d:7a:6e:ee:57:1f:c3:ff:
ee:f7:79:db:43:de:2e:0f:69:4d:50:e2:08:54:dd:
d5:f4:a7:99:c9:84:fb:37:86:2b:da:cf:e6:25:aa:
90:eb:b1:94:26:24:e2:0d:e5:cc:6c:69:69:8d:5d:
14:7e:e1:11:72:67:1e:d7:26:4d:33:60:ff:fd:f5:
7d:42:19:cf:bf:88:ea:af:11:6e:34:00:00:f5:89:
1f:e1:40:2e:27:e5:27:34:2b:42:d2:13:ab:f0:a8:
4f:07:0f:48:02:30:f2:09:30:19:83:d7:dd:57:86:
44:ef:13:ca:9f:62:5e:26:79:75:8e:a1:66:3a:7e:
10:0f:6d:f8:8a:a6:25:06:be:17:98:24:ec:c6:da:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:38:A5:7C:92:FA:9B:CA:2A:93:A4:C5:C3:BF:03:AF:AE:B2:28
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/myI4pXyS-pvKKpOkxcO_A6-usig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.222.0/23
188.127.40.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d7:3c:4f:2d:9d:57:fc:af:1d:30:45:6e:8c:e1:e3:65:3e:
7e:2b:e5:04:5c:ac:6d:f5:43:35:22:7a:d8:e6:e9:dd:82:43:
f1:50:a6:e6:68:fc:99:80:b6:b2:c0:82:d6:0f:4c:fa:13:8e:
5c:a7:89:27:b6:11:4e:9f:ef:30:98:f2:e2:79:6d:a0:79:db:
54:a1:7c:83:8d:82:cd:b5:00:fd:8b:d0:65:75:98:86:32:d8:
e2:b2:bf:2e:76:ba:92:a8:15:23:42:86:ad:14:04:8f:22:5c:
f3:12:87:62:00:a5:e3:ef:73:b8:79:67:ad:a6:e9:7c:02:5a:
39:ea:b5:ef:6a:78:c5:7c:d3:0c:a8:a5:29:02:6e:8b:36:77:
a1:0b:2a:1c:42:17:a1:be:fb:4c:6f:c2:ed:19:ce:92:b8:ab:
a0:a7:e3:22:d3:8e:dc:96:d5:ce:a2:78:10:a2:63:84:9f:89:
98:6e:a1:8f:1f:28:05:d3:a1:45:35:45:30:62:60:0e:f2:92:
27:76:03:88:c6:63:2a:25:64:da:69:6e:10:3c:9a:fd:06:a2:
53:84:91:f4:7a:6b:f8:ce:a7:b9:a7:1d:04:2f:ab:a2:7d:72:
f4:a6:98:f2:ab:20:f8:02:e4:4e:87:1f:ce:92:08:5c:58:b4:
4b:50:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:34 2025 by rpki-client