Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/4wb4lNMOa7HlWogsoLIACdbFzSM.roa
File: 4wb4lNMOa7HlWogsoLIACdbFzSM.roa (raw, json)
Hash identifier: 7H9j7nBLmcfP/6HmsTl2YP5/OOOThKZKOBo5AolF6nI=
Subject key identifier: E3:06:F8:94:D3:0E:6B:B1:E5:5A:88:2C:A0:B2:00:09:D6:C5:CD:23
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5A07524CEB28A0D927A546E10D50B
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/4wb4lNMOa7HlWogsoLIACdbFzSM.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8891
IP address blocks: 80.12.245.0/24 maxlen: 24
80.12.246.0/24 maxlen: 24
81.52.142.0/23 maxlen: 24
2a01:c9c0:a0::/44 maxlen: 48
2a01:c9c0:c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a0:75:24:ce:b2:8a:0d:92:7a:54:6e:10:d5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e306f894d30e6bb1e55a882ca0b20009d6c5cd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:93:92:5f:48:b8:e9:03:3e:d9:5c:50:a6:
cd:f5:71:df:0a:14:87:9b:2e:4e:6c:79:48:f3:8b:
52:b7:e7:c5:71:40:72:da:c9:74:3e:db:71:77:b2:
6d:3c:71:75:c2:d2:64:b3:65:3d:d1:db:a9:57:8e:
35:68:1e:ac:87:c0:62:d4:4e:7f:d8:b7:9f:5d:cf:
0a:d8:de:fd:2a:2b:b0:30:10:1a:8b:10:39:28:7c:
fe:2e:87:d1:32:d1:c9:fb:58:8e:ef:3a:0d:74:a8:
77:1e:ae:85:37:67:05:50:c5:d9:bc:db:35:27:58:
1e:b2:26:7d:6a:be:0f:22:b6:aa:cf:21:d9:c0:66:
b4:f9:59:b5:6c:00:50:1a:18:7d:9f:a3:47:62:d1:
1e:af:19:2b:7c:97:45:0b:6c:75:d1:ca:19:94:86:
cc:41:5b:04:73:d3:b9:3d:75:56:59:2a:23:31:36:
19:9a:8f:05:1e:c3:64:86:be:81:0f:ae:c1:9a:05:
92:48:45:35:79:56:a0:fd:4a:17:c6:1e:28:e2:d5:
50:2a:42:39:9c:1a:dd:c6:41:ee:49:37:00:32:04:
d5:38:24:4c:40:60:c6:76:3f:00:85:6c:b6:c9:9e:
2f:34:f3:16:c5:5d:7a:f1:10:2b:8f:b7:c3:9d:44:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:06:F8:94:D3:0E:6B:B1:E5:5A:88:2C:A0:B2:00:09:D6:C5:CD:23
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/4wb4lNMOa7HlWogsoLIACdbFzSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.245.0-80.12.246.255
81.52.142.0/23
IPv6:
2a01:c9c0:a0::/44
2a01:c9c0:c0::/44
Signature Algorithm: sha256WithRSAEncryption
8b:72:39:d7:c7:16:82:1a:71:90:9e:06:50:9d:f5:08:2b:67:
cc:bb:b9:a1:52:07:e8:cf:39:61:79:df:0a:37:20:71:59:78:
5a:09:00:79:a8:c6:14:61:46:43:8c:99:8d:98:04:6d:96:93:
d0:4f:22:bc:ce:47:18:cb:ae:f1:c3:b6:3b:fd:65:09:f6:fb:
4b:30:d5:46:53:36:e7:9c:22:4a:d4:51:00:36:52:9f:8f:e1:
0e:0f:14:71:47:bb:9f:aa:23:97:00:3e:b6:3c:f7:39:a1:94:
e8:9f:12:32:5f:66:e3:a4:40:cd:ca:80:7e:36:49:97:fe:58:
d2:65:d5:65:78:78:96:81:39:e4:cb:3d:a9:f3:59:27:12:f8:
eb:31:23:fa:6b:f1:0b:56:ae:c3:97:30:94:60:c3:f4:22:4b:
f5:36:5e:5b:40:ab:85:5d:0c:36:86:20:12:99:34:22:0b:64:
55:3c:96:ee:8f:36:b2:62:71:5a:81:f0:cb:bb:61:8a:dd:c8:
56:3d:cf:2c:bd:41:4e:c8:b7:99:0a:8c:f2:1d:f7:9b:71:ce:
8d:93:66:d9:43:c9:34:db:06:2a:8d:e6:f4:4a:44:da:14:8c:
e9:ff:52:4e:19:5a:9a:da:9d:18:ba:fa:f1:f0:90:70:be:66:
01:c2:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:12:46 2025 by rpki-client