Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/MbtasxnHQ9qJwaKIKJ7mh4f-vt0.roa
File: MbtasxnHQ9qJwaKIKJ7mh4f-vt0.roa (raw, json)
Hash identifier: FWJsXgSnrsCf0ch++zvlA9yoy7I3It/Z1MwpFSP3QPI=
Subject key identifier: 31:BB:5A:B3:19:C7:43:DA:89:C1:A2:88:28:9E:E6:87:87:FE:BE:DD
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5A9C51DCD9E4E353A05B84737C3EA
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/MbtasxnHQ9qJwaKIKJ7mh4f-vt0.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25186
IP address blocks: 81.80.17.0/24 maxlen: 24
81.80.72.0/24 maxlen: 24
194.3.255.0/24 maxlen: 24
195.6.9.0/24 maxlen: 24
195.6.20.0/24 maxlen: 24
195.6.66.0/24 maxlen: 24
195.6.67.0/24 maxlen: 24
195.6.171.0/24 maxlen: 24
195.6.174.0/24 maxlen: 24
195.6.230.0/24 maxlen: 24
217.167.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a9:c5:1d:cd:9e:4e:35:3a:05:b8:47:37:c3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31bb5ab319c743da89c1a288289ee68787febedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:dd:82:cb:9b:62:05:95:02:97:c6:b1:f5:
90:bc:a3:a0:5c:48:aa:bb:a1:f7:80:58:d4:4d:c2:
9c:1c:ff:7a:bf:ae:62:92:c0:1f:73:83:f1:f2:75:
13:4d:06:37:ab:64:45:4f:87:31:8e:86:24:df:18:
e3:2d:8b:df:f6:5a:96:1b:c2:d0:b8:a8:60:88:15:
eb:02:2c:65:8e:a2:7f:79:c0:94:6d:a3:b7:d5:43:
00:c4:46:9d:8a:58:1a:00:3b:79:b2:bd:ef:26:c9:
54:10:b2:62:0a:95:b7:d8:2a:26:76:a5:7d:c7:19:
89:73:79:df:0a:4d:5c:ea:f4:9f:78:c6:c3:c2:25:
60:e6:01:46:63:51:b2:a2:4d:e9:e7:15:3a:bd:45:
81:40:a3:3f:10:11:42:3c:54:c9:6b:67:8b:c3:bf:
24:2b:00:c7:94:1a:16:40:31:af:d1:c3:d8:60:63:
f9:01:f7:f7:d0:bd:50:e4:12:92:03:80:25:8e:fe:
0f:bb:3b:c4:5b:0c:ec:32:d3:44:2d:86:77:0d:6d:
87:f2:55:92:46:91:b6:78:7e:82:c9:15:ea:1a:4f:
ba:4b:e6:c1:3c:f1:ea:32:24:13:57:4e:c2:44:ef:
42:48:8a:4b:2d:63:d7:7e:4e:66:7e:06:ea:eb:77:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BB:5A:B3:19:C7:43:DA:89:C1:A2:88:28:9E:E6:87:87:FE:BE:DD
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/MbtasxnHQ9qJwaKIKJ7mh4f-vt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.80.17.0/24
81.80.72.0/24
194.3.255.0/24
195.6.9.0/24
195.6.20.0/24
195.6.66.0/23
195.6.171.0/24
195.6.174.0/24
195.6.230.0/24
217.167.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f2:de:3a:74:0e:ad:c5:a6:c8:b6:e3:09:e2:78:31:ae:25:
96:57:c1:02:a9:85:05:e6:47:dd:96:9e:aa:14:f6:a0:5a:5d:
45:f4:99:82:52:a3:37:09:a1:56:33:7d:b0:1b:7d:d0:de:4b:
ad:b1:c9:35:2b:d0:67:27:79:7d:ad:ff:de:cb:06:36:b6:ff:
93:5a:86:11:43:fe:ef:94:21:31:71:f9:2a:06:09:fa:4a:0e:
ad:79:7f:97:96:fa:65:b3:68:51:0b:d0:8e:f8:4d:97:19:d2:
16:1d:fd:6b:79:9d:8a:85:ca:d9:5c:69:de:e1:fd:0b:8a:e3:
a3:64:c9:77:58:ab:e8:e4:0a:a2:c9:33:79:62:11:1f:d2:7c:
b3:2a:6b:89:02:43:3b:8e:fb:b0:3a:31:32:b8:95:48:68:4a:
0b:4b:a3:09:95:46:b1:7a:a2:e7:e8:1b:c7:84:06:49:95:f9:
5c:a5:6b:08:ca:32:4d:7e:08:2d:e2:3c:cc:31:83:c1:94:d2:
e2:3c:31:fa:04:f6:98:77:a9:8b:fe:db:0c:4f:ca:21:f1:27:
d7:16:7d:42:d1:67:b1:cb:7e:02:91:0f:98:0d:d6:05:d3:3a:
b7:11:58:d1:ac:09:25:30:b7:78:dc:24:4f:0e:87:0d:03:c2:
3f:02:ae:94
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZQg1anFHc2eTjU6BbhHN8PqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWJiNWFiMzE5Yzc0M2RhODljMWEyODgyODllZTY4Nzg3ZmViZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns3dgsubYgWVApfGsfWQvKOgXEiq
u6H3gFjUTcKcHP96v65iksAfc4Px8nUTTQY3q2RFT4cxjoYk3xjjLYvf9lqWG8LQ
uKhgiBXrAixljqJ/ecCUbaO31UMAxEadilgaADt5sr3vJslUELJiCpW32ComdqV9
xxmJc3nfCk1c6vSfeMbDwiVg5gFGY1Gyok3p5xU6vUWBQKM/EBFCPFTJa2eLw78k
KwDHlBoWQDGv0cPYYGP5Aff30L1Q5BKSA4Aljv4PuzvEWwzsMtNELYZ3DW2H8lWS
RpG2eH6CyRXqGk+6S+bBPPHqMiQTV07CRO9CSIpLLWPXfk5mfgbq63e+0QIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFDG7WrMZx0PaicGiiCie5oeH/r7dMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvTWJ0YXN4bkhROXFKd2FLSUtKN21oNGYtdnQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAUVARAwQA
UVBIAwQAwgP/AwQAwwYJAwQAwwYUAwQBwwZCAwQAwwarAwQAwwauAwQAwwbmAwQA
2adoMA0GCSqGSIb3DQEBCwUAA4IBAQBM8t46dA6txabItuMJ4ngxriWWV8ECqYUF
5kfdlp6qFPagWl1F9JmCUqM3CaFWM32wG33Q3kutsck1K9BnJ3l9rf/eywY2tv+T
WoYRQ/7vlCExcfkqBgn6Sg6teX+Xlvpls2hRC9CO+E2XGdIWHf1reZ2KhcrZXGne
4f0LiuOjZMl3WKvo5AqiyTN5YhEf0nyzKmuJAkM7jvuwOjEyuJVIaEoLS6MJlUax
eqLn6BvHhAZJlflcpWsIyjJNfggt4jzMMYPBlNLiPDH6BPaYd6mL/tsMT8oh8SfX
Fn1C0Wexy34CkQ+YDdYF0zq3EVjRrAklMLd43CRPDocNA8I/Aq6U
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:44:34 2025 by rpki-client