Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/mt9-6rSUcH6hUF98CRI3MdqAD3I.roa
File: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (raw, json)
Hash identifier: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=
Subject key identifier: 9A:DF:7E:EA:B4:94:70:7E:A1:50:5F:7C:09:12:37:31:DA:80:0F:72
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067C470F294A21229923F5198130943
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/mt9-6rSUcH6hUF98CRI3MdqAD3I.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 328543
IP address blocks: 185.80.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c4:70:f2:94:a2:12:29:92:3f:51:98:13:09:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9adf7eeab494707ea1505f7c09123731da800f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:12:9a:fa:e3:c0:8c:c1:c8:76:67:56:dd:
ba:bb:a2:12:1c:c0:07:3a:79:4f:ca:24:36:27:02:
09:3c:cd:4f:29:d8:64:38:9e:5f:de:81:07:ea:f0:
d8:dc:81:e8:52:f0:a8:45:d4:e0:6a:97:55:2b:49:
33:22:de:fe:18:51:d7:8d:08:ac:df:74:87:64:dd:
05:18:15:55:1f:20:52:93:00:6c:eb:62:33:e9:6f:
a9:d1:d7:cd:6d:45:c9:0e:5f:0f:ed:06:66:41:74:
17:64:03:22:38:21:cb:23:4f:2a:4b:4e:30:65:f9:
03:93:11:c3:55:3e:77:19:fc:3c:43:6e:53:b1:d9:
e9:b1:0a:68:b8:b8:84:44:2a:ed:98:c9:68:a2:5a:
9c:b4:e9:2a:ca:9b:31:a4:68:9a:ba:78:68:aa:a1:
91:0b:59:c8:9d:f1:cf:b8:c7:c2:ac:31:d7:65:94:
4b:e5:10:5c:e2:5f:b0:3f:f6:ab:58:96:e9:f6:a7:
07:d1:a1:8d:3b:53:d7:86:f9:ee:ed:dc:eb:7a:94:
4e:42:f0:f2:a0:c9:e2:dd:f0:8d:48:0e:39:21:30:
6a:34:3d:c3:70:23:f0:80:c4:68:d2:bd:2c:42:6c:
3b:72:9b:15:73:77:32:cc:6f:e3:86:9c:59:d4:86:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DF:7E:EA:B4:94:70:7E:A1:50:5F:7C:09:12:37:31:DA:80:0F:72
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/mt9-6rSUcH6hUF98CRI3MdqAD3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:f3:ee:6e:74:e3:a1:ea:ec:70:a1:33:f1:60:8c:75:63:76:
a6:3c:d2:fe:3c:f6:cf:55:50:a7:82:51:27:fa:c9:83:52:f4:
e3:92:81:85:99:78:92:61:d6:a5:90:9e:54:fb:ee:5d:06:21:
c7:b1:4d:6f:e2:1d:04:e8:95:d3:22:ce:f4:48:39:38:b3:13:
78:7c:4b:f6:46:0c:fb:fe:27:64:55:b0:3b:95:0c:d1:04:1f:
66:dc:7e:87:f9:0e:e8:a3:2a:06:5a:75:f8:3a:9f:a4:4b:09:
55:1c:bd:c5:90:be:e8:0d:51:38:39:a0:07:4d:19:f3:cb:c7:
32:e3:90:a3:d1:14:e6:fd:33:6e:49:31:ac:ed:76:7f:2e:30:
22:a3:1f:06:02:a6:bf:57:5b:61:a1:46:d1:59:f5:19:6d:17:
7f:6d:b2:7e:1a:d9:0b:49:e0:23:62:3f:18:5a:7c:c6:2e:b5:
f2:a9:bd:d4:ab:4f:47:1e:9a:09:6b:87:04:03:e7:39:ef:2c:
7d:13:aa:7e:ae:eb:14:35:7c:a9:31:73:6e:55:96:2e:30:37:
3e:a6:3b:21:33:67:76:75:4b:83:c0:7c:0b:e3:84:63:bf:1c:
1e:c6:a8:f3:a1:d1:18:29:aa:89:3a:b1:ec:d8:56:a3:20:88:
fa:aa:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:38:15 2025 by rpki-client