Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/7GCbPVRPEJZsMRvPhI5RO5n7LOs.roa
File: 7GCbPVRPEJZsMRvPhI5RO5n7LOs.roa (raw, json)
Hash identifier: kq+JWW/TG1tbOzHJqJ4QCmQkAZ7g+TDJlq1lnLukJ3g=
Subject key identifier: EC:60:9B:3D:54:4F:10:96:6C:31:1B:CF:84:8E:51:3B:99:FB:2C:EB
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 0195D7B57B58EA72881506B8BBD62F658DA8
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/7GCbPVRPEJZsMRvPhI5RO5n7LOs.roa
Signing time: Thu 27 Mar 2025 13:05:49 +0000
ROA not before: Thu 27 Mar 2025 13:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 80.12.71.0/24 maxlen: 32
80.12.76.0/24 maxlen: 24
80.12.79.0/24 maxlen: 24
80.12.96.0/22 maxlen: 24
80.12.96.0/23 maxlen: 24
80.12.98.0/24 maxlen: 24
81.52.128.0/21 maxlen: 24
81.52.136.0/22 maxlen: 24
81.52.140.0/23 maxlen: 24
81.52.160.0/24 maxlen: 24
81.52.166.0/23 maxlen: 24
81.52.168.0/23 maxlen: 24
81.52.176.0/20 maxlen: 24
81.52.190.0/24 maxlen: 24
81.52.202.0/24 maxlen: 24
81.52.236.0/22 maxlen: 24
90.84.48.0/20 maxlen: 24
90.84.128.0/20 maxlen: 24
90.84.148.0/24 maxlen: 24
90.84.151.0/24 maxlen: 24
90.84.159.0/24 maxlen: 24
90.84.255.0/24 maxlen: 24
193.251.128.0/19 maxlen: 24
193.251.148.0/23 maxlen: 23
193.251.160.0/20 maxlen: 24
193.251.169.0/24 maxlen: 24
193.251.220.0/22 maxlen: 24
193.251.240.0/20 maxlen: 24
193.252.113.0/24 maxlen: 24
193.252.226.0/24 maxlen: 24
193.253.158.0/23 maxlen: 23
2001:688::/32 maxlen: 48
2001:688:2::/48 maxlen: 48
2001:688:3::/48 maxlen: 48
2001:688:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:b5:7b:58:ea:72:88:15:06:b8:bb:d6:2f:65:8d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Mar 27 13:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec609b3d544f10966c311bcf848e513b99fb2ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:74:47:aa:e1:25:e6:1c:14:02:a0:d7:47:
53:88:3a:68:61:fc:fc:7d:d9:8d:1a:b4:54:da:45:
1c:1e:08:0d:bf:9f:d0:b4:1b:d6:d0:71:a0:fa:4e:
3f:73:bb:23:52:1a:4e:be:d3:42:33:ba:59:04:2e:
f9:fb:98:e3:db:43:2b:81:60:88:54:44:69:bf:31:
6f:f7:af:58:59:fb:9e:46:50:02:01:26:d1:73:c3:
29:a0:23:65:2b:29:9e:35:d2:2d:8f:2b:9c:08:c9:
9b:1f:60:05:cf:45:cc:6f:9d:ba:f3:32:b2:b3:1b:
20:90:98:47:c1:b3:81:c8:6c:61:42:7c:7a:27:6c:
5d:12:c9:cc:21:ac:a2:98:07:3d:1a:62:7f:b9:08:
54:41:8a:0a:a9:75:61:41:ce:49:6d:96:9b:e1:9d:
1c:4f:3b:04:b6:75:fd:40:bb:0b:cf:56:0a:13:74:
11:8f:f8:27:30:a8:49:dd:71:e2:75:8b:ea:9b:3b:
49:fe:87:ac:b2:f4:54:99:e3:d6:d7:b2:2e:68:4d:
1b:1c:31:89:6e:3e:e7:76:3e:54:a2:32:97:68:af:
50:f2:09:11:d7:5b:09:7e:32:06:e6:15:b2:03:a8:
ed:dd:fb:37:db:13:c2:e2:5c:87:45:a7:34:70:dc:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:60:9B:3D:54:4F:10:96:6C:31:1B:CF:84:8E:51:3B:99:FB:2C:EB
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/7GCbPVRPEJZsMRvPhI5RO5n7LOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.71.0/24
80.12.76.0/24
80.12.79.0/24
80.12.96.0/22
81.52.128.0-81.52.141.255
81.52.160.0/24
81.52.166.0-81.52.169.255
81.52.176.0/20
81.52.202.0/24
81.52.236.0/22
90.84.48.0/20
90.84.128.0/20
90.84.148.0/24
90.84.151.0/24
90.84.159.0/24
90.84.255.0/24
193.251.128.0-193.251.175.255
193.251.220.0/22
193.251.240.0/20
193.252.113.0/24
193.252.226.0/24
193.253.158.0/23
IPv6:
2001:688::/32
Signature Algorithm: sha256WithRSAEncryption
2b:0f:bc:8e:45:14:0d:d0:17:55:67:83:83:7a:d8:9d:b0:54:
06:75:ea:70:57:c0:34:82:69:9b:70:c5:ce:be:76:d8:a5:38:
a8:7f:ca:5b:86:6a:2d:ea:91:a5:e4:7a:94:b9:d6:31:1e:96:
e1:06:ac:e8:25:1f:44:40:30:bf:17:1b:46:55:63:ba:4b:2f:
de:60:28:fb:f7:d7:f7:96:31:5b:da:3a:c1:60:47:5e:5d:83:
b4:9f:1e:8d:38:16:45:15:01:d9:77:9d:36:ee:87:8e:73:e8:
9e:5a:1e:03:6e:e5:c9:58:39:95:f2:87:75:9b:a9:f4:95:4b:
8d:16:f9:80:ec:98:f7:8c:ad:90:99:0f:86:25:c1:13:d9:3d:
b0:5b:6f:25:9e:df:5e:61:07:34:ba:09:f1:a8:93:1c:06:8f:
49:70:fe:3f:85:3a:86:70:7d:4a:13:81:33:85:1c:30:a0:d5:
cd:7f:e9:2c:3f:d5:aa:8c:15:da:7c:d4:1a:f5:b4:d9:c5:13:
c7:1d:03:1e:eb:5f:96:9f:d3:6e:cb:b4:ed:4b:bd:4a:d5:a4:
dc:97:31:aa:21:fb:a2:2c:02:96:79:5f:a4:a9:59:68:19:d2:
da:a7:3c:ae:ba:57:ad:8b:bf:1e:36:ea:03:7f:23:a4:96:36:
6e:24:78:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:02:58 2025 by rpki-client